CVE-2024-56327

The pyrage Python bindings for the age encryption library are vulnerable to arbitrary binary execution due to insufficient validation of plugin names. The underlying cause stems from a vulnerability in the Rust age crate (GHSA-4fg7-vxc8-qx5w ). An attacker can trigger this by supplying a crafted ...