Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/14 4:17 p.m.26 views

GHSA-CRQM-M339-7M2P pyzipper has an encryption bypass for small files encrypted using it

Impact A Python operator precedence bug in pyzipper/zipfileaes.py caused the AE-2 format to never be automatically selected during encryption, regardless of file size or compression type. As a result, all encrypted entries are written in AE-1 format unless AE-2 is explicitly forced by the caller...

6.2CVSS5.8AI score0.00087EPSS
SaveExploits0References3
Rows per page
Query Builder