navya-sriv issues

Repositories
Issues
Comments

Results 2 issues of


                                            navya-sriv

CVE-2024-23342, High level vulnerability

Hey guys, python-jose is affected by CVE-2024-23342 through its ecdsa dependency. The vulnerability stems from insufficient validation in ECDSA key handling, which could potentially allow signature forgery. Could you please...

CVE-2025-50817, High level vulnerability

Hi guys, It appears that bce-python-sdk is affected by CVE-2025-50817 due to its dependency on future. The vulnerability arises because future can automatically import a local test.py file, which could...