| Package | Affected versions | Patched versions |
|---|---|---|
| rsa | < 3.3 | 3.3 |
| rsa | < 3.3 | 3.3 |
The verify function in the RSA package for Python (Python-RSA) before 3.3 allows attackers to spoof signatures with a small public exponent via crafted signature padding, aka a BERserk attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free