PyCryptodome and pycryptodomex before 3.19.1 allow side-channel leakage for OAEP decryption, exploitable for a Manger attack.

Pycryptodome version 3.11.0 includes a fix for the DSA construction algorithm. Modulus "p" primality check wasn't working.
https://github.com/Legrandin/pycryptodome/pull/557/commits/183f8d1c7a5e145e78b86fb54da7e327a277d9c6

Pycryptodome 3.20.0 addresses a vulnerability in the OAEP decryption process, which previously had a side-channel leakage issue. This vulnerability could potentially be exploited through a Manger attack, a type of cryptographic attack. The resolution of this issue enhances the security of the library, especially in its handling of OAEP decryption.
https://github.com/Legrandin/pycryptodome/commit/0deea1bfe1489e8c80d2053bbb06a1aa0b181ebd