Safety vulnerability ID: 65746
The information on this page was manually curated by our Cybersecurity Intelligence Team.
Async-firebase version 3.6.2 has updated its cryptography dependency to version 42.0.4 in response to the security vulnerability identified as CVE-2023-4807.
Latest version: 3.8.0
Async Firebase Client - a Python asyncio client to interact with Firebase Cloud Messaging in an easy way.
* Resolve a couple of security concerns by updating `cryptography` package to `42.0.4`.
* [High] cryptography NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override
* [High] Python Cryptography package vulnerable to Bleichenbacher timing oracle attack
* [Moderate] Null pointer dereference in PKCS12 parsing
* [Moderate] cryptography vulnerable to NULL-dereference when loading PKCS7 certificates
Scan your Python project for dependency vulnerabilities in two minutes
Scan your application