debian/python-bcrypt vulnerabilities

Latest debian/python-bcrypt CVEs

Newest publication first

1. CVE-2013-1895 Improper Restriction of Excessive Authentication Attempts in py-bcrypt

   Published 2020-01-28

   High·CVSS 7.5 EPSS 2.8%

   The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.