PyPi: Hashers

PVE-2021-39643

Safety vulnerability ID: 39643

This vulnerability was reviewed by experts

The information on this page was manually curated by our Cybersecurity Intelligence Team.

Created at Apr 14, 2021 Updated at Dec 09, 2022

Advisory

Hashers 0.2.11 adds protection against time-attacks on string comparisons.

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

hashers

Latest version: 0.2.2

Password hashing library in Python using Rust backend

Affected versions

Fixed versions

Vulnerability changelog

Added - Added protection against time-attacks on string comparisons.

[This text has been limited. Please create a free account to view the full text.]

Resources