Threats tagged 'ghsa-97w9-v595-3h5q'

cryptidy versions up to 1.2.4 contain a vulnerability that allows code execution via untrusted data. This is due to the use of pickle.loads in the aes_decrypt_message function within symmetric_encryption.py, which can deserialize malicious input.