Giters

tiran / pysha3

Backport of hashlib.sha3 for 2.7 to 3.5

Home Page:https://docs.python.org/3/library/hashlib.html

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Affected by CVE-2022-37454

stefanor opened this issue · comments

commented

Clearly this backport module is unmaintained these days. But there are still things using it (like https://github.com/opentimestamps/python-opentimestamps).

There was a security issue (CVE-2022-37454) found in the Keccak implementation bundled, see: python/cpython#98527

commented

Yes, this package is affected by the buffer overflow. However I'm retiring the project. Any project should use SHA-3 from Python's hashlib module instead.