https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T07:23:44.444833+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-380421 EUVD-2026-380421 2026-10-04T07:23:44.448456+00:00 EUVD-2026-380421 https://cve.radiocsirt.org/vuln/fkie_cve-2026-74874 fkie_cve-2026-74874 2026-10-04T07:23:44.448507+00:00

openssl_encrypt versions before 1.4.0 use Python's non-cryptographic random module for steganographic pixel selection in the generate_pseudorandom_sequence function. Attackers who know the password can recover the Mersenne Twister state from approximately 624 outputs and predict pixel locations containing hidden data for extraction.

 https://cve.radiocsirt.org/vuln/ghsa-844w-mwfp-wjwf GHSA-844w-mwfp-wjwf 2026-10-04T07:23:44.448561+00:00

openssl_encrypt versions before 1.4.0 use Python's non-cryptographic random module for steganographic pixel selection in the generate_pseudorandom_sequence function. Attackers who know the password can recover the Mersenne Twister state from approximately 624 outputs and predict pixel locations containing hidden data for extraction.

 https://cve.radiocsirt.org/vuln/pysec-2026-3754 PYSEC-2026-3754 2026-10-04T07:23:44.448591+00:00

Affected: PyPI: openssl-encrypt

openssl_encrypt versions before 1.4.0 use Python's non-cryptographic random module for steganographic pixel selection in the generate_pseudorandom_sequence function. Attackers who know the password can recover the Mersenne Twister state from approximately 624 outputs and predict pixel locations containing hidden data for extraction.