Skip to content
Heist/ feed
Back to feed
Medium

Programs/P73_SimplePythonEncryption.py has weak cryptographic key

Type: advisorySources: OSV

Programs/P73_SimplePythonEncryption.py illustrates a simple Python encryption example using the RSA Algorithm. In versions prior to commit 6ce60b1, an attacker may be able to decrypt the data using brute force attacks and because of this the whole application can be impacted. This issue has been patched in commit 6ce60b1. A workaround involves increasing the key size, for RSA or DSA this is at least 2048 bits, for ECC this is at least 256 bits.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2025-46833
Confirmed fixed CVEs
Not specified
Updated in this feed
4 Nov 2026, 05:00 UTC · Revision 1

Source evidence

Programs/P73_SimplePythonEncryption.py has weak cryptographic key

core-osv · Original source

Published 8 May 2025, 19:27 UTC

Programs/P73_SimplePythonEncryption.py illustrates a simple Python encryption example using the RSA Algorithm. In versions prior to commit 6ce60b1, an attacker may be able to decrypt the data using brute force attacks and because of this the whole application can be impacted. This issue has been patched in commit 6ce60b1. A workaround involves increasing the key size, for RSA or DSA this is at least 2048 bits, for ECC this is at least 256 bits.

osv:CVE-2025-46833
Complete source record
{
  "id": "e3d8906dd3c9e965a5a777b7d47ed5e01d9b007a71afe1bf1f83e7d3e4cf3a2e",
  "url": "https://osv.dev/vulnerability/CVE-2025-46833",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "Programs/P73_SimplePythonEncryption.py has weak cryptographic key",
    "summary": "Programs/P73_SimplePythonEncryption.py illustrates a simple Python encryption example using the RSA Algorithm. In versions prior to commit 6ce60b1, an attacker may be able to decrypt the data using brute force attacks and because of this the whole application can be impacted. This issue has been patched in commit 6ce60b1. A workaround involves increasing the key size, for RSA or DSA this is at least 2048 bits, for ECC this is at least 256 bits.",
    "evidence": "osv:CVE-2025-46833",
    "products": [],
    "severity": "medium",
    "structured": {
      "id": "CVE-2025-46833",
      "aliases": [
        "CVE-2025-46833",
        "GHSA-5h26-2c6g-4ch4"
      ],
      "metrics": [
        {
          "type": "CVSS_V4",
          "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/shashikantsingh09/python-progrrames",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "6ce60b1"
                },
                {
                  "fixed": "6ce60b1b2116a579a2e89de96d738a98f6ad4f27"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "fixed": "6ce60b1"
                      }
                    ],
                    "source": "DESCRIPTION"
                  },
                  {
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "last_affected": "6ce60b1"
                      }
                    ],
                    "source": "DESCRIPTION"
                  },
                  {
                    "range": [
                      {
                        "fixed": "6ce60b1b2116a579a2e89de96d738a98f6ad4f27"
                      }
                    ],
                    "source": "REFERENCES_COMMIT"
                  }
                ]
              }
            }
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-46833.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:33.162285265Z",
      "provider": "osv",
      "references": [
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/46xxx/CVE-2025-46833.json",
        "https://github.com/ShashikantSingh09/python-progrrames/security/advisories/GHSA-5h26-2c6g-4ch4",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-46833",
        "https://github.com/ShashikantSingh09/python-progrrames/commit/6ce60b1b2116a579a2e89de96d738a98f6ad4f27"
      ],
      "provider_metadata": {
        "cwe_ids": [
          "CWE-326"
        ],
        "cna_assigner": "GitHub_M",
        "unresolved_ranges": [
          {
            "extracted_events": [
              {
                "range": [
                  {
                    "fixed": "6ce60b1"
                  }
                ],
                "source": "AFFECTED_FIELD",
                "strategy": "StringRangeExpression"
              }
            ]
          }
        ],
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/46xxx/CVE-2025-46833.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2025-46833",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 500423,
  "published_at": "2025-05-08T19:27:33.33+00:00"
}