[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2020-25659":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T08:55:32.481Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":31,"aliases":32,"duplicate_of":9,"upstream":35,"downstream":36,"duplicates":73,"related":74,"reserved_at":9,"published_at":86,"modified_at":87,"state":88,"summary":89,"references_raw":98,"kevs":151,"epss":152,"epss_history":155,"metrics":415,"affected":431},"CVE-2020-25659","python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext.",null,[11,18],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":9,"likelihood_of_exploit":9,"capec":17},"NVD-CWE-OTHER","Other","NVD uses this CWE ID when the weakness does not map to any existing CWE entry.","placeholder","NVD-Reserved",[],{"_key":19,"id":19,"name":20,"description":21,"type":22,"status":23,"abstraction":24,"likelihood_of_exploit":25,"capec":26},"CWE-385","Covert Timing Channel","Covert timing channels convey information by modulating some aspect of system behavior over time, so that the program receiving the information can observe system behavior and infer protected information.","weakness","Incomplete","Base","Medium",[27],{"id":28,"name":29,"techniques":30},"CAPEC-462","Cross-Domain Search Timing",[],[],[33,34],"GHSA-hggm-jpg3-v476","PYSEC-2021-62",[],[37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71],{"_key":38},"ALPINE-CVE-2020-25659",{"_key":40},"SUSE-SU-2020:3592-1",{"_key":42},"SUSE-SU-2020:3629-1",{"_key":44},"SUSE-SU-2023:0604-1",{"_key":46},"SUSE-SU-2023:2783-2",{"_key":48},"UBUNTU-CVE-2020-25659",{"_key":50},"USN-4613-1",{"_key":52},"SUSE-RU-2022:2355-1",{"_key":54},"SUSE-SU-2023:2783-1",{"_key":56},"OPENSUSE-SU-2020:2173-1",{"_key":58},"OPENSUSE-SU-2024:11223-1",{"_key":60},"OPENSUSE-SU-2024:13819-1",{"_key":62},"RHSA-2021:1608",{"_key":64},"SUSE-RU-2021:0985-1",{"_key":66},"RHSA-2021:3254",{"_key":68},"MGASA-2020-0438",{"_key":70},"DEBIAN-CVE-2020-25659",{"_key":72},"RHSA-2021:2239",[],[75,76,77,78,79,80,81,82,83,84,85],{"_key":40},{"_key":42},{"_key":44},{"_key":46},{"_key":52},{"_key":54},{"_key":56},{"_key":58},{"_key":60},{"_key":64},{"_key":68},"2021-01-11T15:37:29.000Z","2024-08-04T15:40:36.578Z","Modified",{"cisa_kev":90,"cisa_ransomware":90,"cisa_vendor":9,"epss_severity":91,"epss_score":92,"severity":93,"severity_score":94,"severity_version":95,"severity_source":96,"severity_vector":97,"severity_status":88},false,"low",0.0076,"medium",5.9,"v3.1","nvd","CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",[99,109,113,117,121,126,130,134,138,143,147],{"url":100,"sources":101,"tags":104},"https://github.com/pyca/cryptography/pull/5507/commits/ce1bef6f1ee06ac497ca0c837fbd1c7ef6c2472b",[102,96,103],"cve.org","osv_pypi",[105,106,107,108],"X Refsource MISC","Patch","Third Party Advisory","WEB",{"url":110,"sources":111,"tags":112},"https://www.oracle.com/security-alerts/cpuapr2022.html",[102,96,103],[105,106,107,108],{"url":114,"sources":115,"tags":116},"https://www.oracle.com/security-alerts/cpujul2022.html",[102,96,103],[105,106,107,108],{"url":118,"sources":119,"tags":120},"https://github.com/pyca/cryptography/security/advisories/GHSA-hggm-jpg3-v476",[103],[108],{"url":122,"sources":123,"tags":124},"https://nvd.nist.gov/vuln/detail/CVE-2020-25659",[103],[125],"Advisory",{"url":127,"sources":128,"tags":129},"https://github.com/pyca/cryptography/pull/5507",[103],[108],{"url":131,"sources":132,"tags":133},"https://github.com/pyca/cryptography/commit/58494b41d6ecb0f56b7c5f05d5f5e3ca0320d494",[103],[108],{"url":135,"sources":136,"tags":137},"https://github.com/advisories/GHSA-hggm-jpg3-v476",[103],[125],{"url":139,"sources":140,"tags":141},"https://github.com/pyca/cryptography",[103],[142],"PACKAGE",{"url":144,"sources":145,"tags":146},"https://github.com/pypa/advisory-database/tree/main/vulns/cryptography/PYSEC-2021-62.yaml",[103],[108],{"url":148,"sources":149,"tags":150},"https://pypi.org/project/cryptography",[103],[108],[],{"date":153,"score":92,"percentile":154},"2026-06-04",0.73704,[156,160,163,166,169,171,174,177,180,183,186,189,192,195,198,202,205,208,210,213,216,219,222,225,228,231,234,237,240,243,246,249,252,255,258,261,264,267,270,273,275,277,279,282,285,288,291,294,297,299,302,305,308,311,313,315,318,321,323,326,329,332,335,338,341,344,347,350,353,356,359,362,365,368,370,373,376,379,382,384,386,389,392,395,398,401,404,406,409,412],{"date":157,"score":158,"percentile":159},"2025-11-04",0.00252,0.48432,{"date":161,"score":158,"percentile":162},"2025-11-05",0.48413,{"date":164,"score":158,"percentile":165},"2025-11-06",0.48425,{"date":167,"score":158,"percentile":168},"2025-11-07",0.48454,{"date":170,"score":158,"percentile":168},"2025-11-08",{"date":172,"score":158,"percentile":173},"2025-11-09",0.48436,{"date":175,"score":158,"percentile":176},"2025-11-10",0.4841,{"date":178,"score":158,"percentile":179},"2025-11-11",0.48422,{"date":181,"score":158,"percentile":182},"2025-11-12",0.48449,{"date":184,"score":158,"percentile":185},"2025-11-13",0.48453,{"date":187,"score":158,"percentile":188},"2025-11-14",0.48466,{"date":190,"score":158,"percentile":191},"2025-11-15",0.48461,{"date":193,"score":158,"percentile":194},"2025-11-16",0.48446,{"date":196,"score":158,"percentile":197},"2025-11-17",0.4842,{"date":199,"score":200,"percentile":201},"2025-11-18",0.00465,0.61692,{"date":203,"score":200,"percentile":204},"2025-11-19",0.61708,{"date":206,"score":200,"percentile":207},"2025-11-20",0.61697,{"date":209,"score":158,"percentile":176},"2025-11-21",{"date":211,"score":158,"percentile":212},"2025-11-22",0.48408,{"date":214,"score":158,"percentile":215},"2025-11-23",0.48375,{"date":217,"score":158,"percentile":218},"2025-11-24",0.4836,{"date":220,"score":158,"percentile":221},"2025-11-25",0.48362,{"date":223,"score":158,"percentile":224},"2025-11-26",0.48361,{"date":226,"score":158,"percentile":227},"2025-11-27",0.48366,{"date":229,"score":158,"percentile":230},"2025-11-28",0.48336,{"date":232,"score":158,"percentile":233},"2025-11-29",0.48318,{"date":235,"score":158,"percentile":236},"2025-11-30",0.48305,{"date":238,"score":158,"percentile":239},"2025-12-01",0.4846,{"date":241,"score":158,"percentile":242},"2025-12-02",0.48476,{"date":244,"score":158,"percentile":245},"2025-12-03",0.48469,{"date":247,"score":158,"percentile":248},"2025-12-04",0.48304,{"date":250,"score":158,"percentile":251},"2025-12-05",0.48324,{"date":253,"score":158,"percentile":254},"2025-12-06",0.48326,{"date":256,"score":158,"percentile":257},"2025-12-07",0.48312,{"date":259,"score":158,"percentile":260},"2025-12-08",0.48316,{"date":262,"score":158,"percentile":263},"2025-12-09",0.48346,{"date":265,"score":158,"percentile":266},"2025-12-10",0.48409,{"date":268,"score":158,"percentile":269},"2025-12-11",0.48426,{"date":271,"score":158,"percentile":272},"2025-12-12",0.48451,{"date":274,"score":158,"percentile":173},"2025-12-13",{"date":276,"score":158,"percentile":165},"2025-12-14",{"date":278,"score":158,"percentile":212},"2025-12-15",{"date":280,"score":158,"percentile":281},"2025-12-16",0.48421,{"date":283,"score":158,"percentile":284},"2025-12-17",0.48445,{"date":286,"score":158,"percentile":287},"2025-12-18",0.48484,{"date":289,"score":158,"percentile":290},"2025-12-19",0.48488,{"date":292,"score":158,"percentile":293},"2025-12-20",0.48465,{"date":295,"score":158,"percentile":296},"2025-12-21",0.48441,{"date":298,"score":158,"percentile":197},"2025-12-22",{"date":300,"score":158,"percentile":301},"2025-12-23",0.48416,{"date":303,"score":158,"percentile":304},"2025-12-24",0.48427,{"date":306,"score":158,"percentile":307},"2025-12-25",0.48479,{"date":309,"score":158,"percentile":310},"2025-12-26",0.48467,{"date":312,"score":158,"percentile":290},"2025-12-27",{"date":314,"score":158,"percentile":266},"2025-12-28",{"date":316,"score":158,"percentile":317},"2025-12-29",0.4839,{"date":319,"score":158,"percentile":320},"2025-12-30",0.48385,{"date":322,"score":158,"percentile":269},"2025-12-31",{"date":324,"score":158,"percentile":325},"2026-01-01",0.48593,{"date":327,"score":158,"percentile":328},"2026-01-02",0.48572,{"date":330,"score":158,"percentile":331},"2026-01-03",0.48563,{"date":333,"score":158,"percentile":334},"2026-01-04",0.48383,{"date":336,"score":158,"percentile":337},"2026-01-05",0.48367,{"date":339,"score":158,"percentile":340},"2026-01-06",0.48373,{"date":342,"score":158,"percentile":343},"2026-01-07",0.48391,{"date":345,"score":158,"percentile":346},"2026-01-08",0.48414,{"date":348,"score":158,"percentile":349},"2026-01-09",0.48387,{"date":351,"score":158,"percentile":352},"2026-01-10",0.4838,{"date":354,"score":158,"percentile":355},"2026-01-11",0.48359,{"date":357,"score":158,"percentile":358},"2026-01-12",0.48319,{"date":360,"score":158,"percentile":361},"2026-01-13",0.48293,{"date":363,"score":158,"percentile":364},"2026-01-14",0.4834,{"date":366,"score":158,"percentile":367},"2026-01-15",0.48339,{"date":369,"score":158,"percentile":224},"2026-01-16",{"date":371,"score":158,"percentile":372},"2026-01-17",0.48338,{"date":374,"score":158,"percentile":375},"2026-01-18",0.4831,{"date":377,"score":158,"percentile":378},"2026-01-19",0.48285,{"date":380,"score":158,"percentile":381},"2026-01-20",0.48282,{"date":383,"score":158,"percentile":381},"2026-01-21",{"date":385,"score":158,"percentile":378},"2026-01-22",{"date":387,"score":158,"percentile":388},"2026-01-23",0.4833,{"date":390,"score":158,"percentile":391},"2026-01-24",0.48335,{"date":393,"score":158,"percentile":394},"2026-01-25",0.48286,{"date":396,"score":158,"percentile":397},"2026-01-26",0.48255,{"date":399,"score":158,"percentile":400},"2026-01-27",0.4826,{"date":402,"score":158,"percentile":403},"2026-01-28",0.48271,{"date":405,"score":158,"percentile":400},"2026-01-29",{"date":407,"score":158,"percentile":408},"2026-01-30",0.4827,{"date":410,"score":158,"percentile":411},"2026-01-31",0.48276,{"date":413,"score":158,"percentile":414},"2026-02-01",0.48419,[416,426],{"source":96,"cvss_v2_0":417,"cvss_v3_0":9,"cvss_v3_1":422,"cvss_v4_0":9},{"baseScore":418,"baseSeverity":9,"vectorString":419,"impactScore":420,"exploitabilityScore":421},4.3,"AV:N/AC:M/Au:N/C:P/I:N/A:N",2.9,8.6,{"baseScore":94,"baseSeverity":423,"vectorString":97,"impactScore":424,"exploitabilityScore":425},"MEDIUM",6,5.6,{"source":103,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":427,"cvss_v4_0":428},{"baseScore":94,"baseSeverity":9,"vectorString":97,"impactScore":424,"exploitabilityScore":425},{"baseScore":429,"baseSeverity":9,"vectorString":430,"impactScore":9,"exploitabilityScore":9},8.2,"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",[432,440,447],{"ecosystem":9,"name":433,"vendor":434,"product":433,"cpe_part":435,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":436},"cryptography","cryptography.io","a",[437],{"version":438,"is_range":90,"range_type":439,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"3.2","cpe",{"ecosystem":9,"name":441,"vendor":442,"product":443,"cpe_part":435,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":444},"communications cloud native core network function cloud native environment","oracle","communications_cloud_native_core_network_function_cloud_native_environment",[445],{"version":446,"is_range":90,"range_type":439,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"1.10.0",{"ecosystem":448,"name":433,"vendor":448,"product":433,"cpe_part":9,"purl_type":449,"purl_namespace":9,"purl_name":433,"source":9,"versions":450},"PyPI","pypi",[451,456],{"version":452,"is_range":453,"range_type":454,"version_start":9,"version_start_type":9,"version_end":438,"version_end_type":455,"fixed_in":9},"lt3_2",true,"ecosystem","excluding",{"version":457,"is_range":453,"range_type":454,"version_start":9,"version_start_type":9,"version_end":458,"version_end_type":455,"fixed_in":9},"lt3_2_1","3.2.1"]