pymonocypher
Python bindings for Monocypher crypto library.
View on Github
Activity
- Latest release
- 1mo ago
- Total releases
- 24
- Cadence
- ~34 days
- Last 12 months
- 9
Reach
- Stars
- 18
Details
- License
- BSD-2-Clause
- First release
- Oct 10, 2018
| Version | Released | |
|---|---|---|
4.0.3.3
patch
| ||
4.0.3.2
patch
| ||
4.0.3.1
patch
| ||
4.0.3.0
patch
| ||
4.0.2.8
patch
| ||
4.0.2.7
patch
1 CVE
CVE-2026-53720
PYSEC-2026-3000
GHSA-8f95-v3jq-cj86
Jul 13, 2026
pymonocypher: Potential heap buffer overflow on nb_blocks in argon2i_32 when provided buffer is too small
Medium
Local
Low
None
None
ImpactThe argon2i_32 implementation does not check the nb_blocks size. If the caller does not provide a sufficiently large buffer based on the API contract, then argon2i_32 will write past the end of the buffer and possibly corrupt the heap. PatchesFixed in 4.0.2.8, which now verifies that nb_blocks is large enough. See 90ff5b1. WorkaroundsProvide a correctly sized nb_blocks buffer. pymonocypher thanks Haris (hextheshadow) for the vulnerability report, details, and recommended fix. Affected versions
0.1.1
0.1.2
0.1.3
0.1.4
3.1.0.0
3.1.3.0
3.1.3.1
3.1.3.2
3.1.3.3
3.1.3.4
3.1.3.5
3.1.3.6
+ 7 more Show less
4.0.2.1
4.0.2.2
4.0.2.3
4.0.2.4
4.0.2.5
4.0.2.6
4.0.2.7
Fixed in
4.0.2.8
References
Updated Jul 13, 2026 · Source: OSV.dev | ||
3.1.3.6
patch
1 CVE
CVE-2026-53720
PYSEC-2026-3000
GHSA-8f95-v3jq-cj86
Jul 13, 2026
pymonocypher: Potential heap buffer overflow on nb_blocks in argon2i_32 when provided buffer is too small
Medium
Local
Low
None
None
ImpactThe argon2i_32 implementation does not check the nb_blocks size. If the caller does not provide a sufficiently large buffer based on the API contract, then argon2i_32 will write past the end of the buffer and possibly corrupt the heap. PatchesFixed in 4.0.2.8, which now verifies that nb_blocks is large enough. See 90ff5b1. WorkaroundsProvide a correctly sized nb_blocks buffer. pymonocypher thanks Haris (hextheshadow) for the vulnerability report, details, and recommended fix. Affected versions
0.1.1
0.1.2
0.1.3
0.1.4
3.1.0.0
3.1.3.0
3.1.3.1
3.1.3.2
3.1.3.3
3.1.3.4
3.1.3.5
3.1.3.6
+ 7 more Show less
4.0.2.1
4.0.2.2
4.0.2.3
4.0.2.4
4.0.2.5
4.0.2.6
4.0.2.7
Fixed in
4.0.2.8
References
Updated Jul 13, 2026 · Source: OSV.dev | ||
4.0.2.6
patch
1 CVE
CVE-2026-53720
PYSEC-2026-3000
GHSA-8f95-v3jq-cj86
Jul 13, 2026
pymonocypher: Potential heap buffer overflow on nb_blocks in argon2i_32 when provided buffer is too small
Medium
Local
Low
None
None
ImpactThe argon2i_32 implementation does not check the nb_blocks size. If the caller does not provide a sufficiently large buffer based on the API contract, then argon2i_32 will write past the end of the buffer and possibly corrupt the heap. PatchesFixed in 4.0.2.8, which now verifies that nb_blocks is large enough. See 90ff5b1. WorkaroundsProvide a correctly sized nb_blocks buffer. pymonocypher thanks Haris (hextheshadow) for the vulnerability report, details, and recommended fix. Affected versions
0.1.1
0.1.2
0.1.3
0.1.4
3.1.0.0
3.1.3.0
3.1.3.1
3.1.3.2
3.1.3.3
3.1.3.4
3.1.3.5
3.1.3.6
+ 7 more Show less
4.0.2.1
4.0.2.2
4.0.2.3
4.0.2.4
4.0.2.5
4.0.2.6
4.0.2.7
Fixed in
4.0.2.8
References
Updated Jul 13, 2026 · Source: OSV.dev | ||
3.1.3.5
patch
1 CVE
CVE-2026-53720
PYSEC-2026-3000
GHSA-8f95-v3jq-cj86
Jul 13, 2026
pymonocypher: Potential heap buffer overflow on nb_blocks in argon2i_32 when provided buffer is too small
Medium
Local
Low
None
None
ImpactThe argon2i_32 implementation does not check the nb_blocks size. If the caller does not provide a sufficiently large buffer based on the API contract, then argon2i_32 will write past the end of the buffer and possibly corrupt the heap. PatchesFixed in 4.0.2.8, which now verifies that nb_blocks is large enough. See 90ff5b1. WorkaroundsProvide a correctly sized nb_blocks buffer. pymonocypher thanks Haris (hextheshadow) for the vulnerability report, details, and recommended fix. Affected versions
0.1.1
0.1.2
0.1.3
0.1.4
3.1.0.0
3.1.3.0
3.1.3.1
3.1.3.2
3.1.3.3
3.1.3.4
3.1.3.5
3.1.3.6
+ 7 more Show less
4.0.2.1
4.0.2.2
4.0.2.3
4.0.2.4
4.0.2.5
4.0.2.6
4.0.2.7
Fixed in
4.0.2.8
References
Updated Jul 13, 2026 · Source: OSV.dev | ||
3.1.3.4
patch
1 CVE
CVE-2026-53720
PYSEC-2026-3000
GHSA-8f95-v3jq-cj86
Jul 13, 2026
pymonocypher: Potential heap buffer overflow on nb_blocks in argon2i_32 when provided buffer is too small
Medium
Local
Low
None
None
ImpactThe argon2i_32 implementation does not check the nb_blocks size. If the caller does not provide a sufficiently large buffer based on the API contract, then argon2i_32 will write past the end of the buffer and possibly corrupt the heap. PatchesFixed in 4.0.2.8, which now verifies that nb_blocks is large enough. See 90ff5b1. WorkaroundsProvide a correctly sized nb_blocks buffer. pymonocypher thanks Haris (hextheshadow) for the vulnerability report, details, and recommended fix. Affected versions
0.1.1
0.1.2
0.1.3
0.1.4
3.1.0.0
3.1.3.0
3.1.3.1
3.1.3.2
3.1.3.3
3.1.3.4
3.1.3.5
3.1.3.6
+ 7 more Show less
4.0.2.1
4.0.2.2
4.0.2.3
4.0.2.4
4.0.2.5
4.0.2.6
4.0.2.7
Fixed in
4.0.2.8
References
Updated Jul 13, 2026 · Source: OSV.dev | ||
4.0.2.5
patch
1 CVE
CVE-2026-53720
PYSEC-2026-3000
GHSA-8f95-v3jq-cj86
Jul 13, 2026
pymonocypher: Potential heap buffer overflow on nb_blocks in argon2i_32 when provided buffer is too small
Medium
Local
Low
None
None
ImpactThe argon2i_32 implementation does not check the nb_blocks size. If the caller does not provide a sufficiently large buffer based on the API contract, then argon2i_32 will write past the end of the buffer and possibly corrupt the heap. PatchesFixed in 4.0.2.8, which now verifies that nb_blocks is large enough. See 90ff5b1. WorkaroundsProvide a correctly sized nb_blocks buffer. pymonocypher thanks Haris (hextheshadow) for the vulnerability report, details, and recommended fix. Affected versions
0.1.1
0.1.2
0.1.3
0.1.4
3.1.0.0
3.1.3.0
3.1.3.1
3.1.3.2
3.1.3.3
3.1.3.4
3.1.3.5
3.1.3.6
+ 7 more Show less
4.0.2.1
4.0.2.2
4.0.2.3
4.0.2.4
4.0.2.5
4.0.2.6
4.0.2.7
Fixed in
4.0.2.8
References
Updated Jul 13, 2026 · Source: OSV.dev | ||
4.0.2.4
patch
1 CVE
CVE-2026-53720
PYSEC-2026-3000
GHSA-8f95-v3jq-cj86
Jul 13, 2026
pymonocypher: Potential heap buffer overflow on nb_blocks in argon2i_32 when provided buffer is too small
Medium
Local
Low
None
None
ImpactThe argon2i_32 implementation does not check the nb_blocks size. If the caller does not provide a sufficiently large buffer based on the API contract, then argon2i_32 will write past the end of the buffer and possibly corrupt the heap. PatchesFixed in 4.0.2.8, which now verifies that nb_blocks is large enough. See 90ff5b1. WorkaroundsProvide a correctly sized nb_blocks buffer. pymonocypher thanks Haris (hextheshadow) for the vulnerability report, details, and recommended fix. Affected versions
0.1.1
0.1.2
0.1.3
0.1.4
3.1.0.0
3.1.3.0
3.1.3.1
3.1.3.2
3.1.3.3
3.1.3.4
3.1.3.5
3.1.3.6
+ 7 more Show less
4.0.2.1
4.0.2.2
4.0.2.3
4.0.2.4
4.0.2.5
4.0.2.6
4.0.2.7
Fixed in
4.0.2.8
References
Updated Jul 13, 2026 · Source: OSV.dev | ||
3.1.3.3
patch
1 CVE
CVE-2026-53720
PYSEC-2026-3000
GHSA-8f95-v3jq-cj86
Jul 13, 2026
pymonocypher: Potential heap buffer overflow on nb_blocks in argon2i_32 when provided buffer is too small
Medium
Local
Low
None
None
ImpactThe argon2i_32 implementation does not check the nb_blocks size. If the caller does not provide a sufficiently large buffer based on the API contract, then argon2i_32 will write past the end of the buffer and possibly corrupt the heap. PatchesFixed in 4.0.2.8, which now verifies that nb_blocks is large enough. See 90ff5b1. WorkaroundsProvide a correctly sized nb_blocks buffer. pymonocypher thanks Haris (hextheshadow) for the vulnerability report, details, and recommended fix. Affected versions
0.1.1
0.1.2
0.1.3
0.1.4
3.1.0.0
3.1.3.0
3.1.3.1
3.1.3.2
3.1.3.3
3.1.3.4
3.1.3.5
3.1.3.6
+ 7 more Show less
4.0.2.1
4.0.2.2
4.0.2.3
4.0.2.4
4.0.2.5
4.0.2.6
4.0.2.7
Fixed in
4.0.2.8
References
Updated Jul 13, 2026 · Source: OSV.dev | ||
4.0.2.3
patch
1 CVE
CVE-2026-53720
PYSEC-2026-3000
GHSA-8f95-v3jq-cj86
Jul 13, 2026
pymonocypher: Potential heap buffer overflow on nb_blocks in argon2i_32 when provided buffer is too small
Medium
Local
Low
None
None
ImpactThe argon2i_32 implementation does not check the nb_blocks size. If the caller does not provide a sufficiently large buffer based on the API contract, then argon2i_32 will write past the end of the buffer and possibly corrupt the heap. PatchesFixed in 4.0.2.8, which now verifies that nb_blocks is large enough. See 90ff5b1. WorkaroundsProvide a correctly sized nb_blocks buffer. pymonocypher thanks Haris (hextheshadow) for the vulnerability report, details, and recommended fix. Affected versions
0.1.1
0.1.2
0.1.3
0.1.4
3.1.0.0
3.1.3.0
3.1.3.1
3.1.3.2
3.1.3.3
3.1.3.4
3.1.3.5
3.1.3.6
+ 7 more Show less
4.0.2.1
4.0.2.2
4.0.2.3
4.0.2.4
4.0.2.5
4.0.2.6
4.0.2.7
Fixed in
4.0.2.8
References
Updated Jul 13, 2026 · Source: OSV.dev | ||
4.0.2.2
patch
1 CVE
CVE-2026-53720
PYSEC-2026-3000
GHSA-8f95-v3jq-cj86
Jul 13, 2026
pymonocypher: Potential heap buffer overflow on nb_blocks in argon2i_32 when provided buffer is too small
Medium
Local
Low
None
None
ImpactThe argon2i_32 implementation does not check the nb_blocks size. If the caller does not provide a sufficiently large buffer based on the API contract, then argon2i_32 will write past the end of the buffer and possibly corrupt the heap. PatchesFixed in 4.0.2.8, which now verifies that nb_blocks is large enough. See 90ff5b1. WorkaroundsProvide a correctly sized nb_blocks buffer. pymonocypher thanks Haris (hextheshadow) for the vulnerability report, details, and recommended fix. Affected versions
0.1.1
0.1.2
0.1.3
0.1.4
3.1.0.0
3.1.3.0
3.1.3.1
3.1.3.2
3.1.3.3
3.1.3.4
3.1.3.5
3.1.3.6
+ 7 more Show less
4.0.2.1
4.0.2.2
4.0.2.3
4.0.2.4
4.0.2.5
4.0.2.6
4.0.2.7
Fixed in
4.0.2.8
References
Updated Jul 13, 2026 · Source: OSV.dev | ||
4.0.2.1
major
1 CVE
CVE-2026-53720
PYSEC-2026-3000
GHSA-8f95-v3jq-cj86
Jul 13, 2026
pymonocypher: Potential heap buffer overflow on nb_blocks in argon2i_32 when provided buffer is too small
Medium
Local
Low
None
None
ImpactThe argon2i_32 implementation does not check the nb_blocks size. If the caller does not provide a sufficiently large buffer based on the API contract, then argon2i_32 will write past the end of the buffer and possibly corrupt the heap. PatchesFixed in 4.0.2.8, which now verifies that nb_blocks is large enough. See 90ff5b1. WorkaroundsProvide a correctly sized nb_blocks buffer. pymonocypher thanks Haris (hextheshadow) for the vulnerability report, details, and recommended fix. Affected versions
0.1.1
0.1.2
0.1.3
0.1.4
3.1.0.0
3.1.3.0
3.1.3.1
3.1.3.2
3.1.3.3
3.1.3.4
3.1.3.5
3.1.3.6
+ 7 more Show less
4.0.2.1
4.0.2.2
4.0.2.3
4.0.2.4
4.0.2.5
4.0.2.6
4.0.2.7
Fixed in
4.0.2.8
References
Updated Jul 13, 2026 · Source: OSV.dev | ||
3.1.3.2
patch
1 CVE
CVE-2026-53720
PYSEC-2026-3000
GHSA-8f95-v3jq-cj86
Jul 13, 2026
pymonocypher: Potential heap buffer overflow on nb_blocks in argon2i_32 when provided buffer is too small
Medium
Local
Low
None
None
ImpactThe argon2i_32 implementation does not check the nb_blocks size. If the caller does not provide a sufficiently large buffer based on the API contract, then argon2i_32 will write past the end of the buffer and possibly corrupt the heap. PatchesFixed in 4.0.2.8, which now verifies that nb_blocks is large enough. See 90ff5b1. WorkaroundsProvide a correctly sized nb_blocks buffer. pymonocypher thanks Haris (hextheshadow) for the vulnerability report, details, and recommended fix. Affected versions
0.1.1
0.1.2
0.1.3
0.1.4
3.1.0.0
3.1.3.0
3.1.3.1
3.1.3.2
3.1.3.3
3.1.3.4
3.1.3.5
3.1.3.6
+ 7 more Show less
4.0.2.1
4.0.2.2
4.0.2.3
4.0.2.4
4.0.2.5
4.0.2.6
4.0.2.7
Fixed in
4.0.2.8
References
Updated Jul 13, 2026 · Source: OSV.dev | ||
3.1.3.1
patch
1 CVE
CVE-2026-53720
PYSEC-2026-3000
GHSA-8f95-v3jq-cj86
Jul 13, 2026
pymonocypher: Potential heap buffer overflow on nb_blocks in argon2i_32 when provided buffer is too small
Medium
Local
Low
None
None
ImpactThe argon2i_32 implementation does not check the nb_blocks size. If the caller does not provide a sufficiently large buffer based on the API contract, then argon2i_32 will write past the end of the buffer and possibly corrupt the heap. PatchesFixed in 4.0.2.8, which now verifies that nb_blocks is large enough. See 90ff5b1. WorkaroundsProvide a correctly sized nb_blocks buffer. pymonocypher thanks Haris (hextheshadow) for the vulnerability report, details, and recommended fix. Affected versions
0.1.1
0.1.2
0.1.3
0.1.4
3.1.0.0
3.1.3.0
3.1.3.1
3.1.3.2
3.1.3.3
3.1.3.4
3.1.3.5
3.1.3.6
+ 7 more Show less
4.0.2.1
4.0.2.2
4.0.2.3
4.0.2.4
4.0.2.5
4.0.2.6
4.0.2.7
Fixed in
4.0.2.8
References
Updated Jul 13, 2026 · Source: OSV.dev | ||
3.1.3.0
patch
1 CVE
CVE-2026-53720
PYSEC-2026-3000
GHSA-8f95-v3jq-cj86
Jul 13, 2026
pymonocypher: Potential heap buffer overflow on nb_blocks in argon2i_32 when provided buffer is too small
Medium
Local
Low
None
None
ImpactThe argon2i_32 implementation does not check the nb_blocks size. If the caller does not provide a sufficiently large buffer based on the API contract, then argon2i_32 will write past the end of the buffer and possibly corrupt the heap. PatchesFixed in 4.0.2.8, which now verifies that nb_blocks is large enough. See 90ff5b1. WorkaroundsProvide a correctly sized nb_blocks buffer. pymonocypher thanks Haris (hextheshadow) for the vulnerability report, details, and recommended fix. Affected versions
0.1.1
0.1.2
0.1.3
0.1.4
3.1.0.0
3.1.3.0
3.1.3.1
3.1.3.2
3.1.3.3
3.1.3.4
3.1.3.5
3.1.3.6
+ 7 more Show less
4.0.2.1
4.0.2.2
4.0.2.3
4.0.2.4
4.0.2.5
4.0.2.6
4.0.2.7
Fixed in
4.0.2.8
References
Updated Jul 13, 2026 · Source: OSV.dev | ||
3.1.0.0
major
1 CVE
CVE-2026-53720
PYSEC-2026-3000
GHSA-8f95-v3jq-cj86
Jul 13, 2026
pymonocypher: Potential heap buffer overflow on nb_blocks in argon2i_32 when provided buffer is too small
Medium
Local
Low
None
None
ImpactThe argon2i_32 implementation does not check the nb_blocks size. If the caller does not provide a sufficiently large buffer based on the API contract, then argon2i_32 will write past the end of the buffer and possibly corrupt the heap. PatchesFixed in 4.0.2.8, which now verifies that nb_blocks is large enough. See 90ff5b1. WorkaroundsProvide a correctly sized nb_blocks buffer. pymonocypher thanks Haris (hextheshadow) for the vulnerability report, details, and recommended fix. Affected versions
0.1.1
0.1.2
0.1.3
0.1.4
3.1.0.0
3.1.3.0
3.1.3.1
3.1.3.2
3.1.3.3
3.1.3.4
3.1.3.5
3.1.3.6
+ 7 more Show less
4.0.2.1
4.0.2.2
4.0.2.3
4.0.2.4
4.0.2.5
4.0.2.6
4.0.2.7
Fixed in
4.0.2.8
References
Updated Jul 13, 2026 · Source: OSV.dev | ||
0.1.4
patch
1 CVE
CVE-2026-53720
PYSEC-2026-3000
GHSA-8f95-v3jq-cj86
Jul 13, 2026
pymonocypher: Potential heap buffer overflow on nb_blocks in argon2i_32 when provided buffer is too small
Medium
Local
Low
None
None
ImpactThe argon2i_32 implementation does not check the nb_blocks size. If the caller does not provide a sufficiently large buffer based on the API contract, then argon2i_32 will write past the end of the buffer and possibly corrupt the heap. PatchesFixed in 4.0.2.8, which now verifies that nb_blocks is large enough. See 90ff5b1. WorkaroundsProvide a correctly sized nb_blocks buffer. pymonocypher thanks Haris (hextheshadow) for the vulnerability report, details, and recommended fix. Affected versions
0.1.1
0.1.2
0.1.3
0.1.4
3.1.0.0
3.1.3.0
3.1.3.1
3.1.3.2
3.1.3.3
3.1.3.4
3.1.3.5
3.1.3.6
+ 7 more Show less
4.0.2.1
4.0.2.2
4.0.2.3
4.0.2.4
4.0.2.5
4.0.2.6
4.0.2.7
Fixed in
4.0.2.8
References
Updated Jul 13, 2026 · Source: OSV.dev | ||
0.1.3
patch
1 CVE
CVE-2026-53720
PYSEC-2026-3000
GHSA-8f95-v3jq-cj86
Jul 13, 2026
pymonocypher: Potential heap buffer overflow on nb_blocks in argon2i_32 when provided buffer is too small
Medium
Local
Low
None
None
ImpactThe argon2i_32 implementation does not check the nb_blocks size. If the caller does not provide a sufficiently large buffer based on the API contract, then argon2i_32 will write past the end of the buffer and possibly corrupt the heap. PatchesFixed in 4.0.2.8, which now verifies that nb_blocks is large enough. See 90ff5b1. WorkaroundsProvide a correctly sized nb_blocks buffer. pymonocypher thanks Haris (hextheshadow) for the vulnerability report, details, and recommended fix. Affected versions
0.1.1
0.1.2
0.1.3
0.1.4
3.1.0.0
3.1.3.0
3.1.3.1
3.1.3.2
3.1.3.3
3.1.3.4
3.1.3.5
3.1.3.6
+ 7 more Show less
4.0.2.1
4.0.2.2
4.0.2.3
4.0.2.4
4.0.2.5
4.0.2.6
4.0.2.7
Fixed in
4.0.2.8
References
Updated Jul 13, 2026 · Source: OSV.dev | ||
0.1.2
patch
1 CVE
CVE-2026-53720
PYSEC-2026-3000
GHSA-8f95-v3jq-cj86
Jul 13, 2026
pymonocypher: Potential heap buffer overflow on nb_blocks in argon2i_32 when provided buffer is too small
Medium
Local
Low
None
None
ImpactThe argon2i_32 implementation does not check the nb_blocks size. If the caller does not provide a sufficiently large buffer based on the API contract, then argon2i_32 will write past the end of the buffer and possibly corrupt the heap. PatchesFixed in 4.0.2.8, which now verifies that nb_blocks is large enough. See 90ff5b1. WorkaroundsProvide a correctly sized nb_blocks buffer. pymonocypher thanks Haris (hextheshadow) for the vulnerability report, details, and recommended fix. Affected versions
0.1.1
0.1.2
0.1.3
0.1.4
3.1.0.0
3.1.3.0
3.1.3.1
3.1.3.2
3.1.3.3
3.1.3.4
3.1.3.5
3.1.3.6
+ 7 more Show less
4.0.2.1
4.0.2.2
4.0.2.3
4.0.2.4
4.0.2.5
4.0.2.6
4.0.2.7
Fixed in
4.0.2.8
References
Updated Jul 13, 2026 · Source: OSV.dev | ||
0.1.1
initial
1 CVE
CVE-2026-53720
PYSEC-2026-3000
GHSA-8f95-v3jq-cj86
Jul 13, 2026
pymonocypher: Potential heap buffer overflow on nb_blocks in argon2i_32 when provided buffer is too small
Medium
Local
Low
None
None
ImpactThe argon2i_32 implementation does not check the nb_blocks size. If the caller does not provide a sufficiently large buffer based on the API contract, then argon2i_32 will write past the end of the buffer and possibly corrupt the heap. PatchesFixed in 4.0.2.8, which now verifies that nb_blocks is large enough. See 90ff5b1. WorkaroundsProvide a correctly sized nb_blocks buffer. pymonocypher thanks Haris (hextheshadow) for the vulnerability report, details, and recommended fix. Affected versions
0.1.1
0.1.2
0.1.3
0.1.4
3.1.0.0
3.1.3.0
3.1.3.1
3.1.3.2
3.1.3.3
3.1.3.4
3.1.3.5
3.1.3.6
+ 7 more Show less
4.0.2.1
4.0.2.2
4.0.2.3
4.0.2.4
4.0.2.5
4.0.2.6
4.0.2.7
Fixed in
4.0.2.8
References
Updated Jul 13, 2026 · Source: OSV.dev |