Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Bluenix2

#31272of 53,635
8.2Total CVSS
Vulnerabilities · 1
PT-2022-16013
8.2
2022-12-06
Python · Random · CVE-2022-23472
**Name of the Vulnerable Software and Affected Versions** Passeo versions prior to 1.0.5 **Description** Passeo is an open source python password generator that relies on the python `random` library for random value selection in versions prior to 1.0.5. The python `random` library is not suitable for security purposes due to its non-cryptographically secure random number generator, which may allow a motivated attacker to guess generated passwords. **Recommendations** For versions prior to 1.0.5, upgrade to version 1.0.5, which addresses this issue by using the `secrets` library. It is also recommended to change any passwords generated with Passeo before version 1.0.5.