CVE-2026-53720

NONE
CVSS v3
CVSS v2
0.13% EPSS (exploit probability)
CWE-122CWE

Description

pymonocypher uses cython to wrap the Monocypher C library. Prior to version 4.0.2.8, the argon2i_32 implementation does not check the nb_blocks size. If the caller does not provide a sufficiently large buffer based on the API contract, then argon2i_32 will write past the end of the buffer and possibly corrupt the heap. This issue has been patched in version 4.0.2.8.

Affected routers (0)

No routers currently mapped to this CVE in our database.

External references