Vulnerabilities > Python > PY Bcrypt > 0.1

DATE CVE VULNERABILITY TITLE RISK
2020-01-28 CVE-2013-1895 Improper Restriction of Excessive Authentication Attempts vulnerability in multiple products
The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten.
network
low complexity
python fedoraproject CWE-307
5.0