pypi package report

Is pypqc safe?

2 known vulnerabilities, worst severity HIGH.

cvss

7.5

how bad it is if exploited, out of 10

epss

not scored

chance of exploitation in the next 30 days

xyz score

3.3

CyberXYZ composite, out of 10

fig. 01 — GHSA-hvh4-5qr6-3v7r, the advisory selected below

// advisories

GHSA-hvh4-5qr6-3v7r

HIGH

kyber512, kyber768, and kyber1024 on Mac OS \(or when compiled with clang\) only: An attacker able to submit many decapsulation requests against a single private key, and to gain timing information about the decapsulation, could recover the private key. Proof-of-concept exploit exists for a local attacker.

Affected: >= 0.0.4, <= 0.0.6.2
Fixed in: not stated
Weakness: CWE-385
Published: 2024-06-05
Source: github

GHSA reference reference

// dependencies

0 direct

// ai model usage

No published models are known to use this package.

Checked 2026-09-22 at 00:47 UTC. The most recent advisory here was published 2024-06-05. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Is pypqc safe? pypi package security report | CyberXYZ