Medium severityNVD Advisory· Published Sep 3, 2026· Updated Sep 9, 2026
CVE-2026-53720
CVE-2026-53720
Description
pymonocypher uses cython to wrap the Monocypher C library. Prior to version 4.0.2.8, the argon2i_32 implementation does not check the nb_blocks size. If the caller does not provide a sufficiently large buffer based on the API contract, then argon2i_32 will write past the end of the buffer and possibly corrupt the heap. This issue has been patched in version 4.0.2.8.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
pymonocypherPyPI | < 4.0.2.8 | 4.0.2.8 |
Affected products
1- Range: <4.0.2.8
Patches
Vulnerability mechanics
References
4News mentions
0No linked articles in our index yet.