CVE-2025-46833: Programs/P73_SimplePythonEncryption.py has weak cryptographic key
First published: Thu May 08 2025(Updated: )
Programs/P73_SimplePythonEncryption.py illustrates a simple Python encryption example using the RSA Algorithm. In versions prior to commit 6ce60b1, an attacker may be able to decrypt the data using brute force attacks and because of this the whole application can be impacted. This issue has been patched in commit 6ce60b1. A workaround involves increasing the key size, for RSA or DSA this is at least 2048 bits, for ECC this is at least 256 bits.
Credit: security-advisories@github.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Unknown Simple Python Encryption | <commit 6ce60b1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-46833?
CVE-2025-46833 has a moderate severity level due to the potential for brute force attacks to decrypt data.
How do I fix CVE-2025-46833?
To fix CVE-2025-46833, update the Simple Python Encryption application to at least commit 6ce60b1.
What applications are affected by CVE-2025-46833?
CVE-2025-46833 affects the Simple Python Encryption application in versions prior to commit 6ce60b1.
What vulnerabilities does CVE-2025-46833 expose?
CVE-2025-46833 exposes the application's cryptographic data to potential decryption by attackers.
Is there a way to mitigate CVE-2025-46833 without updating?
There is no reliable mitigation for CVE-2025-46833 other than updating to the fixed version.
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/title
- agent/weakness
- agent/description
- agent/type
- agent/first-publish-date
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/severity
- agent/last-modified-date
- agent/author
- agent/source
- agent/tags
- agent/event
- vendor/unknown
- canonical/unknown simple python encryption