CVE-2026-81696

PYSEC-2026-3775 · CVE-2026-81696 · GHSA-539p-fxf4-7fv8

Published Aug 27, 2026 · Modified Sep 2, 2026

AI SAST

Find this class of vulnerability in your own code

Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.

Explore AI SAST Explore dependency scanning →

Description

openssl_encrypt versions before 1.4.9 fail to sanitize terminal control characters in file metadata printed by the info command. Attackers can craft malicious files containing escape sequences to repaint terminal output and forge verification information displayed to users.

References

ADVISORY https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-539p-fxf4-7fv8
ADVISORY https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-terminal-injection-via-info-command

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes

CVE-2026-81696

Description

References

More PyPI vulnerabilities

Start Securing