GHSA-2vhw-q7vh-7xv2: openssl-encrypt's readiness endpoint leaks database error details to unauthenticated callers

April 1, 2026

The /ready endpoint in openssl_encrypt_server/server.py at lines 159-175 catches database errors and returns the full exception string in the response.

References

github.com/advisories/GHSA-2vhw-q7vh-7xv2
github.com/jahlives/openssl_encrypt
github.com/jahlives/openssl_encrypt/commit/7aa8787f4de2e9a23f58fca067bb16c4c69d28bb
github.com/jahlives/openssl_encrypt/security/advisories/GHSA-2vhw-q7vh-7xv2

Code Behaviors & Features

Detect and mitigate GHSA-2vhw-q7vh-7xv2 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →