CVE-2022-23472

Passeo is an open source python password generator. Versions prior to 1.0.5 rely on the python `random` library for random value selection. The python `random` library warns that it should not be used for security purposes due to its reliance on a non-cryptographically secure random number generator. As a result a motivated attacker may be able to guess generated passwords. This issue has been addressed in version 1.0.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.

• CWE-338

• https://github.com/ArjunSharda/Passeo/commit/8caa798b6bc4647dca59b2376204b6dc6176361aPatch, Third Party Advisory
• https://github.com/ArjunSharda/Passeo/security/advisories/GHSA-mhhf-vgwh-fw9hThird Party Advisory
• https://peps.python.org/pep-0506/Third Party Advisory
• https://github.com/ArjunSharda/Passeo/commit/8caa798b6bc4647dca59b2376204b6dc6176361aPatch, Third Party Advisory
• https://github.com/ArjunSharda/Passeo/security/advisories/GHSA-mhhf-vgwh-fw9hThird Party Advisory
• https://peps.python.org/pep-0506/Third Party Advisory

Published

Dec 6, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-23467OpenRazer is an open source driver and user-space daemon to …4.6
• CVE-2022-23468xrdp is an open source project which provides a graphical lo…9.8
• CVE-2022-23469Traefik is an open source HTTP reverse proxy and load balanc…6.5
• CVE-2022-2347There exists an unchecked length field in UBoot. The U-Boot …7.1
• CVE-2022-23470Galaxy is an open-source platform for data analysis. An arbi…7.5
• CVE-2022-23471containerd is an open source container runtime. A bug was fo…6.5
• CVE-2022-23473Tuleap is an Open Source Suite to improve management of soft…4.3
• CVE-2022-23474Editor.js is a block-style editor with clean JSON output. Ve…6.1
• CVE-2022-23475daloRADIUS is an open source RADIUS web management applicati…8.8
• CVE-2022-23476Nokogiri is an open source XML and HTML library for the Ruby…7.5
• CVE-2022-23477xrdp is an open source project which provides a graphical lo…9.8
• CVE-2022-23478xrdp is an open source project which provides a graphical lo…9.8