Lemur 0.1.4 does not use sufficient entropy in its IV when encrypting AES in CBC mode.
"https://github.com/pypa/advisory-database/blob/main/vulns/lemur/PYSEC-2017-50.yaml"