PYSEC-2026-1779

See a problem?
Import Source
https://github.com/pypa/advisory-database/blob/main/vulns/pheonixappapi/PYSEC-2026-1779.yaml
JSON Data
https://api.osv.dev/v1/vulns/PYSEC-2026-1779
Aliases
Published
2026-07-07T14:34:38.210438Z
Modified
2026-07-07T17:48:01.192234284Z
Severity
  • 4.4 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N CVSS Calculator
  • 5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
PheonixAppAPI has visible Encoding Maps
Details

Impact

This is a kind of moderate issue. The impact is not big for normal users but can be for users who want to secure their code/files/etc.

The issue is that the map of encoding/decoding languages are visible in code.

Patches

The Problem was patched in 0.2.5, so you should try to upgrade to the 0.2.5 version.

For 0.2.5 version users

Please run the post_install.py file inside the Scripts folder after downloading from pip.

Workarounds

There is a fix to this problem but it requires modifying the code. Modifying the code can lead to more issues.

References

There are currently no references to this problem.

NOTE: If you get a error regarding a function like -> getkey() or something like that, please re-run the file postinstall.py inside Scripts folder

References

Affected packages

PyPI / pheonixappapi

Package

Name
pheonixappapi
View open source insights on deps.dev
Purl
pkg:pypi/pheonixappapi

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.2.5

Affected versions

0.*
0.0.1
0.0.1.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.6
0.0.7
0.0.8
0.0.8.1
0.0.9
0.1.1
0.1.2
0.1.3
0.2.0rc0
0.2.3
0.2.4rc0
0.2.4.2rc0

Database specific

source 
"https://github.com/pypa/advisory-database/blob/main/vulns/pheonixappapi/PYSEC-2026-1779.yaml"