awesome-python-login-model icon indicating copy to clipboard operation
awesome-python-login-model copied to clipboard

[Security] Hard-coded IV on AES CBC Encryption

Open spblue4422 opened this issue 4 months ago • 0 comments

Hi, while I'm reviewing your code, I noticed that you're using hard-coded key on AES encryption.

https://github.com/Kr1s77/awesome-python-login-model/blob/b458a09bf5542b52784bbba9861c4f3a82b2e45d/NeteaseCloudMusicDownload/api.py#L32-L40

When using AES CBC encryption, IV should be used random value for secure usage.

Update for this would be significantly helpful to security. We would appreciate it if you could review the code and proceed with the update if it is deemed insecure.

Thank you.

spblue4422 avatar May 30 '25 08:05 spblue4422