Quantum Outpost

Public scan · 2026-05-01

pallets/itsdangerous

Safely pass trusted data to untrusted environments and back.

github → homepage → Python ★ 3,114 commit 672971d scanner v0.1.0

Files scanned

24

Shor-vulnerable

0

RSA / ECC / Ed* / X25519

Grover-weakened

2

AES-128 / SHA-1 / MD5

Total occurrences

2

Breakdown by primitive

  • SHA-1 (broken, replace with SHA-256) 2

Findings

download CycloneDX 1.6 CBOM →
src/itsdangerous/signer.py open ↗
  • L42 Grover SHA-1 (broken, replace with SHA-256) sha1 
    SHA-1, in which case the import and use as a default would fail before the
  • L52 Grover SHA-1 (broken, replace with SHA-256) sha1 
    #: SHA1, but can be changed to any other function in the hashlib