CVE-2024-41951 PheonixAppAPI has visible Encoding Maps
Attackers can access internal encoding maps from the source code, potentially exposing sensitive logic or data structures.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-41951?
CVE-2024-41951 is a medium-severity vulnerability in AkshuDev PheonixAppAPI, published on 31 Jul 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Pheonix App is a Python application designed to streamline various tasks, from managing files to playing mini-games. The issue is that the map of encoding/decoding languages are visible in code. The Problem was patched in 0.2.4.
Weakness: CWE-323
Which versions are affected by CVE-2024-41951?
3 open source packages ship an affected version, including pheonixappapi and PheonixAppAPI.
| Package | Affected | Fixed in |
|---|---|---|
pheonixappapi PyPI | All versions | 0.2.5 |
pheonixappapi PyPI | All versions | 0.2.5 |
PheonixAppAPI PyPI | All versions | 0.2.5 |
How do I fix CVE-2024-41951?
Upgrade pheonixappapi to 0.2.5 or later.
Is CVE-2024-41951 being exploited?
There is no known exploitation of CVE-2024-41951 in the wild and no public exploit code.
Sources
Also known as GHSA-258h-f687-4226, PYSEC-2026-1779.