-
Type:
Bug
-
Status: Resolved
-
Priority:
Minor
-
Resolution: Fixed
-
Affects Version/s: 4.0.0
-
Fix Version/s: 4.0.1
-
Tags:
-
Sprint:nxDrive 10.10.1
-
Story Points:0
Running bandit -r nxdrive highlights this security issue:
>> Issue: [B303:blacklist] Use of insecure MD2, MD4, MD5, or SHA1 hash function.
Severity: Medium Confidence: High
Location: nxdrive/objects.py:165
More Info: https://bandit.readthedocs.io/en/latest/blacklists/blacklist_calls.html#b303-md5
164 else:
165 m = hashlib.md5()
166 m.update(note.encode("utf-8"))
Even if this is not crucial, we can simple swith to SHA256.
