disclude.iorsa 4.9.1
- Source
- https://github.com/sybrenstuvel/python-rsa
- Artifact scanned
rsa-4.9.1-py3-none-any.whl- Compared with
rsa-4.9-py3-none-any.whl(9 signals introduced since)- Files
- 15 scanned, 5 skipped (binary, oversized, or unrecognised)
- Signals
- 0 critical · 0 warn · 9 info
- Scan time
- 5.5 s
- LLM review
- Reviewed by claude-haiku-5-5 (Anthropic): 9 of 9 warn and critical signals; 9 demoted to info.
- Disclude version
- 4.3.0
- Scanned (UTC)
- 2026-10-23 06:43
Signals
Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.
-
>>> >>> = >>> =likely benign Doctest example showing base64 DER decoding of an RSA key in the python-rsa library.Reasoning
The blob is a docstring example of a base64-encoded DER key in the python-rsa library, decoded with base64.standard_b64decode in a doctest. Legitimate documentation.
-
=likely benign ASN.1 DigestInfo prefix constants for hash algorithms in PKCS#1 signature padding.Reasoning
These are the standard DigestInfo ASN.1 prefixes for MD5 and SHA hash algorithms used in PKCS#1 v1.5 signatures. Byte-escape hex literals are the normal way to write such constants; the content is well-known public data.
-
: b, : b, : b,likely benign ASN.1 DigestInfo prefix constant for SHA-2 family hashes.Reasoning
Standard SHA-224/SHA-256 DigestInfo prefix bytes as used by PKCS#1 v1.5. Expected cryptographic constant table, not obfuscation.
-
: b, : b, : b,likely benign ASN.1 DigestInfo prefix constant for SHA-384.Reasoning
Standard SHA-384 DigestInfo prefix bytes within a legitimate hash-to-ASN.1 mapping table.
-
: b, : b, : b, }likely benign ASN.1 DigestInfo prefix constant for SHA-512.Reasoning
Standard SHA-512 DigestInfo prefix bytes within the same legitimate mapping table.
-
: b, : b, }likely benign End of the ASN.1 DigestInfo prefix table for hash algorithms.Reasoning
Closing entry of the standard hash DigestInfo table in python-rsa; no executable or hidden behavior.
-
likely benign ASN.1 DigestInfo prefix constants for SHA3-256 and SHA3-384.
Reasoning
SHA3 DigestInfo prefixes (OID 2.16.840.1.101.3.4.2.8 etc.) for the SHA3 family, added to the same legitimate table. Public standard constants.
-
: b, : b, : b,likely benign ASN.1 DigestInfo prefix constants for SHA3 hashes.Reasoning
Standard SHA3-256/384/512 DigestInfo prefix bytes; expected cryptographic data in a hash mapping.
-
: b, : b, } )likely benign End of the SHA3 DigestInfo prefix table.Reasoning
Final entries of the SHA3 DigestInfo table in python-rsa; benign static data.
Reproduce This Scan
Run disclude locally to verify. These commands scan the published file; the "new in this release" marks come from comparing it with the previous release's file, which they don't repeat. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.
|