CVE-2026-53720: Pymonocypher Argon2 Missing Validation

Missing validation for `nb_blocks` parameter in Argon2 configuration. `nb_blocks` must be at least `nb_lanes * 8` to prevent a potential heap buffer overflow in the underlying C implementation. Ensure `nb_blocks` or the assigned variable is validated using an `if` or `assert` statement.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Generic
greprules fetch cve-2026-53720-pymonocypher-argon2-missing-validation --engine opengrep

Description

Missing validation for `nb_blocks` parameter in Argon2 configuration. `nb_blocks` must be at least `nb_lanes * 8` to prevent a potential heap buffer overflow in the underlying C implementation. Ensure `nb_blocks` or the assigned variable is validated using an `if` or `assert` statement.