cryptography

PyPI · Package

24 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIsCVE-2026-39892 · GHSA-P423-J2CM-9VMQVersion ranges need review.	cryptography Lightspeed Core/openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9	PyPIRed Hat	Medium	Fix reported	2026-11-04
python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtreesCVE-2026-69248 · GHSA-M2H6-J472-RP4CVersion ranges need review.	cryptography Red Hat Ansible Automation Platform 2/python-cryptography	PyPIRed Hat	Medium	Fix reported	2026-09-24
python-cryptography: Duplicate self-signed intermediates can cause exponential path-buildingCVE-2026-69249 · GHSA-JWV3-5HGF-82WWVersion ranges need review.	cryptography Red Hat Ansible Automation Platform 2/ansible-automation-platform-26/controller-rhel9	PyPIRed Hat	High	Fix reported	2026-09-24
cryptography has incomplete DNS name constraint enforcement on peer namesCVE-2026-34073 · GHSA-M959-CC7F-WV43Version ranges need review.	cryptography Lightspeed Core/lightspeed-core/lightspeed-stack-rhel9	PyPIRed Hat	Low	Fix reported	2026-09-10
cryptography Vulnerable to a Subgroup Attack Due to Missing Subgroup Validation for SECT CurvesCVE-2026-26007 · GHSA-R6PH-V2QM-Q3C2Version ranges need review.	cryptography Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9	PyPIRed Hat	High	Fix reported	2026-09-10
cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timingCVE-2026-69247 · GHSA-G6CJ-PR64-35W5Version ranges need review.	cryptography Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9	PyPIRed Hat	High	Fix reported	2026-09-10
Vulnerable OpenSSL included in cryptography wheelsGHSA-537C-GMF6-5CCF	cryptography	PyPI	High	Fix reported	2026-09-10
Vulnerable OpenSSL included in cryptography wheelsCVE-2024-12797 · GHSA-79V4-65XG-PQ4GVersion ranges need review.	cryptography Red Hat Enterprise Linux 10/flatpak-sdk-container	PyPIRed Hat	Low	Fix reported	2026-09-10
pyca/cryptography has a vulnerable OpenSSL included in cryptography wheelsGHSA-H4GH-QQ45-VH27	cryptography	PyPI	Medium	Fix reported	2026-09-10
Null pointer dereference in PKCS12 parsingCVE-2024-0727 · GHSA-9V9H-CGJ8-H64PVersion ranges need review.	cryptography Red Hat Enterprise Linux 6/openssl	PyPIRed Hat	Medium	Fix reported	2026-09-10
cryptography NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash overrideCVE-2024-26130 · GHSA-6VQW-3V5J-54X4Version ranges need review.	cryptography	PyPI	High	Fix reported	2026-09-10
Python Cryptography package vulnerable to Bleichenbacher timing oracle attackCVE-2023-50782 · GHSA-3WW4-GG4F-JR7FVersion ranges need review.	cryptography Red Hat Enterprise Linux 7/python-cryptography	PyPIRed Hat	High	Fix reported	2026-09-10
Vulnerable OpenSSL included in cryptography wheelsGHSA-V8GR-M533-GHJ9	cryptography	PyPI	Low	Fix reported	2026-09-10
pyca/cryptography's wheels include vulnerable OpenSSLGHSA-JM77-QPHF-C4W8	cryptography	PyPI	Low	Fix reported	2026-09-10
Vulnerable OpenSSL included in cryptography wheelsGHSA-5CPQ-8WJ7-HF2V	cryptography	PyPI	Low	Fix reported	2026-09-10
cryptography vulnerable to NULL-dereference when loading PKCS7 certificatesCVE-2023-49083 · GHSA-JFHM-5GHH-2F97Version ranges need review.	cryptography Red Hat Certification for Red Hat Enterprise Linux 8/redhat-certification-baremetal-container	PyPIRed Hat	Medium	Fix reported	2026-09-10
cryptography mishandles SSH certificatesCVE-2023-38325 · GHSA-CF7P-GM2M-833MVersion ranges need review.	cryptography	PyPI	High	Fix reported	2026-09-10
Cipher.update_into can corrupt memory if passed an immutable python object as the outbufCVE-2023-23931 · GHSA-W7PP-M8WF-VJ6RVersion ranges need review.	cryptography Red Hat Discovery 1/discovery-server-container	PyPIRed Hat	Medium	Fix reported	2026-09-10
Vulnerable OpenSSL included in cryptography wheelsCVE-2023-0286 · GHSA-X4QR-2FVF-3MR5Version ranges need review.	openssl-src cryptography	Rust / CargoPyPIRed Hat	High	Fix reported	2026-09-10
PyCA Cryptography symmetrically encrypting large values can lead to integer overflowCVE-2020-36242 · GHSA-RHM9-P9W5-FWM7Version ranges need review.	cryptography Red Hat Ansible Automation Platform 1.2/cryptography	PyPIRed Hat	High	Fix reported	2025-02-15