Vulnerability index

Browse CVEs

10 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Cryptography CRITICAL 9.8
CVE-2026-39892

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a non-contig…

Fix: 46.0.7+
Fix from $2,300 2026-04-08
Cryptography MEDIUM 5.3
CVE-2026-34073

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to version 46.0.6, DNS name constraints…

Fix: 46.0.6+
Fix from $1,600 2026-03-31
Cryptography MEDIUM 6.5
CVE-2026-26007

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 46.0.5, the public_key_from_numbers …

Fix: 46.0.5+
Fix from $1,600 2026-02-10
Cryptography HIGH 7.5
CVE-2024-26130

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Starting in version 38.0.0 and prior to versi…

Fix: 42.0.4+
Fix from $1,950 2024-02-21
Cryptography HIGH 7.5
CVE-2023-49083

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling `load_pem_pkcs7_certificates` or `loa…

Fix: 41.0.6+
Fix from $1,950 2023-11-29
Cryptography HIGH 7.5
CVE-2023-38325

The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options.

Fix: 41.0.2+
Fix from $1,950 2023-07-14
Cryptography MEDIUM 6.5
CVE-2023-23931

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions `Cipher.update_into` wou…

Fix: 39.0.1+
Fix from $1,600 2023-02-07
Cryptography CRITICAL 9.1
CVE-2020-36242EPSS 7%

In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an in…

Fix: 3.3.2+
Fix from $2,300 2021-02-07
Cryptography MEDIUM 5.9
CVE-2020-25659

python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertex…

Patch available
Fix from $1,600 2021-01-11
Cryptography HIGH 7.5
CVE-2016-9243

HKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less than algorithm.digest_size.

Fix: after 1.5.2
Fix from $1,950 2017-03-27