Browse CVEs

CRITICAL 9.8 CVE-2026-39892 cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a non-contig… Cryptography 46.0.7+ Fix from $2,3002026-04-08 MEDIUM 5.3 CVE-2026-34073 cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to version 46.0.6, DNS name constraints… Cryptography 46.0.6+ Fix from $1,6002026-03-31 MEDIUM 6.5 CVE-2026-26007 cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 46.0.5, the public_key_from_numbers … Cryptography 46.0.5+ Fix from $1,6002026-02-10 HIGH 7.5 CVE-2024-26130 cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Starting in version 38.0.0 and prior to versi… Cryptography 42.0.4+ Fix from $1,9502024-02-21 HIGH 7.5 CVE-2023-49083 cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling `load_pem_pkcs7_certificates` or `loa… Cryptography 41.0.6+ Fix from $1,9502023-11-29 HIGH 7.5 CVE-2023-38325 The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options. Cryptography 41.0.2+ Fix from $1,9502023-07-14 MEDIUM 6.5 CVE-2023-23931 cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions `Cipher.update_into` wou… Cryptography 39.0.1+ Fix from $1,6002023-02-07 CRITICAL 9.1 CVE-2020-36242EPSS 7% In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an in… Cryptography 3.3.2+ Fix from $2,3002021-02-07 MEDIUM 5.9 CVE-2020-25659 python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertex… Cryptography Patch available Fix from $1,6002021-01-11 HIGH 7.5 CVE-2016-9243 HKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less than algorithm.digest_size. Cryptography after 1.5.2 Fix from $1,9502017-03-27