cryptography vulnerabilities (PyPI)
23 vulnerabilities.
-
cryptographyPyPI python-cryptography: Duplicate self-signed intermediates can cause exponential path-building 8.7 High -
cryptographyPyPI python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees 6.9 Medium -
cryptographyPyPI cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing 8.2 High -
cryptographyPyPI Vulnerable OpenSSL included in cryptography wheels 7.5 High -
cryptographyPyPI cryptography has a buffer overflow if non-contiguous buffers were passed to APIs 6.9 Medium -
cryptographyPyPI cryptography has incomplete DNS name constraint enforcement on peer names 1.7 Low -
cryptographyPyPI cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves 8.2 High -
cryptographyPyPI RFC7250 handshakes with unauthenticated servers don't abort as expected 6.3 Medium -
cryptographyPyPI cryptography NULL pointer deference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override 7.5 High -
cryptographyPyPI PKCS12 Decoding crashes 5.5 Medium -
cryptographyPyPI Python-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659 7.5 High -
cryptographyPyPI cryptography vulnerable to NULL-dereference when loading PKCS7 certificates 5.9 Medium -
cryptographyPyPI Vulnerable OpenSSL included in cryptography wheels No score -
cryptographyPyPI pyca/cryptography's wheels include vulnerable OpenSSL No score -
cryptographyPyPI cryptography mishandles SSH certificates 7.5 High -
cryptographyPyPI Vulnerable OpenSSL included in cryptography wheels No score -
cryptographyPyPI Cipher.update_into can corrupt memory in pyca cryptography 4.8 Medium -
cryptographyPyPI X.400 address type confusion in X.509 GeneralName 7.4 High -
cryptographyPyPI Vulnerable OpenSSL included in cryptography wheels No score -
cryptographyPyPI PyCA Cryptography symmetrically encrypting large values can lead to integer overflow 9.1 Critical -
cryptographyPyPI RSA decryption vulnerable to Bleichenbacher timing vulnerability 5.9 Medium -
cryptographyPyPI PyCA Cryptography vulnerable to GCM tag forgery 7.5 High -
cryptographyPyPI Improper input validation in cryptography 7.5 High