Cryptography.io Cryptography vulnerabilities

• cryptography.io cryptography, red hat lightspeed core, migration toolkit for applications 8 +28 more +30 more cryptography has a buffer overflow if non-contiguous buffers were passed to APIs CVE-2026-39892 Fix available 6.9 MediumApril 8, 2026
• cryptography.io cryptography cryptography has incomplete DNS name constraint enforcement on peer names CVE-2026-34073 Fix available 1.7 LowMarch 27, 2026
• cryptography.io cryptography, red hat openshift lightspeed, advanced cluster management for kubernetes 2 +23 more +25 more cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves CVE-2026-26007 Fix available 8.2 HighFebruary 10, 2026
• cryptography.io cryptography cryptography NULL pointer deference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override CVE-2024-26130 Fix available 7.5 HighFebruary 21, 2024
• couchbase server, cryptography.io cryptography, red hat ansible automation platform 2 +8 more +10 more Python-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659 CVE-2023-50782 Fix available 7.5 HighDecember 14, 2023
• cryptography.io cryptography cryptography vulnerable to NULL-dereference when loading PKCS7 certificates CVE-2023-49083 Fix available 5.9 MediumNovember 28, 2023
• cryptography.io cryptography cryptography mishandles SSH certificates CVE-2023-38325 Fix available 7.5 HighJuly 14, 2023
• cryptography.io cryptography Cipher.update_into can corrupt memory in pyca cryptography CVE-2023-23931 Fix available 4.8 MediumFebruary 7, 2023
• cryptography.io cryptography, fedoraproject fedora, oracle communications cloud native core network function cloud native environment +2 more PyCA Cryptography symmetrically encrypting large values can lead to integer overflow CVE-2020-36242 Fix available 9.1 CriticalFebruary 7, 2021
• [unknown] python-cryptography, cryptography.io cryptography, oracle communications cloud native core network function cloud native environment +2 more RSA decryption vulnerable to Bleichenbacher timing vulnerability CVE-2020-25659 Fix available 5.9 MediumOctober 27, 2020
• cryptography.io cryptography, canonical ubuntu linux, fedoraproject fedora +2 more Improper input validation in cryptography CVE-2016-9243 Fix available 7.5 HighNovember 9, 2016