Skip to content
Pyca vulnerabilities
Newest
-
pyca cryptography
python-cryptography: Duplicate self-signed intermediates can cause exponential path-building
CVE-2026-69249
Fix available
8.7 High
-
pyca cryptography
python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees
CVE-2026-69248
Fix available
6.9 Medium
-
pyca cryptography
cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing
CVE-2026-69247
Fix available
8.2 High
-
cryptography.io cryptography, red hat lightspeed core, migration toolkit for applications 8 +28 more +30 more
cryptography has a buffer overflow if non-contiguous buffers were passed to APIs
CVE-2026-39892
Fix available
6.9 Medium
-
cryptography.io cryptography
cryptography has incomplete DNS name constraint enforcement on peer names
CVE-2026-34073
Fix available
1.7 Low
-
pyca pyopenssl, red hat confidential compute attestation, exploit intelligence +37 more +39 more
pyOpenSSL DTLS cookie callback buffer overflow
CVE-2026-27459
Fix available
7.2 High
-
pyca pyopenssl
pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback
CVE-2026-27448
Fix available
1.7 Low
-
cryptography.io cryptography, red hat openshift lightspeed, advanced cluster management for kubernetes 2 +23 more +25 more
cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves
CVE-2026-26007
Fix available
8.2 High
-
cryptography.io cryptography
cryptography NULL pointer deference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override
CVE-2024-26130
Fix available
7.5 High
-
cryptography.io cryptography
cryptography vulnerable to NULL-dereference when loading PKCS7 certificates
CVE-2023-49083
Fix available
5.9 Medium
-
cryptography.io cryptography
Cipher.update_into can corrupt memory in pyca cryptography
CVE-2023-23931
Fix available
4.8 Medium