Pyca Cryptography vulnerabilities

• pyca cryptography python-cryptography: Duplicate self-signed intermediates can cause exponential path-building CVE-2026-69249 Fix available 8.7 HighAugust 3, 2026
• pyca cryptography python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees CVE-2026-69248 Fix available 6.9 MediumAugust 3, 2026
• pyca cryptography cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing CVE-2026-69247 Fix available 8.2 HighAugust 3, 2026
• cryptography.io cryptography, red hat lightspeed core, migration toolkit for applications 8 +28 more +30 more cryptography has a buffer overflow if non-contiguous buffers were passed to APIs CVE-2026-39892 Fix available 6.9 MediumApril 8, 2026
• cryptography.io cryptography cryptography has incomplete DNS name constraint enforcement on peer names CVE-2026-34073 Fix available 1.7 LowMarch 27, 2026
• cryptography.io cryptography, red hat openshift lightspeed, advanced cluster management for kubernetes 2 +23 more +25 more cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves CVE-2026-26007 Fix available 8.2 HighFebruary 10, 2026
• cryptography.io cryptography cryptography NULL pointer deference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override CVE-2024-26130 Fix available 7.5 HighFebruary 21, 2024
• cryptography.io cryptography cryptography vulnerable to NULL-dereference when loading PKCS7 certificates CVE-2023-49083 Fix available 5.9 MediumNovember 28, 2023
• cryptography.io cryptography Cipher.update_into can corrupt memory in pyca cryptography CVE-2023-23931 Fix available 4.8 MediumFebruary 7, 2023