pyca cryptography
9 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-69249 | >= 42.0.0, < 49.0.0 | python-cryptography: Duplicate self-signed intermediates can cause exponential path-building | HIGH 8.7 | 0.3 % | ||
| CVE-2026-69248 | < 49.0.0 | python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees | MEDIUM 6.9 | 0.2 % | ||
| CVE-2026-69247 | >= 44.0.0, < 50.0.0 | cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing | HIGH 8.2 | 0.3 % | ||
| CVE-2026-39892 | >= 45.0.0, < 46.0.7 | cryptography has a buffer overflow if non-contiguous buffers were passed to APIs | MEDIUM 6.9 | 0.7 % | ||
| CVE-2026-34073 | < 46.0.6 | cryptography has incomplete DNS name constraint enforcement on peer names | LOW 1.7 | 0.2 % | ||
| CVE-2026-26007 | < 46.0.5 | cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves | HIGH 8.2 | 0.4 % | ||
| CVE-2024-26130 | >= 38.0.0, < 42.0.4 | cryptography NULL pointer deference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private ke… | HIGH 7.5 | 0.8 % | ||
| CVE-2023-49083 | >= 3.1, < 41.0.6 | cryptography vulnerable to NULL-dereference when loading PKCS7 certificates | HIGH 7.5 | 1.0 % | ||
| CVE-2023-23931 | >=1.8, < 39.0.1 | Cipher.update_into can corrupt memory in pyca cryptography | MEDIUM 6.5 | 1.3 % |