Package impact

python PyPI / cryptography

0
KEVHas exploit
Reset
CVE Severity CVSS Risk Flags OS Vendor Published Description
CVE-2026-26007 high 8.0 1mo ago RHSA-2026:12176: fence-agents security update (Important)
CVE-2024-12797 high 8.0 1y ago Important: openssl security update
CVE-2024-26130 high 8.0 2y ago Important: python3.12-cryptography security update
CVE-2023-0286 high 8.0 3y ago RHSA-2025:7895: compat-openssl10 security update (Important)
CVE-2016-9243 high 7.5 7.5 9y ago HKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less than algorithm.digest_size.
CVE-2023-49083 medium 5.5 2y ago RHSA-2025:14553: python-cryptography security update (Moderate)
CVE-2024-0727 medium 5.5 5.5 2y ago Low: openssl and openssl-fips-provider security update
CVE-2023-23931 medium 5.5 3y ago RHSA-2024:2985: python39:3.9 and python39-devel:3.9 security update (Moderate)
CVE-2020-36242 medium 5.5 5y ago RHSA-2021:1608: python-cryptography security, bug fix, and enhancement update (Moderate)
CVE-2020-25659 medium 5.5 6y ago RHSA-2021:1608: python-cryptography security, bug fix, and enhancement update (Moderate)
CVE-2026-39892 unknown 2mo ago cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a non-contiguous buffer was passed to APIs which accepted Pyth…
CVE-2026-34073 unknown 2mo ago cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to version 46.0.6, DNS name constraints were only validated against SANs within child cer…
CVE-2023-50782 unknown 2y ago A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confi…
CVE-2023-38325 unknown 3y ago The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options.
CVE-2018-10903 unknown 8y ago A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing…