Workflow

Cryptography

Latest version: v42.0.7

Vulnerabilities (36)

CVE/PVE Vulnerability ID Advisory Affected versions Severity Severity Score
PVE-2024-65647 65647

Cryptography version 42.0.5 introduces a limit on the number of name …
  • <42.0.5
 - -
CVE-2023-5678 65510

Cryptography starting from version 42.0.0 updates its CI configuratio…
  • <42.0.0
 MEDIUM 5.3
CVE-2023-50782 65278

A flaw was found in the python-cryptography package. This issue may a…
  • <42.0.0
 HIGH 7.5
CVE-2023-5363 62452

Cryptography 41.0.5 updates Windows, macOS, and Linux wheels to be co…
  • <41.0.5
 HIGH 7.5
CVE-2023-4807 62451

Cryptography 41.0.4 updates Windows, macOS, and Linux wheels to be co…
  • <41.0.4
 HIGH 7.8
CVE-2023-38325 59473

The cryptography package before 41.0.2 for Python mishandles SSH cert…
  • <41.0.2
 HIGH 7.5
CVE-2023-2650 59062

Cryptography 41.0.0 updates its dependency 'OpenSSL' to v3.1.1 to inc…
  • <41.0.0
 MEDIUM 6.5
CVE-2022-4304 53303

Cryptography 39.0.1 updates its dependency 'OpenSSL' to v3.0.8 to inc…
  • <39.0.1
 MEDIUM 5.9
CVE-2023-0286 53304

Cryptography 39.0.1 updates its dependency 'OpenSSL' to v3.0.8 to inc…
  • <39.0.1
 HIGH 7.4
CVE-2023-0216 53302

Cryptography 39.0.1 updates its dependency 'OpenSSL' to v3.0.8 to inc…
  • <39.0.1
 HIGH 7.5
CVE-2023-0215 53305

Cryptography 39.0.1 updates its dependency 'OpenSSL' to v3.0.8 to inc…
  • <39.0.1
 HIGH 7.5
CVE-2023-0401 53307

Cryptography 39.0.1 updates its dependency 'OpenSSL' to v3.0.8 to inc…
  • <39.0.1
 HIGH 7.5
CVE-2022-4450 53299

Cryptography 39.0.1 updates its dependency 'OpenSSL' to v3.0.8 to inc…
  • <39.0.1
 HIGH 7.5
CVE-2023-0217 53306

Cryptography 39.0.1 updates its dependency 'OpenSSL' to v3.0.8 to inc…
  • <39.0.1
 HIGH 7.5
CVE-2022-3996 53298

Cryptography 39.0.1 includes a fix for CVE-2022-3996, a DoS vulnerabi…
  • <39.0.1
 HIGH 7.5
CVE-2022-4203 53301

Cryptography 39.0.1 updates its dependency 'OpenSSL' to v3.0.8 to inc…
  • <39.0.1
 MEDIUM 4.9
CVE-2024-26130 66704

cryptography is a package designed to expose cryptographic primitives…
  • >=38.0.0,<42.0.4
 - -
CVE-2022-3602 52174

Cryptography versions from 37.0.0 and before 38.0.2 include a statica…
  • >=37.0.0,<38.0.3
 HIGH 7.5
CVE-2022-3786 52173

Cryptography versions from 37.0.0 and before 38.0.2 include a statica…
  • >=37.0.0,<38.0.3
 HIGH 7.5
CVE-2023-6237 66777

CVE-2023-6237 addresses a vulnerability in RSA public key verificatio…
  • >=35.0.0,<42.0.2
 - -
CVE-2023-6129 65212

Versions of Cryptograph starting from 35.0.0 are susceptible to a sec…
  • >=35.0.0,<42.0.2
 MEDIUM 6.5
CVE-2020-36242 39606

Cryptography 3.3.2 includes a fix for CVE-2020-36242: certain sequenc…
  • <3.3.2
 CRITICAL 9.1
PVE-2021-39252 39252

Cryptography 3.3 no longer allows loading of finite field Diffie-Hell…
  • <3.3
 HIDDEN X.Y
CVE-2020-25659 38932

Cryptography 3.2 and prior are vulnerable to Bleichenbacher timing at…
  • <=3.2
 MEDIUM 5.9
CVE-2023-49083 62556

Cryptography 41.0.6 includes a fix for CVE-2023-49083: NULL-dereferen…
  • >=3.1,<41.0.6
 HIGH 7.5
CVE-2017-3735 50724

Cryptography 2.1.3 updates Windows, macOS, and manylinux1 wheels to b…
  • <2.1.3
 MEDIUM 5.3
CVE-2017-3736 50725

Cryptography 2.1.3 updates Windows, macOS, and manylinux1 wheels to b…
  • <2.1.3
 MEDIUM 6.5
CVE-2018-10903 36351

A flaw was found in python-cryptography versions between >=1.9.0 and …
  • >=1.9.0,<2.3
 HIGH 7.5
CVE-2023-23931 53048

Cryptography 39.0.1 includes a fix for CVE-2023-23931: In affected ve…
  • >=1.8,<39.0.1
 MEDIUM 6.5
CVE-2016-9243 25680

Cryptography 1.5.3 includes a fix for CVE-2016-9243: HKDF in cryptogr…
  • <1.5.3
 HIGH 7.5
PVE-2021-25679 25679

Cryptography 1.0.2 fixes a vulnerability. The OpenSSL backend prior t…
  • <1.0.2
 HIDDEN X.Y
PVE-2021-25678 25678

Cryptography 0.9.1 fixes a double free in the OpenSSL backend when us…
  • <0.9.1
 HIDDEN X.Y
CVE-2023-2975 60224

Cryptography 41.0.3 updates its bundled OpenSSL version to include a…
  • >=0.8,<41.0.3
 MEDIUM 5.3
CVE-2023-3817 60223

Cryptography 41.0.3 updates its bundled OpenSSL version to include a …
  • >=0.8,<41.0.3
 MEDIUM 5.3
CVE-2023-3446 60225

Cryptography 41.0.3 updates its bundled OpenSSL version to include a …
  • >=0.8,<41.0.3
 MEDIUM 5.3
PVE-2024-99809 65984

Cryptography before 1.1 is susceptible to TLS truncation attacks. Thi…
  • >=0,<1.1
 - -