Priority LOW 38
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00677 · Published 2026-04-08 · Partial fix · 46.0.7 CWE-119
Priority LOW 9
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
CVSS 4.0LOW 1.7· Network · No auth · No interaction · EPSS 0.00227 · Published 2026-03-31 · Partial fix · 46.0.6 CWE-295
Priority LOW 36
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00384 · Published 2026-02-10 · Partial fix · 46.0.5 CWE-345
Priority MEDIUM 40
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00831 · Published 2024-02-21 · Fixed in 42.0.4 CWE-476
Priority HIGH 66
A flaw was found in the python-cryptography package.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01118 · Published 2024-02-05 · Partial fix · 42.0.0 CWE-203
Priority HIGH 66
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00985 · Published 2023-11-29 · Partial fix · 41.0.6 CWE-476
Priority HIGH 72
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00726 · Published 2023-07-14 · Fixed in 41.0.2 CWE-295
Priority MEDIUM 62
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.01301 · Published 2023-02-07 · Partial fix · 39.0.1 CWE-754
Priority MEDIUM 49
In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow, as demonstrated by the Fernet class…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.06799 · Published 2021-02-07 · Partial fix · 3.3.2 CWE-190
Priority LOW 31
python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.02463 · Published 2021-01-11 · Partial fix · 3.2 CWE-385
Priority LOW 39
HKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less than algorithm.digest_size.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03464 · Published 2017-03-27 · Partial fix · 1.5.3 CWE-20
THREATIST.IORead the docs