Skip to content
OpenAdvisories

Package · Alpine

py3-cryptography

7 known vulnerabilities.

2 results · Clear filters · Feed

  • High 8.2

    cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves

    cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 46.0.5, the public_key_from_numbers (or EllipticCurvePublicNumbers.public_key()), EllipticCurvePublicNumbers.public_key(), load_der_public_key() a…

  • High 7.5

    cryptography mishandles SSH certificates

    The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options.