Skip to content
OpenAdvisories

Package · Alpine

py3-cryptography

7 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 1.7

    cryptography has incomplete DNS name constraint enforcement on peer names

    cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to version 46.0.6, DNS name constraints were only validated against SANs within child certificates, and not the "peer name" presented during each val…