Skip to content
OpenAdvisories

Package · Debian

python-cryptography

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2020-36242

    PyCA Cryptography symmetrically encrypting large values can lead to integer overflow

    In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow, as demonstrated by the Fernet class.

    cryptography python-cryptography py3-cryptography Debian Alpine PyPI