Skip to content
OpenAdvisories

Package · PyPI

cryptography

24 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 1.7
    CVE-2026-34073

    cryptography has incomplete DNS name constraint enforcement on peer names

    cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to version 46.0.6, DNS name constraints were only validated against SANs within child certificates, and not the "peer name" presented during each val…

    pyca cryptography airflow-3 kserve-storage-controller Debian Alpine Wolfi PyPI
  • Low —
    GHSA-v8gr-m533-ghj9

    Vulnerable OpenSSL included in cryptography wheels

    pyca/cryptography's wheels include a statically linked copy of OpenSSL. The versions of OpenSSL included in cryptography 2.5-41.0.3 are vulnerable to several security issues. More details about the vulnerabilities themselves can be found in https://www.openss…

    cryptography PyPI
  • Low —
    GHSA-jm77-qphf-c4w8

    pyca/cryptography's wheels include vulnerable OpenSSL

    pyca/cryptography's wheels include a statically linked copy of OpenSSL. The versions of OpenSSL included in cryptography 0.8-41.0.2 are vulnerable to several security issues. More details about the vulnerabilities themselves can be found in https://www.openss…

    cryptography PyPI
  • Low —
    GHSA-5cpq-8wj7-hf2v

    Vulnerable OpenSSL included in cryptography wheels

    pyca/cryptography's wheels include a statically linked copy of OpenSSL. The versions of OpenSSL included in cryptography 0.5-40.0.2 are vulnerable to a security issue. More details about the vulnerability itself can be found in https://www.openssl.org/news/se…

    cryptography PyPI