Skip to content
OpenAdvisories

Package · Wolfi

in-toto

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.2
    CVE-2026-69247

    cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing

    cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 44.0.0 until 50.0.0, pkcs7_decrypt_der, pkcs7_decrypt_pem, and pkcs7_decrypt_smime reported the outcome of decrypting a RecipientInfo's encryptedKey i…

    pyca cryptography open-webui airflow-3 Debian Ubuntu Wolfi PyPI
  • High 8.2
    CVE-2026-26007

    cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves

    cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 46.0.5, the public_key_from_numbers (or EllipticCurvePublicNumbers.public_key()), EllipticCurvePublicNumbers.public_key(), load_der_public_key() a…

    pyca cryptography open-webui kubeflow-pipelines-apiserver Debian Ubuntu Azure Linux Alpine Wolfi PyPI