Skip to content
OpenAdvisories

Package · Wolfi

py3-cryptography

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.4
    CVE-2024-12797

    RFC7250 handshakes with unauthenticated servers don't abort as expected

    Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a server may fail to notice that the server was not authenticated, because handshakes don't abort as expected when the SSL_VERIFY_PEER verification mode is set. Impact summary: TLS an…

    OpenSSL OpenSSL openssl openssl Debian Azure Linux Alpine Wolfi PyPI
  • High 7.5
    CVE-2024-26130

    cryptography NULL pointer deference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override

    cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Starting in version 38.0.0 and prior to version 42.0.4, if `pkcs12.serialize_key_and_certificates` is called with both a certificate whose public key did n…

    pyca cryptography py3-cassandra-medusa kubeflow-pipelines Debian Ubuntu Wolfi PyPI