Skip to content
OpenAdvisories

Vendor

pyca

11 known vulnerabilities.

Products

cryptography 9 pyopenssl 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 1.7
    CVE-2026-34073

    cryptography has incomplete DNS name constraint enforcement on peer names

    cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to version 46.0.6, DNS name constraints were only validated against SANs within child certificates, and not the "peer name" presented during each val…

    pyca cryptography cryptography python-cryptography Debian Alpine PyPI
  • Low 1.7
    CVE-2026-27448

    pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback

    pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to `set_tlsext_servername_callback` raised an unhandled exception, this would result in a connection being accepted. …

    pyca pyopenssl pyopenssl pyopenssl Debian Ubuntu Alpine PyPI