What’s Vulnerable › Products

pyca cryptography vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your pyca cryptography version is affected

Latest pyca cryptography vulnerabilities

• CVE-2026-69249 — python-cryptography: Duplicate self-signed intermediates can cause exponential path-building (CVSS 8.7)
• CVE-2026-69248 — python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees (CVSS 6.9)
• CVE-2026-69247 — cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing (CVSS 8.2)
• CVE-2026-39892 — cryptography has a buffer overflow if non-contiguous buffers were passed to APIs (CVSS 9.8)
• CVE-2026-34073 — cryptography has incomplete DNS name constraint enforcement on peer names (CVSS 5.3)
• CVE-2026-26007 — cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves (CVSS 6.5)
• CVE-2024-26130 — cryptography NULL pointer deference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override (CVSS 7.5)
• CVE-2023-50782 — Python-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659 (CVSS 7.5)
• CVE-2023-49083 — cryptography vulnerable to NULL-dereference when loading PKCS7 certificates (CVSS 7.5)
• CVE-2023-38325 — (CVSS 7.5)
• CVE-2023-23931 — Cipher.update_into can corrupt memory in pyca cryptography (CVSS 6.5)
• CVE-2020-36242 — (CVSS 9.1)
• CVE-2020-25659 — (CVSS 5.9)
• CVE-2016-9243 — (CVSS 7.5)