pypi

cryptography

31 Total advisories

31 Vulnerabilities

0 Malware

Dependency scanning

Check whether cryptography is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

cryptography

Vulnerabilities

Vulnerable OpenSSL included in cryptography wheels

CVE-2024-26130

cryptography NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override

CVE-2023-38325

Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIs

cryptography has incomplete DNS name constraint enforcement on peer names

CVE-2026-39892

CVE-2026-34073

Null pointer dereference in PKCS12 parsing

cryptography Vulnerable to a Subgroup Attack Due to Missing Subgroup Validation for SECT Curves

Cipher.update_into can corrupt memory if passed an immutable python object as the outbuf

Python Cryptography package vulnerable to Bleichenbacher timing oracle attack

CVE-2023-23931

Vulnerable OpenSSL included in cryptography wheels

pyca/cryptography's wheels include vulnerable OpenSSL

cryptography vulnerable to NULL-dereference when loading PKCS7 certificates

Vulnerable OpenSSL included in cryptography wheels

cryptography mishandles SSH certificates

Vulnerable OpenSSL included in cryptography wheels

pyca/cryptography has a vulnerable OpenSSL included in cryptography wheels

Vulnerable OpenSSL included in cryptography wheels

PyCA Cryptography symmetrically encrypting large values can lead to integer overflow

Vulnerable OpenSSL included in cryptography wheels

RSA decryption vulnerable to Bleichenbacher timing vulnerability

Improper input validation in cryptography

PyCA Cryptography vulnerable to GCM tag forgery

CVE-2023-49083

CVE-2020-36242

CVE-2020-25659

CVE-2018-10903

CVE-2016-9243

Browse more PyPI advisories

Start Securing