pyca vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 20241
3. 20268

Newest CVEs

• CVE-2026-69249

  python-cryptography: Duplicate self-signed intermediates can cause exponential path-building

  pyca · cryptography

  High8.7
• CVE-2026-69248

  python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees

  pyca · cryptography

  Medium6.9
• CVE-2026-69247

  cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing

  pyca · cryptography

  High8.2
• CVE-2026-39892

  cryptography has a buffer overflow if non-contiguous buffers were passed to APIs

  pyca · cryptography

  Medium6.9
• CVE-2026-34073

  cryptography has incomplete DNS name constraint enforcement on peer names

  pyca · cryptography

  Low1.7
• CVE-2026-27459

  pyOpenSSL DTLS cookie callback buffer overflow

  pyca · pyopenssl

  High7.2
• CVE-2026-27448

  pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback

  pyca · pyopenssl

  Low1.7
• CVE-2026-26007

  cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves

  pyca · cryptography

  High8.2
• CVE-2024-26130

  cryptography NULL pointer deference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override

  pyca · cryptography

  High7.5
• CVE-2023-49083

  cryptography vulnerable to NULL-dereference when loading PKCS7 certificates

  pyca · cryptography

  Medium5.9