CR
Product
Cryptography
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 4Low 0
Watch
Add Cryptography to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-26130 | 7.5 | Feb 21 | cryptography NULL pointer deference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override Affected: 38.0.0 before 42.0.4 |
| CVE-2023-50782 | 7.5 | Feb 5 | Python-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659 Affected: before 42.0.0 |
| CVE-2023-49083 | 7.5 | Nov 29 | cryptography vulnerable to NULL-dereference when loading PKCS7 certificates Affected: 3.1 before 41.0.6 |
| CVE-2023-38325 | 7.5 | Jul 14 | The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options Affected: 40.0.0 before 41.0.2 |
| CVE-2016-9243 | 7.5 | Mar 27 | HKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less than algorithm.digest_size Affected: through 1.5.2 |
Showing 5
