cryptography.io cryptography Schwachstellen (CVE)

Für cryptography.io cryptography veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

3 Ergebnisse

6.9Mittel

CVE-2026-39892 vor 7 Monaten

cryptography has a buffer overflow if non-contiguous buffers were passed to APIs

pyca cryptography; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9; Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a non-contiguous buffer was passed to APIs which accepted Python buffers (e.g. Hash.update()), this could lead to buffer o…

1.7Niedrig

CVE-2026-34073 vor 7 Monaten

cryptography has incomplete DNS name constraint enforcement on peer names

pyca cryptography

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to version 46.0.6, DNS name constraints were only validated against SANs within child certificates, and not the "peer name" presented during each val…

8.2Hoch

CVE-2026-26007 vor 9 Monaten

cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves

pyca cryptography; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9; Red Hat Red Hat Enterprise Linux 8

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 46.0.5, the public_key_from_numbers (or EllipticCurvePublicNumbers.public_key()), EllipticCurvePublicNumbers.public_key(), load_der_public_key() a…