Vulnerabilidades de pyca cryptography (CVE)

Registros CVE publicados para pyca cryptography, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

6 resultados
6.9Media
CVE-2026-39892

cryptography has a buffer overflow if non-contiguous buffers were passed to APIs

pyca cryptography; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9; Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a non-contiguous buffer was passed to APIs which accepted Python buffers (e.g. Hash.update()), this could lead to buffer o…

8.2Alta
CVE-2026-26007

cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves

pyca cryptography; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9; Red Hat Red Hat Enterprise Linux 8

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 46.0.5, the public_key_from_numbers (or EllipticCurvePublicNumbers.public_key()), EllipticCurvePublicNumbers.public_key(), load_der_public_key() a…