Resource exhaustion in Pyca Cryptography
CVE-2026-69249
python-cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 49.0.0, when resolving invalid certificate chains that include duplicate copies of self-signed certificates, the proces…
Vulnerability class: DoS (Denial of Service)
Affected products
- Pyca Cryptography — versions < 49.0.0
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)