Pyca

8 CVEs across 2 Pyca products. Browse Pyca vulnerabilities, severities, and proof-of-concept exploits.

Pyca products with known CVEs

ProductCVEs
Cryptography9
Pyopenssl2
Pyca CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-692492026-08-03python-cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 49.0.0, when resolving invalid certific…
CVE-2026-692482026-08-03cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 49.0.0, if an intermediate constrained CA perm…
CVE-2026-692472026-08-03cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 44.0.0 until 50.0.0, pkcs7_decrypt_der, pkcs7_decr…
CVE-2026-39892Critical9.82026-04-08cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a non-contiguous buffe…
CVE-2026-34073Medium5.32026-03-31cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to version 46.0.6, DNS name constraints were only…
CVE-2026-27459Critical9.82026-03-18pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to `set_cookie_ge…
CVE-2026-27448Medium5.32026-03-18pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to `set_tlsext_se…
CVE-2026-26007Medium6.52026-02-10cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 46.0.5, the public_key_from_numbers (or Ellipt…
CVE-2024-26130High7.52024-02-21cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Starting in version 38.0.0 and prior to version 42.0.4…
CVE-2023-49083Medium5.92023-11-29cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling `load_pem_pkcs7_certificates` or `load_der_pkcs…
CVE-2023-23931Medium4.82023-02-07cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions `Cipher.update_into` would accept…