VIR Vulnerability Intelligence Relay

Package impact

python PyPI / cryptography

Severitycriticalhighmediumlowunknown
0
KEVHas exploit
Reset
CVE Severity CVSS Risk Published Description Impact
CVE-2026-26007 high — 8.0 24d ago Important: fence-agents security update redhatsusedebianpython
CVE-2024-12797 high — 8.0 1y ago Important: openssl security update redhatsuserockylinuxdebian+2
CVE-2024-26130 high — 8.0 2y ago Important: python3.12-cryptography security update redhatsuserockylinuxdebian+1
CVE-2016-9243 high 7.5 7.5 9y ago HKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less than algorithm.digest_size. ubuntufedoradebianpython
CVE-2023-49083 medium — 5.5 2y ago Moderate: python-cryptography security update redhatrockylinuxsusedebian+1
CVE-2024-0727 medium 5.5 5.5 2y ago Low: openssl and openssl-fips-provider security update redhatalmalinuxsuserockylinux+3
CVE-2023-23931 medium — 5.5 3y ago Moderate: python39:3.9 and python39-devel:3.9 security update redhatrockylinuxsusedebian+1
CVE-2023-0286 medium — 5.5 3y ago Moderate: openssl security and bug fix update redhatrockylinuxsusedebian+3
CVE-2020-36242 medium — 5.5 5y ago In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow, as demonstrate… archsuserockylinuxdebian+1
CVE-2020-25659 medium — 5.5 6y ago python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext. suserockylinuxdebianpython