cryptography vulnerabilities — 42 matching vulnerabilities

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed — no installation and no source-code access required.

Scan your app free →

Severity	Vulnerability	Package	Ecosystem	Disclosed	Fixed version
6.9 medium	CVE-2026-69248: python-cryptography Wildcard DNS Name Vulnerability Allows Escape from Permitted Subtrees	`cryptography`	PyPI	04 Aug 2026	49.0.0
8.7 high	CVE-2026-69249: python-cryptography Exponential Path-Building Vulnerability Due to Duplicate Self-Signed Intermediates	`cryptography`	PyPI	04 Aug 2026	49.0.0
8.2 high	CVE-2026-69247: cryptography Package Vulnerability Exposing Bleichenbacher Oracle through Distinguishable Errors and Timing	`cryptography`	PyPI	04 Aug 2026	50.0.0
6.9 medium	CVE-2026-69248: python-cryptography Wildcard DNS Name Verification Bypass	`cryptography`	PyPI	03 Aug 2026	49.0.0
8.7 high	CVE-2026-69249: python-cryptography Exponential Path-Building Vulnerability Due to Duplicate Self-Signed Intermediates	`cryptography`	PyPI	03 Aug 2026	49.0.0
8.2 high	CVE-2026-69247: Cryptography Package Exposes Bleichenbacher Oracle Through Distinguishable Errors and Timing	`cryptography`	PyPI	03 Aug 2026	50.0.0
Unrated	CVE-2024-12797: Vulnerable OpenSSL in cryptography Package Versions 42.0.0-44.0.0	`cryptography`	PyPI	07 Jul 2026	44.0.1
7.5 high	CVE-2023-50782: Python Cryptography Package Vulnerable to Bleichenbacher Timing Oracle Attack	`cryptography`	PyPI	07 Jul 2026	42.0.0
5.5 medium	CVE-2024-0727: Cryptography Package Suffers Null Pointer Dereference in PKCS12 Parsing	`cryptography`	PyPI	07 Jul 2026	42.0.2
7.4 high	CVE-2023-0286: Vulnerable OpenSSL in cryptography Package	`cryptography`	PyPI	07 Jul 2026	39.0.1
7.5 high	Critical Vulnerability in cryptography Package Due to Statically Linked OpenSSL	`cryptography`	PyPI	15 Jun 2026	48.0.1
9.8 critical	CVE-2026-39892: Buffer Overflow Vulnerability in cryptography Package	`cryptography`	PyPI	08 Apr 2026	46.0.7
6.9 medium	CVE-2026-39892: Cryptography Package Buffer Overflow Vulnerability	`cryptography`	PyPI	08 Apr 2026	46.0.7
5.3 medium	CVE-2026-34073: Cryptography Package DNS Name Constraint Validation Flaw	`cryptography`	PyPI	31 Mar 2026	46.0.6
1.7 low	CVE-2026-34073: cryptography Package Suffers from Incomplete DNS Name Constraint Enforcement	`cryptography`	PyPI	27 Mar 2026	46.0.6
6.5 medium	CVE-2026-26007: cryptography Package Vulnerability in Public Key Validation	`cryptography`	PyPI	10 Feb 2026	46.0.5
High	CVE-2026-26007: cryptography Package Vulnerable to Subgroup Attack Due to Missing Subgroup Validation	`cryptography`	PyPI	10 Feb 2026	46.0.5
Low	CVE-2024-12797: Vulnerable OpenSSL in cryptography Package	`cryptography`	PyPI	11 Feb 2025	44.0.1
Medium	Vulnerability in pyca/cryptography package: OpenSSL inclusion	`cryptography`	PyPI	03 Sep 2024	43.0.1
7.5 high	CVE-2024-26130: Vulnerability in cryptography package - NULL pointer dereference	`cryptography`	PyPI	21 Feb 2024	42.0.4

Subscribe to Vulert on Telegram

Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.

Join the channel →

Questions

Searching the database

How do I search for a CVE or a package?

Type a CVE id, package name, ecosystem or keyword into the search field. Results include the severity, the affected package, the ecosystem, the disclosure date and the fixed version.

Can I filter by severity or by whether a fix exists?

Yes. The filters on the left narrow the list to critical, high, medium or low vulnerabilities, to a single ecosystem, and to vulnerabilities that have a fix available or none yet.

What does "No fix published" mean?

No patched version has been released for that vulnerability yet. The vulnerability page still shows the affected range and any workaround that can reduce exposure in the meantime.