-
Notifications
You must be signed in to change notification settings - Fork 1.5k
Security: pyca/cryptography
Security Navigation
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Vulnerable OpenSSL included in cryptography wheelsGHSA-h4gh-qq45-vh27 published
Sep 3, 2024 by alexModerate -
NULL pointer deference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash overrideGHSA-6vqw-3v5j-54x4 published
Feb 21, 2024 by alexModerate -
NULL-dereference when loading PKCS7 certificatesGHSA-jfhm-5ghh-2f97 published
Nov 27, 2023 by alexModerate -
Vulnerable OpenSSL included in cryptography wheelsGHSA-v8gr-m533-ghj9 published
Sep 19, 2023 by alexLow -
Vulnerable OpenSSL included in cryptography wheelsGHSA-jm77-qphf-c4w8 published
Aug 1, 2023 by alexLow -
Vulnerable OpenSSL included in cryptography wheelsGHSA-5cpq-8wj7-hf2v published
May 31, 2023 by alexLow -
Cipher.update_into can corrupt memory if passed an immutable python object as the outbufGHSA-w7pp-m8wf-vj6r published
Feb 7, 2023 by alexModerate -
Vulnerable OpenSSL included in cryptography wheelsGHSA-x4qr-2fvf-3mr5 published
Feb 7, 2023 by alexModerate -
Vulnerable OpenSSL included in cryptography wheelsGHSA-39hc-v87j-747x published
Nov 2, 2022 by alexModerate -
Symmetrically encrypting large values can lead to integer overflowGHSA-rhm9-p9w5-fwm7 published
Feb 7, 2021 by alexModerate