CR
Product
Cryptography
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 4Low 0
Watch
Add Cryptography to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-26007 | 6.5 | Feb 10 | cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves Affected: before 46.0.5 |
| CVE-2023-23931 | 6.5 | Feb 7 | cryptography is a package designed to expose cryptographic primitives and recipes to Python developers Affected: 1.8 before 39.0.1 |
| CVE-2020-25659 | 5.9 | Jan 11 | python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext Affected: 3.2 |
| CVE-2026-34073 | 5.3 | Mar 31 | cryptography has incomplete DNS name constraint enforcement on peer names Affected: before 46.0.6 |
Showing 4