Vendor
Cryptography.io
11 known vulnerabilities in products by Cryptography.io, 0 of them actively exploited (CISA KEV).
Key figures
11
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2020-36242 | Cryptography.io Cryptography: Buffer Overflow | 9.1 | |
| High | CVE-2016-9243 | Cryptography.io Cryptography: security vulnerability | 7.5 | |
| Medium | CVE-2020-25659 | Python-cryptography: Covert Timing Channel | 5.9 | |
| Critical | CVE-2026-39892 | cryptography has a buffer overflow if non-contiguous buffers were passed to APIs | 9.8 | |
| High | CVE-2023-50782 | Python-cryptography: Observable Discrepancy | 7.5 | |
| High | CVE-2024-26130 | Pyca Cryptography: NULL Pointer Dereference | 7.5 | |
| Medium | CVE-2023-23931 | Cipher.update_into can corrupt memory in pyca cryptography | 4.8 | |
| High | CVE-2023-49083 | cryptography vulnerable to NULL-dereference when loading PKCS7 certificates | 5.9 | |
| High | CVE-2023-38325 | Cryptography.io Cryptography: security vulnerability | 7.5 | |
| High | CVE-2026-26007 | cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves | 6.5 | |
| Medium | CVE-2026-34073 | cryptography has incomplete DNS name constraint enforcement on peer names | 5.3 |
Products
| Cryptography.io Cryptography | 11 | 0 |