Product by Pyca
Cryptography
9 known vulnerabilities in Cryptography (Pyca), 0 of them actively exploited (CISA KEV).
Key figures
9
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-39892 | cryptography has a buffer overflow if non-contiguous buffers were passed to APIs | 9.8 | |
| High | CVE-2024-26130 | Pyca Cryptography: NULL Pointer Dereference | 7.5 | |
| High | CVE-2026-69249 | python-cryptography: Duplicate self-signed intermediates can cause exponential path-building | — | |
| High | CVE-2026-69247 | Pyca Cryptography: Observable Timing Discrepancy | — | |
| Medium | CVE-2023-23931 | Cipher.update_into can corrupt memory in pyca cryptography | 4.8 | |
| High | CVE-2023-49083 | cryptography vulnerable to NULL-dereference when loading PKCS7 certificates | 5.9 | |
| High | CVE-2026-26007 | cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves | 6.5 | |
| Medium | CVE-2026-69248 | python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees | — | |
| Medium | CVE-2026-34073 | cryptography has incomplete DNS name constraint enforcement on peer names | 5.3 |