Python Cryptography package vulnerable to Bleichenbacher timing oracle attack

🗓️ 07 Jul 2026 11:45:32Reported by Python Packaging AdvisoryType

pypa🔗 github.com👁 4 Views

Python Cryptography suffers Bleichenbacher timing oracle enabling remote TLS RSA decryption.

Reporter	Title	Published	Views	Family All 152
ibm	Security Bulletin: Multiple Vulnerabilities in IBM Edge Application Manager	20 Aug 202502:37	–	ibm
ibm	Security Bulletin: Vulnerabilities exists in IBM Netezza Performance Server Replication Services	27 Feb 202619:55	–	ibm
ibm	Security Bulletin: Vulnerability in cryptography affects IBM Cloud Pak for Data System 2.0 (CPDS 2.0) [CVE-2023-0286, CVE-2023-50782]	20 Jun 202510:08	–	ibm
ibm	Security Bulletin: Vulnerabilities in cryptography and Jinja [CVE-2023-50782, CVE-2024-22195]	8 Apr 202412:54	–	ibm
ibm	Security Bulletin: IBM Maximo Application Suite uses cryptography-41.0.2-cp37-abi3-manylinux_2_28_x86_64.whl which is vulnerable to CVE-2023-50782	29 May 202406:30	–	ibm
ibm	Security Bulletin: Vulnerability in cryptography affects IBM Process Mining CVE-2023-50782	29 Mar 202410:42	–	ibm
ibm	Security Bulletin: IBM Truststore Manager uses cryptography-41.0.4-cp37-abi3-manylinux_2_28_x86_64.whl which is vulnerable to CVE-2023-50782	29 May 202414:52	–	ibm
ibm	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	10 Apr 202409:27	–	ibm
ibm	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to sensitive information exposure in Python Cryptographic Authority [CVE-2023-50782]	25 Apr 202418:31	–	ibm
ibm	Security Bulletin: Cryptography expose cryptographic primitives and recipes	1 Jul 202510:02	–	ibm

Vulners

Node

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-50782
github	www.github.com/pyca/cryptography/issues/9785
access	www.access.redhat.com/security/cve/CVE-2023-50782
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/pyca/cryptography
couchbase	www.couchbase.com/alerts
pypi	www.pypi.org/project/cryptography
github	www.github.com/advisories/GHSA-3ww4-gg4f-jr7f

07 Jul 2026 17:23Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.5

CVSS 48.7

EPSS0.01118

SSVC