esphome (>=2025.6.0b1, <=2026.2.4), espjhome (2025.7.5) potentially affected by CVE-2026-69249 via cryptography (45.0.1)

cryptography PYPI version 45.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - esphome =2025.6.0b1, =2026.2.4 - espjhome 2025.7.5 Source cves: CVE-2026-69249 Source advisory: OSV:PYSEC-2026-3553...

glpipci (>=0.1.0, <=0.1.4rc5), hermes-deployer (>=0.3.1, <=0.3.2) +7 more potentially affected by CVE-2026-69249 via cryptography (45.0.2)

cryptography PYPI version 45.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - glpipci =0.1.0, =0.3.1, =3.79.0, =0.32.6, =0.0.2, =3.6.1, =3.7.6 Source cves: CVE-2026-69249 Source advisory: OSV:PYSEC-2026-3553...

atsdk (>=0.2.39, <=0.2.40), awsidr (>=1.0.0, <=1.0.4) +15 more potentially affected by CVE-2026-69249 via cryptography (45.0.3)

cryptography PYPI version 45.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - atsdk =0.2.39, =1.0.0, =2.1.0rc1, =1.10.0, =2025.6.31548, =0.1.1, =6.0.0, =3.63.20, =0.5.0, =1.0.0, =0.1.0rc1, =1.0.0 and more Source...

appguard-runtime (>=0.0.1, <=0.0.2), asknews (>=0.11.18, <=0.13.11) +28 more potentially affected by CVE-2026-69249 via cryptography (45.0.4)

cryptography PYPI version 45.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - appguard-runtime =0.0.1, =0.11.18, =0.1.4, =1.1.51, =0.2.32, =0.0.1b1, =1.14.0, =1.7.0, =1.7.4 - linuxserverstatstelegrambot 1.0.8 and...

a2spa (>=0.1.1, <=0.1.4), arthexis (>=0.1.3, <=0.2.3) +47 more potentially affected by CVE-2026-69249 via cryptography (45.0.5)

cryptography PYPI version 45.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - a2spa =0.1.1, =0.1.3, =1.8.0, =1.8.0, =0.1.8, =0.2.12, =1.2.1, =4.4.4, =1.17.0, =1.21.0 and more Source cves: CVE-2026-69249 Source...

arkhai-hosted-settlement-client (0.4.2), arkhai-kit-hosted-settlement (0.1.4) +26 more potentially affected by CVE-2026-69249 via cryptography (45.0.6)

cryptography PYPI version 45.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - arkhai-hosted-settlement-client 0.4.2 - arkhai-kit-hosted-settlement 0.1.4 - atsdk =0.2.46, =1.0.0, =0.1.0, =1.0.0, =3.0.0, =0.1.0,...

1m-handshake (>=0.1.3, <=0.1.6), aae-protocol (0.9.0) +685 more potentially affected by CVE-2026-69249 via cryptography (45.0.7)

cryptography PYPI version 45.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - 1m-handshake =0.1.3, =2.4.119, =3.2.1, =0.2.0, =0.0.2, =0.1.0, =2.1.7, =1.3.9, =1.1.16, =0.4.0rc1, =0.4.3 and more Source cves:...

agent-nebula-platform (>=5.0.0, <=5.0.1), agent-nebula-sdk (>=5.0.0, <=5.0.2) +4 more potentially affected by CVE-2026-69249 via cryptography (46.0.0)

cryptography PYPI version 46.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - agent-nebula-platform =5.0.0, =5.0.0, =2.25.2, =2.2.0, =2.3.0 Source cves: CVE-2026-69249 Source advisory: OSV:PYSEC-2026-3553...

atsdk (0.2.50), auditize (>=0.7.0, <=0.7.1) +19 more potentially affected by CVE-2026-69249 via cryptography (46.0.1)

cryptography PYPI version 46.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - atsdk 0.2.50 - auditize =0.7.0, =3.0.0a1, =0.1.0, =2.8.0, =1.1.14, =1.26.0, =0.0.1b9, =0.8.25, =1.1.3, =3.7.4, =3.7.9 and more Source...

atsdk (0.2.51), eaasy (0.2.21) +26 more potentially affected by CVE-2026-69249 via cryptography (46.0.2)

cryptography PYPI version 46.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - atsdk 0.2.51 - eaasy 0.2.21 - ewccli =0.2.0, =25.1.0, =1.17.0rc1, =1.34.0, =0.1.75, =1.0.136, =1.0.153, =0.2.115, =0.3.164, =0.1.87,...

agentstack-cli (>=0.5.0rc4, <=0.6.0rc4), artifact-ddd (>=0.0.1, <=0.0.3) +106 more potentially affected by CVE-2026-69249 via cryptography (46.0.3)

cryptography PYPI version 46.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - agentstack-cli =0.5.0rc4, =0.0.1, =3.8.9, =0.8.0, =0.4.6, =1.1.56, =1.0.3, =4.7.0, =1.28.0rc1, =3.1.9, =3.1.52 and more Source cves:...

agentstack-cli (>=0.6.1rc1, <=0.6.1), asknews (>=0.13.12, <=0.13.34) +14 more potentially affected by CVE-2026-69249 via cryptography (46.0.4)

cryptography PYPI version 46.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - agentstack-cli =0.6.1rc1, =0.13.12, =0.4.1, =2.4.0, =1.2.1, =3.4.6, =1.0.0, =1.0.0, =1.0.9 - yente 5.2.0 and more Source cves:...

agentstack-cli (>=0.6.2rc2, <=0.7.1), amiibo-converter (0.2.0) +149 more potentially affected by CVE-2026-69249 via cryptography (46.0.5)

cryptography PYPI version 46.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - agentstack-cli =0.6.2rc2, =0.1.0, =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.1.3, =3.14.12, =3.1.0, =3.7.4 and more Source cves: CVE-2026-69249...

analogic-framework (4.1.102), app-reviews (>=0.1.0, <=0.4.0) +54 more potentially affected by CVE-2026-69249 via cryptography (46.0.6)

cryptography PYPI version 46.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - analogic-framework 4.1.102 - app-reviews =0.1.0, =0.13.35, =26.8.1, =26.8.1, =1.0.962, =1.1.0.dev20260326020353, =2.1.8rc4, =5.9.5,...

a2cr-mcp (>=0.1.0, <=0.1.7), abeewayconfig (1.1.2) +1133 more potentially affected by CVE-2026-69249 via cryptography (46.0.7)

cryptography PYPI version 46.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - a2cr-mcp =0.1.0, =2.17.2, =3.4.0, =1.0.1, =0.2.0, =0.1.1, =0.1.1, =0.1.1, =0.2.0 and more Source cves: CVE-2026-69249 Source advisory:...

acme2certifier (>=0.45.0.dev1, <=0.46.2), acmeeh (>=2.0.0, <=2.1.0) +122 more potentially affected by CVE-2026-69249 via cryptography (47.0.0)

cryptography PYPI version 47.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - acme2certifier =0.45.0.dev1, =2.0.0, =0.9.1, =3.3.0, =0.1.0, =0.3.0, =0.8.3, =2.69.0rc3, =2.7.2, =2.3.1, =0.4.9, =2.66.2, =2.82.0 and...

360solutions-bc-mcp (>=0.5.3, <=0.5.6), appyqt (>=1.0.0, <=1.0.1) +61 more potentially affected by CVE-2026-69249 via cryptography (48.0.0)

cryptography PYPI version 48.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - 360solutions-bc-mcp =0.5.3, =1.0.0, =0.1.0, =3.8.0, =1.1.0.dev20260505011637, =1.30.0, =1.10.1, =0.6.4b1, =0.6.4b2 - cowrie 3.0.0 -...

aegistry (>=0.1.0, <=0.2.0), aelix (0.1.0b2) +492 more potentially affected by CVE-2026-69249 via cryptography (48.0.1)

cryptography PYPI version 48.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - aegistry =0.1.0, =0.4.0, =2.1.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =0.50.0, =0.9.1, =1.0.0, =3.6.0, =1.0.0a1, =3.7.0 - agirails 4.8.0 and...

1m-handshake (>=0.1.3, <=0.1.6), 360solutions-bc-mcp (>=0.5.3, <=0.5.6) +3220 more potentially affected by CVE-2026-69247 via cryptography (>=44.0.0, <=49.0.0)

cryptography PYPI version =44.0.0, =0.1.3, =0.5.3, =2.3.0, =0.1.0, =0.1.1, =2.4.15, =0.45.0.dev1, =0.46.2 and more Source cves: CVE-2026-69247 Source advisory: OSV:PYSEC-2026-3552...

Security Bulletin:DNS Name Constraints Validation Issue Fixed in cryptography v46.0.6

Summary cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to version 46.0.6, DNS name constraints were only validated against SANs within child certificates, and not the "peer name" presented during each validation. Consequently,...