7842 matches found
acme2certifier (>=0.45.0.dev1, <=0.46.2), acmeeh (>=2.0.0, <=2.1.0) +122 more potentially affected by CVE-2026-69249 via cryptography (47.0.0)
cryptography PYPI version 47.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - acme2certifier =0.45.0.dev1, =2.0.0, =0.9.1, =3.3.0, =0.1.0, =0.3.0, =0.8.3, =2.69.0rc3, =2.7.2, =2.3.1, =0.4.9, =2.66.2, =2.82.0 and...
360solutions-bc-mcp (>=0.5.3, <=0.5.6), appyqt (>=1.0.0, <=1.0.1) +61 more potentially affected by CVE-2026-69249 via cryptography (48.0.0)
cryptography PYPI version 48.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - 360solutions-bc-mcp =0.5.3, =1.0.0, =0.1.0, =3.8.0, =1.1.0.dev20260505011637, =1.30.0, =1.10.1, =0.6.4b1, =0.6.4b2 - cowrie 3.0.0 -...
aegistry (>=0.1.0, <=0.2.0), aelix (0.1.0b2) +492 more potentially affected by CVE-2026-69249 via cryptography (48.0.1)
cryptography PYPI version 48.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - aegistry =0.1.0, =0.4.0, =2.1.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =0.50.0, =0.9.1, =1.0.0, =3.6.0, =1.0.0a1, =3.7.0 - agirails 4.8.0 and...
1m-handshake (>=0.1.3, <=0.1.6), 360solutions-bc-mcp (>=0.5.3, <=0.5.6) +3220 more potentially affected by CVE-2026-69247 via cryptography (>=44.0.0, <=49.0.0)
cryptography PYPI version =44.0.0, =0.1.3, =0.5.3, =2.3.0, =0.1.0, =0.1.1, =2.4.15, =0.45.0.dev1, =0.46.2 and more Source cves: CVE-2026-69247 Source advisory: OSV:PYSEC-2026-3552...
Security Bulletin:DNS Name Constraints Validation Issue Fixed in cryptography v46.0.6
Summary cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to version 46.0.6, DNS name constraints were only validated against SANs within child certificates, and not the "peer name" presented during each validation. Consequently,...
crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building
A flaw was found in the Go standard library packages crypto/x509 and crypto/tls. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being...
crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation
A flaw was found in Go's crypto/x509 package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service DoS for...
Improper Certificate Validation
Overview Affected versions of this package are vulnerable to Improper Certificate Validation in the DNSConstraint::matches. An attacker can bypass name constraints by presenting a certificate with a wildcard DNS Subject Alternative Name that is improperly validated, allowing acceptance of...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the buildchaininner function. An attacker can cause excessive resource consumption by submitting a certificate chain containing duplicate self-signed intermediates, which lead...
Timing Attack
Overview Affected versions of this package are vulnerable to Timing Attack in the pkcs7decryptder, pkcs7decryptpem, and pkcs7decryptsmime functions. An attacker can obtain sensitive information about the outcome of RSA decryption operations by submitting crafted EnvelopedData and analyzing error...
1m-handshake (>=0.1.3, <=0.1.6), 360solutions-bc-mcp (>=0.5.3, <=0.5.6) +3220 more potentially affected by CVE-2026-69247 via cryptography (>=44.0.0, <=49.0.0)
cryptography PYPI version =44.0.0, =0.1.3, =0.5.3, =2.3.0, =0.1.0, =0.1.1, =2.4.15, =0.45.0.dev1, =0.46.2 and more Source cves: CVE-2026-69247 Source advisory: SNYK:PYTHON-CRYPTOGRAPHY-18516621...
Paged Out! Magazine Issue 3
Paged Out! magazine issue 3 includes sections related to art, artificial intelligence, cryptography, file formats, hardware, networks, programming, reverse engineering, security / hacking, and system administration...
Paged Out! Magazine Issue 4
Paged Out! magazine issue 4 includes sections related to art, artificial intelligence, assembly, cryptography, demo scene, file formats, hardware, history, programming, retro stuff, reverse engineering, and security / hacking...
Paged Out! Magazine Issue 5
Paged Out! magazine issue 5 includes sections related to art, algorithms, artificial intelligence, cryptography, file formats, game development, hardware, history, networks, OS internals, operating systems, programming, retro stuff, reverse engineering, and security / hacking...
Paged Out! Magazine Issue 6
Paged Out! magazine issue 6 includes sections related to art, artificial intelligence, assembly, cryptography, demo scene, file formats, food for thought, game development, hardware, networks, OS internals, programming, retro stuff, reverse engineering, and security / hacking...
Paged Out! Magazine Issue 7
Paged Out! magazine issue 7 includes sections related to art, artificial intelligence, cryptography, demo scene, file formats, hardware, history, networks, OS internals, programming, retro stuff, reverse engineering, security / hacking, and system administration...
Paged Out! Magazine Issue 8
Paged Out! magazine issue 8 includes sections related to art, algorithms, artificial intelligence, assembly, cryptography, encodings, file formats, food for thought, hardware, networks, OS internals, operating systems, programming, retro stuff, reverse engineering, security / hacking, and system...
Paged Out! Magazine Issue 9
Paged Out! magazine issue 9 includes sections related to art, algorithms, artificial intelligence, cryptography, electronics, file formats, food for thought, forensics, game development, hardware, history, OS internals, operating systems, programming, retro stuff, reverse engineering, and securit...
