ROOT-APP-PYPI-CVE-2026-34073 CVE-2026-34073 in cryptography - Patched by Root

Root has patched CVE-2026-34073 in the cryptography package for Root:PyPI. Multiple fixed versions available...

Security Bulletin: IBM SOAR QRadar Plugin App is vulnerable to using components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM SOAR QRadar Plugin App has addressed the applicable CVEs with an update. Vulnerability Details CVEID:CVE-2026-34073 DESCRIPTION: cryptography is a package...

Security Bulletin: IBM Edge Data Collector uses cryptography-46.0.5-cp311-abi3-manylinux_2_34_x86_64.whl which is vulnerable to CVE-2026-34073

Summary IBM Edge Data Collector Component uses cryptography-46.0.5-cp311-abi3-manylinux234x8664.whl which is vulnerable to CVE-2026-34073. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-34073 DESCRIPTION: cryptography is a package designed to...

Security Bulletin: IBM Edge Data Collector uses cryptography-46.0.5-cp311-abi3-manylinux_2_34_x86_64.whl, cryptography-46.0.6-cp311-abi3-manylinux_2_34_x86_64.whl which is vulnerable to CVE-2026-34073, CVE-2026-39892

Summary IBM Edge Data Collector Component uses cryptography-46.0.5-cp311-abi3-manylinux234x8664.whl, cryptography-46.0.6-cp311-abi3-manylinux234x8664.whl which is vulnerable to CVE-2026-34073, CVE-2026-39892. This bulletin contains information addressing the vulnerability. Vulnerability Details...

Security Bulletin: IBM Maximo Application Suite - Monitor Component uses cryptography-46.0.5-cp311-abi3-manylinux_2_34_x86_64.whl which is vulnerable to CVE-2026-34073

Summary Security Bulletin: IBM Maximo Application Suite - Monitor Component uses cryptography-46.0.5-cp311-abi3-manylinux234x8664.whl which is vulnerable to CVE-2026-34073.This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-34073 DESCRIPTION:...

Security Bulletin: IBM Maximo Scheduler Optimizer uses cryptography-46.0.5-cp311-abi3-manylinux_2_34_x86_64.whl which is vulnerable to CVE-2026-34073

Summary IBM Maximo Scheduler Optimizer uses cryptography-46.0.5-cp311-abi3-manylinux234x8664.whl which is vulnerable to CVE-2026-34073. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-34073 DESCRIPTION: cryptography is a package...

Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which is vulnerable to multiple CVEs.

Summary IBM Maximo Application Suite uses qs-6.13.0.tgz, qs-6.14.0.tgz, pygments-2.19.2-py3-none-any.whl, and cryptography-46.0.5-cp311-abi3-manylinux234x8664.whl, which are vulnerable to CVE-2025-15284, CVE-2026-2391, CVE-2026-4539, and CVE-2026-34073. This bulletin contains information regardin...

SUSE-SU-2026:21116-1 Security update for python-cryptography

This update for python-cryptography fixes the following issues: - CVE-2026-34073: Fixed X.509 bypass of name constraints on wildcard SANs with matching peer names. bsc1260876...

Security Bulletin: z/Transaction Processing Facility is affected by a vulnerability in the cryptography package (CVE-2026-34073)

Summary The cryptography package is used by the z/TPF system as part of runtime metrics collection RTMC. Vulnerability Details CVEID:CVE-2026-34073 DESCRIPTION: cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to version 46.0.6, DNS nam...

c7n-azure (0.7.10), c7n-openstack (0.1.1) +40 more potentially affected by CVE-2026-34073 via cryptography (3.4.6)

cryptography PYPI version 3.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - c7n-azure 0.7.10 - c7n-openstack 0.1.1 - combocurve-api-v1 =0.1.0, =2.0.0rc1, =0.1.6.1, =0.0.3, =0.1.0, =0.2.8, =0.5.0, =0.10.0, =1.0.0...

azure-cli (>=2.0.58, <=2.0.66), azure-cli-appservice (>=0.2.13, <=0.2.20) +27 more potentially affected by CVE-2026-34073 via cryptography (2.4.2)

cryptography PYPI version 2.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - azure-cli =2.0.58, =0.2.13, =1.5.5, =1.0.0b6, =18.4.0, =0.3.0rc1, =1.0.3, =0.1.0, =1.2.8, =1.0.5, =2.1.12 and more Source cves:...

0x-web3 (5.0.0a5), a2ml (>=0.5.0rc5, <=0.5.0rc9) +202 more potentially affected by CVE-2026-34073 via cryptography (2.9.2)

cryptography PYPI version 2.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - 0x-web3 5.0.0a5 - a2ml =0.5.0rc5, =2.6.3, =0.2.3, =0.1.8, =0.110.1b0, =0.9.5, =0.0.6, =1.3.0, =0.4.1, =0.1.0, =0.1.0, =0.1.2 and more...

apputils-config (>=2.0.0, <=2.0.1.dev13), burstable (>=0.2.5rc2, <=0.2.6) +32 more potentially affected by CVE-2026-34073 via cryptography (3.0.0)

cryptography PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - apputils-config =2.0.0, =0.2.5rc2, =0.13.0, =3.16.0.dev2, =0.8.0, =0.0.1, =0.0.2, =11.0.0b3, =0.1.2, =1.0.0, =0.1.9, =0.1.12 and more...

askflow-cli (1.0.0), atlassian-jwt-auth (>=8.0.2, <=9.0.0) +68 more potentially affected by CVE-2026-34073 via cryptography (3.2.1)

cryptography PYPI version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - askflow-cli 1.0.0 - atlassian-jwt-auth =8.0.2, =0.0.9, =0.2.7a0, =0.0.2, =0.0.1a12, =0.6.0, =3.1.12, =2.1.0, =1.0.0, =0.0.19, =0.7.1,...

antistasi-logbook (>=0.3.2, <=0.4.2), apilogicserver (>=5.2.15, <=16.0.5) +71 more potentially affected by CVE-2026-34073 via cryptography (36.0.1)

cryptography PYPI version 36.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - antistasi-logbook =0.3.2, =5.2.15, =0.2.0, =0.9.8b1, =0.0.1, =0.4.1rc0, =1.2.0, =0.3.7, =0.1.0, =0.1.20, =2.0.2, =0.2.1, =0.0.3, =0.0.7...

20220429-pdfminer-jameslp310 (0.0.2), adapta (>=2.0.0, <=3.3.6) +350 more potentially affected by CVE-2026-34073 via cryptography (36.0.2)

cryptography PYPI version 36.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - 20220429-pdfminer-jameslp310 0.0.2 - adapta =2.0.0, =0.0.53, =2022.7.7b1, =0.3.11, =1.4.0.dev7, =3.7.1b1, =1.6.1, =14.0.0, =0.0.3,...

atlassian-jwt-auth (>=3.2.1, <=3.3.0), biweeklybudget (>=0.7.1, <=1.0.0) +26 more potentially affected by CVE-2026-34073 via cryptography (2.1.4)

cryptography PYPI version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - atlassian-jwt-auth =3.2.1, =0.7.1, =0.9.191, =0.7.0, =0.3.2, =0.9.7, =0.3.0, =0.4.1.dev20171202153821, =0.2.0, =3.0.0, =7.0.0, =0.5.7,...

aepp-sdk (>=0.18.0.3, <=0.18.0.4), atlassian-jwt-auth (>=3.3.1, <=4.0.1) +19 more potentially affected by CVE-2026-34073 via cryptography (2.2.2)

cryptography PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - aepp-sdk =0.18.0.3, =3.3.1, =0.2.2, =0.1.1, =0.16.8, =0.10.4, =1.6.517, =3.0.4, =0.6.7, =0.3.7, =1.4.5, =2.0.1 and more Source cves:...

agentstack-cli (>=0.5.0rc4, <=0.7.1), amiibo-converter (0.2.0) +264 more potentially affected by CVE-2026-34073 via cryptography (>=46.0.0, <=46.0.5)

cryptography PYPI version =46.0.0, =0.5.0rc4, =0.1.0, =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.0.1, =0.13.12, =0.1.3, =3.8.9, =0.2.50, =0.2.57 and more Source cves: CVE-2026-34073 Source advisory: OSV:PYSEC-2026-35...

agixt (>=1.3.84, <=1.3.143), ai-service-wrapper (>=0.0.3, <=0.0.8) +100 more potentially affected by CVE-2026-34073 via cryptography (41.0.3)

cryptography PYPI version 41.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - agixt =1.3.84, =0.0.3, =0.0.1, =1.0.2, =1.0.507, =0.2.5, =0.0.1rc1, =6.0.0, =0.7.29, =0.1.4, =0.1.5 and more Source cves: CVE-2026-3407...