{"items":[{"id":"CVE-2026-69249","published":"2026-08-03T21:26:45.826Z","updated":"2026-09-04T21:20:32.666Z","title":"python-cryptography: Duplicate self-signed intermediates can cause exponential path-building","severity":"HIGH","score":8.7,"vendor":"pyca","product":"cryptography","kev":false,"epss":0.00262,"kevAdded":null,"exploit":true},{"id":"CVE-2026-69248","published":"2026-08-03T21:21:43.710Z","updated":"2026-09-02T13:26:35.057Z","title":"python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees","severity":"MEDIUM","score":6.9,"vendor":"pyca","product":"cryptography","kev":false,"epss":0.00244,"kevAdded":null,"exploit":true},{"id":"CVE-2026-69247","published":"2026-08-03T21:16:32.047Z","updated":"2026-08-04T14:09:24.615Z","title":"cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing","severity":"HIGH","score":8.2,"vendor":"pyca","product":"cryptography","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-39892","published":"2026-04-08T20:49:41.967Z","updated":"2026-11-04T03:18:10.286Z","title":"cryptography has a buffer overflow if non-contiguous buffers were passed to APIs","severity":"MEDIUM","score":6.9,"vendor":"pyca","product":"cryptography","kev":false,"epss":0.00677,"kevAdded":null,"exploit":false},{"id":"CVE-2026-34073","published":"2026-03-31T02:04:36.275Z","updated":"2026-10-14T16:07:55.097Z","title":"cryptography has incomplete DNS name constraint enforcement on peer names","severity":"LOW","score":1.7,"vendor":"pyca","product":"cryptography","kev":false,"epss":0.00227,"kevAdded":null,"exploit":false},{"id":"CVE-2026-27459","published":"2026-03-17T23:34:28.483Z","updated":"2026-09-11T12:09:00.415Z","title":"pyOpenSSL DTLS cookie callback buffer overflow","severity":"HIGH","score":7.2,"vendor":"pyca","product":"pyopenssl","kev":false,"epss":0.00748,"kevAdded":null,"exploit":false},{"id":"CVE-2026-27448","published":"2026-03-17T23:24:30.661Z","updated":"2026-03-18T20:18:08.768Z","title":"pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback","severity":"LOW","score":1.7,"vendor":"pyca","product":"pyopenssl","kev":false,"epss":0.00256,"kevAdded":null,"exploit":false},{"id":"CVE-2026-26007","published":"2026-02-10T21:42:56.471Z","updated":"2026-09-16T12:04:21.492Z","title":"cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves","severity":"HIGH","score":8.2,"vendor":"pyca","product":"cryptography","kev":false,"epss":0.00384,"kevAdded":null,"exploit":false},{"id":"CVE-2024-26130","published":"2024-02-21T16:28:18.632Z","updated":"2024-08-14T20:01:52.628Z","title":"cryptography NULL pointer deference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override","severity":"HIGH","score":7.5,"vendor":"pyca","product":"cryptography","kev":false,"epss":0.00831,"kevAdded":null,"exploit":false},{"id":"CVE-2023-49083","published":"2023-11-29T18:50:24.263Z","updated":"2025-12-18T15:32:14.214Z","title":"cryptography vulnerable to NULL-dereference when loading PKCS7 certificates","severity":"MEDIUM","score":5.9,"vendor":"pyca","product":"cryptography","kev":false,"epss":0.00985,"kevAdded":null,"exploit":true},{"id":"CVE-2023-23931","published":"2023-02-07T20:54:03.628Z","updated":"2025-11-03T21:47:19.856Z","title":"Cipher.update_into can corrupt memory in pyca cryptography","severity":"MEDIUM","score":4.8,"vendor":"pyca","product":"cryptography","kev":false,"epss":0.01301,"kevAdded":null,"exploit":true}]}