pyca cryptography

• CVE-2026-69249 High 8.7 python-cryptography: Duplicate self-signed intermediates can cause exponential path-building 0.3%
• CVE-2026-69248 Medium 6.9 python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees 0.2%
• CVE-2026-69247 High 8.2 cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing 0.3%
• CVE-2026-39892 High 7.3 cryptography has a buffer overflow if non-contiguous buffers were passed to APIs 0.7%
• CVE-2026-34073 Low 1.7 cryptography has incomplete DNS name constraint enforcement on peer names 0.2%
• CVE-2026-26007 High 7.4 cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves 0.4%
• CVE-2024-26130 High 7.5 cryptography NULL pointer deference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override 0.8%
• CVE-2023-49083 Medium 5.9 cryptography vulnerable to NULL-dereference when loading PKCS7 certificates 1.0%
• CVE-2023-23931 Medium 4.8 Cipher.update_into can corrupt memory in pyca cryptography 1.3%