Homepage

cryptography vulnerabilities

cryptography is a package which provides cryptographic recipes and primitives to Python developers.

  • latest version

    46.0.3

  • latest non vulnerable version

    46.0.3

  • first published

    11 years ago

  • latest version published

    19 days ago

  • licenses detected

  • View cryptography package health on Snyk Advisor  (opens in a new tab)
    • Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the cryptography package. This does not include vulnerabilities belonging to this package’s dependencies.

    Fix vulnerabilities automatically

    Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Missing Report of Error Condition

    [42.0.0,44.0.1)
    • H
    Type Confusion

    [37.0.0,43.0.1)
    • L
    Uncontrolled Resource Consumption ('Resource Exhaustion')

    [0,42.0.8)
    • L
    Uncontrolled Resource Consumption ('Resource Exhaustion')

    [35.0.0,42.0.6)
    • M
    NULL Pointer Dereference

    [38.0.0,42.0.4)
    • M
    NULL Pointer Dereference

    [,42.0.2)
    • M
    Resource Exhaustion

    [35.0.0,42.0.2)
    • H
    Observable Timing Discrepancy

    [,42.0.0)
    • M
    NULL Pointer Dereference

    [3.1,41.0.6)
    • M
    Denial of Service (DoS)

    [,42.0.0)
    • M
    Missing Cryptographic Step

    [,41.0.5)
    • M
    Denial of Service (DoS)

    [2.5,41.0.4)
    • L
    Denial of Service (DoS)

    [0.8,41.0.3)
    • M
    Denial of Service (DoS)

    [0.8,41.0.3)
    • L
    Insufficient Verification of Data Authenticity

    [0.8,41.0.3)
    • H
    Improper Certificate Validation

    [40.0.0,41.0.2)
    • M
    Denial of Service (DoS)

    [,41.0.0)
    • H
    Denial of Service (DoS)

    [,39.0.1)
    • M
    Denial of Service (DoS)

    [,39.0.1)
    • M
    Use After Free

    [,39.0.1)
    • H
    Access of Resource Using Incompatible Type ('Type Confusion')

    [,39.0.1)
    • M
    Timing Attack

    [,39.0.1)
    • M
    Denial of Service (DoS)

    [,39.0.1)
    • M
    Denial of Service (DoS)

    [,39.0.1)
    • M
    Denial of Service (DoS)

    [,39.0.1)
    • M
    Expected Behavior Violation

    [1.8,39.0.1)
    • M
    Denial of Service (DoS)

    [0,39.0.1)
    • H
    Buffer Overflow

    [35.0.0,38.0.3)
    • H
    Buffer Overflow

    [35.0.0,38.0.3)
    • M
    Cryptographic Issues

    [3.1,3.3.2)
    • M
    Timing Attack

    [,3.2)
    • H
    Authentication Bypass

    [1.9.0,2.3)
    • M
    Denial of Service (DoS)

    [,1.0.2)
    • H
    Denial of Service (DoS)

    [,0.9.1)
    • H
    Use of a Risky Cryptographic Algorithm

    [,1.5.2)
    • M
    TLS Truncation Attack

    [,1.1)

    Package versions

    149 VERSIONS IN TOTAL See all versions
    versionpublisheddirect vulnerabilities
    46.0.315 Oct, 2025
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    46.0.21 Oct, 2025
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    46.0.117 Sep, 2025
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    46.0.016 Sep, 2025
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    45.0.71 Sep, 2025
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    45.0.65 Aug, 2025
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    45.0.52 Jul, 2025
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    45.0.410 Jun, 2025
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    45.0.325 May, 2025
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    45.0.218 May, 2025
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L