cryptography.io has 2 CVEs on record. The median CVSS is 8.2 (high), with 1 rated critical.

CVEs per month

Last 12 months, by publish date

1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09

Exploited share: 0% vs 1% corpus
Median CVSS: 8.2
Publish → KEV: —
Last 90 days: 0 prev 1

Weakness classes

Products

cryptography 2

Follow cryptography.io:RSS feed Save a search →Embed badge ↗

Total CVEs

Critical

CISA KEV

Exploited

Worst active — by depth score

CVE-2026-39892Critical· 9.8cryptography is a package designed to expose cryptographic primitives and recipes to Python developers54
CVE-2026-26007Medium· 6.5cryptography is a package designed to expose cryptographic primitives and recipes to Python developers36

cryptography.io vulnerabilities

CVEs affecting cryptography.io, newest first. Open any entry for full detail, references, and exploit status.

2 CVEsRSS

CVE-2026-39892Critical· 9.8⚖ disputed

5mo ago

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a non-contiguous buffer was passed to APIs which accepted Python buffers (e.g. Hash.update()), this …

▾ Midnightcryptography.io · cryptographyEPSS 0.65%via NVD

CVE-2026-26007Medium· 6.5

7mo ago

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 46.0.5, the public_key_from_numbers (or EllipticCurvePublicNumbers.public_key()), EllipticCurvePublicNumbers.public_key(), l…

▾ Sunlitcryptography.io · cryptographyEPSS 0.35%via NVD