PyPI/cryptography: medium
Vulnerable OpenSSL included in cryptography wheels
Action: Upgrade cryptography to 38.0.3 or later.
pip install cryptography==38.0.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 37.0.0 | 38.0.3 | - |
Fixed versions
| 38.0.3 |
Sources
- osv: GHSA-39hc-v87j-747x
- https://github.com/pyca/cryptography/security/advisories/GHSA-39hc-v87j-747x
- https://github.com/pyca/cryptography/commit/382e759bcded5773330eeed748c86b213ec618c5
- https://github.com/pyca/cryptography/commit/cf2ada625d1188d6cd46396f301b98095da577f7
- https://github.com/pyca/cryptography
published · modified · JSON