PyPI/cryptography: low
Vulnerable OpenSSL included in cryptography wheels
Action: Upgrade cryptography to 41.0.0 or later.
pip install cryptography==41.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.5 | 41.0.0 | - |
Fixed versions
| 41.0.0 |
Sources
- osv: GHSA-5cpq-8wj7-hf2v
- https://github.com/pyca/cryptography/security/advisories/GHSA-5cpq-8wj7-hf2v
- https://github.com/pyca/cryptography/commit/8708245ccdeaff21d65eea68a4f8d2a7c5949a22
- https://cryptography.io/en/latest/changelog/#v41-0-0
- https://github.com/pyca/cryptography
published · modified · JSON