PyPI/cryptography: medium
pyca/cryptography has a vulnerable OpenSSL included in cryptography wheels
Action: Upgrade cryptography to 43.0.1 or later.
pip install cryptography==43.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 37.0.0 | 43.0.1 | - |
Fixed versions
| 43.0.1 |
Sources
- osv: GHSA-h4gh-qq45-vh27
- https://github.com/pyca/cryptography/security/advisories/GHSA-h4gh-qq45-vh27
- https://github.com/pyca/cryptography
- https://openssl-library.org/news/secadv/20240903.txt
published · modified · JSON