PyPI/cryptography: low
pyca/cryptography's wheels include vulnerable OpenSSL
Action: Upgrade cryptography to 41.0.3 or later.
pip install cryptography==41.0.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.8 | 41.0.3 | - |
Fixed versions
| 41.0.3 |
Sources
- osv: GHSA-jm77-qphf-c4w8
- https://github.com/pyca/cryptography/security/advisories/GHSA-jm77-qphf-c4w8
- https://github.com/pyca/cryptography/commit/b22271cf3c3dd8dc8978f8f4b00b5c7060b6538d
- https://github.com/pyca/cryptography/commit/bfa4d95f0f356f2d535efd5c775e0fb3efe90ef2
- https://github.com/pyca/cryptography
- https://www.openssl.org/news/secadv/20230714.txt
- https://www.openssl.org/news/secadv/20230719.txt
- https://www.openssl.org/news/secadv/20230731.txt
published · modified · JSON