PyPI/cryptography: low
Vulnerable OpenSSL included in cryptography wheels
Action: Upgrade cryptography to 41.0.4 or later.
pip install cryptography==41.0.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.5 | 41.0.4 | - |
Fixed versions
| 41.0.4 |
Sources
- osv: GHSA-v8gr-m533-ghj9
- https://github.com/pyca/cryptography/security/advisories/GHSA-v8gr-m533-ghj9
- https://github.com/pyca/cryptography/commit/fc11bce6930e591ce26a2317b31b9ce2b3e25512
- https://github.com/pyca/cryptography
published · modified · JSON