PyPI/cryptography CVE-2026-39892: critical 9.8, EPSS 0.68%
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a non-contiguous buffer was passed to APIs which accepted Pytho
Action: Upgrade cryptography to 46.0.7 or later.
pip install cryptography==46.0.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 45.0.0 | 46.0.7 | - |
Fixed versions
| 46.0.7 |
Sources
- osv: PYSEC-2026-36
- http://www.openwall.com/lists/oss-security/2026/04/08/12
- https://github.com/pyca/cryptography/security/advisories/GHSA-p423-j2cm-9vmq
CVE-2026-39892 · published · modified · JSON