CVE-2024-12797
2 advisories.
PyPI/cryptography CVE-2024-12797: low, EPSS 2.53%
Vulnerable OpenSSL included in cryptography wheels
Action: Upgrade cryptography to 44.0.1 or later.
pip install cryptography==44.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 42.0.0 | 44.0.1 | - |
Fixed versions
| 44.0.1 |
Sources
- osv: GHSA-79v4-65xg-pq4g
- https://github.com/pyca/cryptography/security/advisories/GHSA-79v4-65xg-pq4g
- https://nvd.nist.gov/vuln/detail/CVE-2024-12797
- https://github.com/openssl/openssl/commit/738d4f9fdeaad57660dcba50a619fafced3fd5e9
- https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7
- https://github.com/openssl/openssl/commit/87ebd203feffcf92ad5889df92f90bb0ee10a699
- https://github.com/pyca/cryptography
- https://openssl-library.org/news/secadv/20250211.txt
- http://www.openwall.com/lists/oss-security/2025/02/11/3
- http://www.openwall.com/lists/oss-security/2025/02/11/4
CVE-2024-12797 · published · modified · JSON
PyPI/cryptography CVE-2024-12797: unknown, EPSS 2.53%
Vulnerable OpenSSL included in cryptography wheels
Action: Upgrade cryptography to 44.0.1 or later.
pip install cryptography==44.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 42.0.0 | 44.0.1 | - |
Fixed versions
| 44.0.1 |
Sources
- osv: PYSEC-2026-1284
- https://github.com/pyca/cryptography/security/advisories/GHSA-79v4-65xg-pq4g
- https://nvd.nist.gov/vuln/detail/CVE-2024-12797
- https://github.com/openssl/openssl/commit/738d4f9fdeaad57660dcba50a619fafced3fd5e9
- https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7
- https://github.com/openssl/openssl/commit/87ebd203feffcf92ad5889df92f90bb0ee10a699
- https://github.com/pyca/cryptography
- https://openssl-library.org/news/secadv/20250211.txt
- http://www.openwall.com/lists/oss-security/2025/02/11/3
- http://www.openwall.com/lists/oss-security/2025/02/11/4
- https://pypi.org/project/cryptography
- https://github.com/advisories/GHSA-79v4-65xg-pq4g
CVE-2024-12797 · published · modified · JSON