CVE-2026-39892
2 advisories.
PyPI/cryptography CVE-2026-39892: medium
Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIs
Action: Upgrade cryptography to 46.0.7 or later.
pip install cryptography==46.0.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 45.0.0 | 46.0.7 | - |
Fixed versions
| 46.0.7 |
Sources
- osv: GHSA-p423-j2cm-9vmq
- https://github.com/pyca/cryptography/security/advisories/GHSA-p423-j2cm-9vmq
- https://nvd.nist.gov/vuln/detail/CVE-2026-39892
- https://github.com/pyca/cryptography
- https://github.com/pypa/advisory-database/tree/main/vulns/cryptography/PYSEC-2026-36.yaml
- http://www.openwall.com/lists/oss-security/2026/04/08/12
CVE-2026-39892 · published · modified · JSON
PyPI/cryptography CVE-2026-39892: critical 9.8
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a non-contiguous buffer was passed to APIs which accepted Pytho
Action: Upgrade cryptography to 46.0.7 or later.
pip install cryptography==46.0.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 45.0.0 | 46.0.7 | - |
Fixed versions
| 46.0.7 |
Sources
- osv: PYSEC-2026-36
- http://www.openwall.com/lists/oss-security/2026/04/08/12
- https://github.com/pyca/cryptography/security/advisories/GHSA-p423-j2cm-9vmq
CVE-2026-39892 · published · modified · JSON