CVE-2026-69247
2 advisories.
PyPI/cryptography CVE-2026-69247: high
cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing
Action: Upgrade cryptography to 50.0.0 or later.
pip install cryptography==50.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 44.0.0 | 50.0.0 | - |
Fixed versions
| 50.0.0 |
Sources
- osv: GHSA-g6cj-pr64-35w5
- https://github.com/pyca/cryptography/security/advisories/GHSA-g6cj-pr64-35w5
- https://github.com/pyca/cryptography/pull/15369
- https://github.com/pyca/cryptography/commit/53fccd93413a8d7f07d6d8999681f27b75cffa3f
- https://github.com/pyca/cryptography
CVE-2026-69247 · published · modified · JSON
PyPI/cryptography CVE-2026-69247: unknown
cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing
Action: Upgrade cryptography to 50.0.0 or later.
pip install cryptography==50.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 44.0.0 | 50.0.0 | - |
Fixed versions
| 50.0.0 |
Sources
- osv: PYSEC-2026-3552
- https://github.com/pyca/cryptography/security/advisories/GHSA-g6cj-pr64-35w5
- https://github.com/pyca/cryptography/pull/15369
- https://github.com/pyca/cryptography/commit/53fccd93413a8d7f07d6d8999681f27b75cffa3f
- https://github.com/pyca/cryptography
- https://pypi.org/project/cryptography
- https://github.com/advisories/GHSA-g6cj-pr64-35w5
- https://nvd.nist.gov/vuln/detail/CVE-2026-69247
CVE-2026-69247 · published · modified · JSON