{"action":"Upgrade cryptography to 42.0.2 or later.","affected":[{"fixed":"42.0.2","introduced":"0"}],"component":"cryptography","cve_ids":["CVE-2024-0727"],"ecosystem":"PyPI","epss":0.03187,"exploited":false,"fixed_versions":["42.0.2"],"ghsa_id":"GHSA-9v9h-cgj8-h64p","id":"tcs_01M5KFBJFW40AYBPEWCV8BQFEZ","modified_at":"2026-09-10T03:50:09.410128409Z","published_at":"2024-01-26T09:30:23Z","references":["https://osv.dev/vulnerability/GHSA-9v9h-cgj8-h64p","https://nvd.nist.gov/vuln/detail/CVE-2024-0727","https://github.com/github/advisory-database/pull/3472","https://github.com/openssl/openssl/pull/23362","https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2","https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2","https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a","https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c","https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d","https://www.openssl.org/news/secadv/20240125.txt","https://security.netapp.com/advisory/ntap-20240208-0006","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539","https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8","https://cert-portal.siemens.com/productcert/html/ssa-915275.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-331112.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","http://www.openwall.com/lists/oss-security/2024/03/11/1"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-9v9h-cgj8-h64p","url":"https://osv.dev/vulnerability/GHSA-9v9h-cgj8-h64p"}],"summary":"Null pointer dereference in PKCS12 parsing"}