Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

Browse Security Advisories

Security Advisories for https://github.com/pyca/cryptography Clear Filters

Low
over 1 year ago

Vulnerable OpenSSL included in cryptography wheels GSA_kwCzR0hTQS03OXY0LTY1eGctcHE0Z84ABEUU

pypi cryptography
Moderate
about 2 years ago

pyca/cryptography has a vulnerable OpenSSL included in cryptography wheels GSA_kwCzR0hTQS1oNGdoLXFxNDUtdmgyN84AA_QU

pypi cryptography
High
over 2 years ago

cryptography NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override GSA_kwCzR0hTQS02dnF3LTN2NWotNTR4NM4AA5bN

pypi cryptography
High
over 2 years ago

Python Cryptography package vulnerable to Bleichenbacher timing oracle attack GSA_kwCzR0hTQS0zd3c0LWdnNGYtanI3Zs4AA5Eq

pypi cryptography
Moderate
almost 3 years ago

cryptography vulnerable to NULL-dereference when loading PKCS7 certificates GSA_kwCzR0hTQS1qZmhtLTVnaGgtMmY5N84AA3Zw

pypi cryptography
Low
about 3 years ago

Vulnerable OpenSSL included in cryptography wheels GSA_kwCzR0hTQS12OGdyLW01MzMtZ2hqOc4AA1_w

pypi cryptography
Low
about 3 years ago

pyca/cryptography's wheels include vulnerable OpenSSL GSA_kwCzR0hTQS1qbTc3LXFwaGYtYzR3OM4AA0_V

pypi cryptography
High
over 3 years ago

cryptography mishandles SSH certificates GSA_kwCzR0hTQS1jZjdwLWdtMm0tODMzbc4AA0t4

pypi cryptography
Low
over 3 years ago

Vulnerable OpenSSL included in cryptography wheels GSA_kwCzR0hTQS01Y3BxLTh3ajctaGYyds4AAzmB

pypi cryptography
High
over 3 years ago

Vulnerable OpenSSL included in cryptography wheels GSA_kwCzR0hTQS14NHFyLTJmdmYtM21yNc4AAxfn

cargo, pypi openssl-src, cryptography
Moderate
over 3 years ago

Cipher.update_into can corrupt memory if passed an immutable python object as the outbuf GSA_kwCzR0hTQS13N3BwLW04d2Ytdmo2cs4AAxeE

pypi cryptography
Moderate
almost 4 years ago

Vulnerable OpenSSL included in cryptography wheels GSA_kwCzR0hTQS0zOWhjLXY4N2otNzQ3eM4AAvq8

pypi cryptography
High
over 4 years ago

Improper input validation in cryptography GSA_kwCzR0hTQS1xM2NqLTJyMzQtMmN3Y84AAbxz

pypi cryptography
High
over 5 years ago

PyCA Cryptography symmetrically encrypting large values can lead to integer overflow MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJobTktcDl3NS1md203

pypi cryptography
High
almost 6 years ago

RSA decryption vulnerable to Bleichenbacher timing vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWhnZ20tanBnMy12NDc2

pypi cryptography
High
about 8 years ago

PyCA Cryptography vulnerable to GCM tag forgery MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZjZjktM3F3My1neG1q

pypi cryptography

Filter by Severity

Moderate 15,712 High 13,229 Critical 4,788 Low 2,646 Medium 121

Filter by Source

CPAN Security Advisory Database 1,159 Erlang Ecosystem Foundation 336 GitHub Advisory Database 36,858

Filter by Ecosystem

maven 8,565 npm 8,075 pypi 7,469 packagist 7,200 go 5,763 nuget 5,253 cargo 2,062 cpan 1,158 rubygems 1,138 hex 382 swift 63 actions 58 pub 11

Filter by Package

openclaw 591 moodle/moodle 437 tensorflow 433 tensorflow-gpu 427 tensorflow-cpu 423 magento/community-edition 359 org.jenkins-ci.main:jenkins-core 259 Microsoft.ChakraCore 247 github.com/mattermost/mattermost/server/v8 207 github.com/mattermost/mattermost-server 192 typo3/cms 189 Magick.NET-Q16-AnyCPU 164 Magick.NET-Q8-AnyCPU 164 Magick.NET-Q16-HDRI-AnyCPU 164 Magick.NET-Q16-HDRI-x86 163 Magick.NET-Q16-x86 162 org.apache.tomcat:tomcat 162 Magick.NET-Q8-x86 162 magento/project-community-edition 161 open-webui 160 Magick.NET-Q16-arm64 160 Magick.NET-Q16-HDRI-OpenMP-arm64 160 Magick.NET-Q16-OpenMP-x64 160 Magick.NET-Q16-HDRI-x64 160 Magick.NET-Q16-OpenMP-arm64 160 com.liferay.portal:release.portal.bom 159 Magick.NET-Q8-arm64 159 Magick.NET-Q16-HDRI-arm64 159 Magick.NET-Q8-OpenMP-arm64 159 n8n 156 Magick.NET-Q8-OpenMP-x64 156 Magick.NET-Q16-x64 155 Magick.NET-Q8-x64 153 apache-airflow 146 wwbn/avideo 144 pimcore/pimcore 136 Django 127 craftcms/cms 127 dolibarr/dolibarr 126 com.liferay.portal:release.dxp.bom 125 concrete5/concrete5 121 typo3/cms-core 119 parse-server 116 flowise 114 thorsten/phpmyfaq 112 drupal/core 110 code.gitea.io/gitea 109 github.com/siyuan-note/siyuan/kernel 107 phpmyadmin/phpmyadmin 107 microweber/microweber 106 librenms/librenms 106 getgrav/grav 99 symfony/symfony 99 org.keycloak:keycloak-services 98 Magick.NET-Q16-HDRI-OpenMP-x64 95 silverstripe/framework 92 com.fasterxml.jackson.core:jackson-databind 86 drupal/drupal 83 mlflow 82 snipe/snipe-it 81 vm2 78 vllm 77 org.apache.tomcat.embed:tomcat-embed-core 77 gogs.io/gogs 76 github.com/usememos/memos 75 mantisbt/mantisbt 74 shopware/platform 74 next 73 Plone 72 electron 70 Magick.NET-Q16-OpenMP-x86 68 code.vikunja.io/api 67 salt 67 github.com/grafana/grafana 67 apache-superset 66 shopware/core 65 ansible 65 actionpack 62 github.com/rancher/rancher 61 ghost 61 froxlor/froxlor 60 org.apache.struts:struts2-core 60 github.com/traefik/traefik/v3 60 picklescan 59 github.com/traefik/traefik/v2 59 django 59 directus 58 pyload-ng 57 nokogiri 57 mautic/core 57 baserproject/basercms 56 axios 55 github.com/hashicorp/vault 55 surrealdb 54 nocodb 54 praisonai 52 PraisonAI 52 getkirby/cms 51 hono 51 nltk 51 pypdf 51 praisonaiagents 50 perl 50 gradio 50 rack 50 org.keycloak:keycloak-core 50 admidio/admidio 50 nova 49 vyper 47 aiohttp 47 phpmyfaq/phpmyfaq 47 github.com/mattermost/mattermost-server/v6 47 github.com/zitadel/zitadel 47 undici 46 org.xwiki.platform:xwiki-platform-oldcore 46 DBD-SQLite 45 matrix-synapse 45 statamic/cms 44 k8s.io/kubernetes 43 github.com/filebrowser/filebrowser/v2 43 rdiffweb 43 showdoc/showdoc 42 pillow 42 nilsteampassnet/teampass 42 @budibase/server 42 intelliants/subrion 42 langflow 42 org.apache.tomcat:tomcat-catalina 41 org.elasticsearch:elasticsearch 41 litellm 41 plone 41 wasmtime 40 contao/core-bundle 40 keystone 39 github.com/cilium/cilium 39 io.undertow:undertow-core 39 net.mingsoft:ms-mcms 39 MT 38 github.com/argoproj/argo-cd/v2 38 org.jenkins-ci.plugins:script-security 37 com.thoughtworks.xstream:xstream 37 deno 36 com.jfinal:jfinal 36 ci4-cms-erp/ci4ms 36 DotNetNuke.Core 36 github.com/docker/docker 35 Microsoft.AspNetCore.App.Runtime.win-x64 35 moin 35 github.com/hashicorp/nomad 34 github.com/answerdev/answer 34 Pillow 34 shopware/shopware 34 zendframework/zendframework1 34 github.com/argoproj/argo-cd 34 Microsoft.AspNetCore.App.Runtime.win-x86 34 org.apache.tomcat:tomcat-coyote 33 GitPython 33 github.com/openbao/openbao 33 ash 33 kimai/kimai 33 Microsoft.AspNetCore.App.Runtime.linux-x64 32 pnpm 32 github.com/hashicorp/consul 32 org.springframework.security:spring-security-core 31 Microsoft.AspNetCore.App.Runtime.win-arm64 31 yeswiki/yeswiki 31 Microsoft.AspNetCore.App.Runtime.linux-musl-x64 31 Microsoft.AspNetCore.App.Runtime.linux-arm 31 org.opencms:opencms-core 31 opencv-python 31 Microsoft.AspNetCore.App.Runtime.osx-x64 31 flowise-components 31 prestashop/prestashop 31 Microsoft.AspNetCore.App.Runtime.linux-arm64 31 org.apache.solr:solr-core 31 phpoffice/phpspreadsheet 31 opencv-contrib-python 31 pocketmine/pocketmine-mp 30 Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 30 github.com/fleetdm/fleet/v4 30 wagtail 30 mcp-atlassian 30 dompurify 30 payload 30 github.com/traefik/traefik 29 github.com/rclone/rclone 29 Microsoft.AspNetCore.App.Runtime.win-arm 29 org.eclipse.jetty:jetty-server 29 @anthropic-ai/claude-code 28 github.com/coder/coder/v2 28 mediawiki/core 28 astro 27 github.com/nats-io/nats-server/v2 27 zebrad 27 github.com/openfga/openfga 27 org.springframework:spring-webmvc 27 centreon/centreon 27 grumpydictator/firefly-iii 26 funadmin/funadmin 26 laravel/framework 26

Filter by Repository

https://github.com/tensorflow/tensorflow 433 https://github.com/moodle/moodle 250 https://github.com/xwiki/xwiki-platform 222 https://github.com/chakra-core/ChakraCore 214 https://github.com/jenkinsci/jenkins 178 https://github.com/liferay/liferay-portal 170 https://github.com/django/django 121 https://github.com/jquery/jquery 118 https://github.com/apache/tomcat 118 https://github.com/pimcore/pimcore 116 https://github.com/apache/airflow 105 https://github.com/TYPO3/typo3 93 https://github.com/microweber/microweber 90 https://github.com/keycloak/keycloak 90 https://github.com/librenms/librenms 77 https://github.com/rails/rails 70 https://github.com/FasterXML/jackson-databind 70 https://github.com/thorsten/phpmyfaq 69 https://github.com/usememos/memos 68 https://github.com/silverstripe/silverstripe-framework 68 https://github.com/kubernetes/kubernetes 66 https://github.com/symfony/symfony 64 https://github.com/Dolibarr/dolibarr 60 https://github.com/ansible/ansible 59 https://github.com/mattermost/mattermost 59 https://github.com/erlang/otp 56 https://github.com/python-pillow/Pillow 52 https://github.com/spring-projects/spring-framework 51 https://github.com/argoproj/argo-cd 50 https://github.com/apache/struts 47 https://github.com/grafana/grafana 47 https://github.com/mautic/mautic 46 https://github.com/rancher/rancher 46 https://github.com/phpmyadmin/phpmyadmin 45 https://github.com/vyperlang/vyper 44 https://github.com/concretecms/concretecms 44 https://github.com/ikus060/rdiffweb 42 https://github.com/mantisbt/mantisbt 42 https://github.com/saltstack/salt 42 https://github.com/shopware/platform 42 https://github.com/directus/directus 41 https://github.com/craftcms/cms 41 https://github.com/shopware/shopware 40 https://github.com/star7th/showdoc 39 https://github.com/mmaitre314/picklescan 39 https://github.com/openstack/nova 38 https://github.com/gradio-app/gradio 38 https://github.com/magento/magento2 38 https://github.com/dotnet/runtime 38 https://github.com/x-stream/xstream 37 https://github.com/plone/Products.CMFPlone 37 https://github.com/octobercms/october 36 https://github.com/mlflow/mlflow 36 https://github.com/umbraco/Umbraco-CMS 35 https://github.com/sparklemotion/nokogiri 35 https://github.com/apache/activemq 34 https://github.com/answerdev/answer 34 https://github.com/parse-community/parse-server 34 https://github.com/opencv/opencv 32 https://github.com/matrix-org/synapse 32 https://github.com/go-gitea/gitea 32 https://github.com/PaddlePaddle/Paddle 31 https://github.com/cilium/cilium 31 https://github.com/apache/inlong 31 https://github.com/ash-project/ash 31 https://github.com/contao/contao 30 https://github.com/snipe/snipe-it 30 https://github.com/rack/rack 29 https://github.com/openstack/keystone 28 https://github.com/FlowiseAI/Flowise 28 https://github.com/electron/electron 28 https://github.com/CVEProject/cvelist 28 https://github.com/Perl/perl5 28 https://github.com/strapi/strapi 28 https://github.com/gogs/gogs 28 https://github.com/netty/netty 27 https://github.com/baserproject/basercms 26 https://github.com/geoserver/geoserver 26 https://github.com/froxlor/froxlor 26 https://github.com/apache/nifi 26 https://github.com/github/advisory-database 26 https://github.com/zitadel/zitadel 26 https://github.com/surrealdb/surrealdb 25 https://github.com/bcgit/bc-java 25 https://github.com/vercel/next.js 25 https://github.com/vllm-project/vllm 25 https://github.com/langchain-ai/langchain 25 https://github.com/denoland/deno 25 https://github.com/pmmp/PocketMine-MP 25 https://github.com/traefik/traefik 25 https://github.com/run-llama/llama_index 24 https://github.com/pyload/pyload 24 https://github.com/getgrav/grav 24 https://github.com/apache/cxf 24 https://github.com/hashicorp/consul 24 https://github.com/livehelperchat/livehelperchat 23 https://github.com/TYPO3/TYPO3.CMS 23 https://github.com/PrestaShop/PrestaShop 23 https://github.com/eclipse/jetty.project 23 https://github.com/moby/moby 23 https://github.com/bytecodealliance/wasmtime 23 https://github.com/nilsteampassnet/TeamPass 23 https://github.com/dnnsoftware/Dnn.Platform 23 https://github.com/firefly-iii/firefly-iii 23 https://github.com/PHPOffice/PhpSpreadsheet 22 https://github.com/nervosnetwork/ckb 22 https://github.com/getkirby/kirby 22 https://github.com/helm/helm 22 https://github.com/jenkinsci/script-security-plugin 22 https://github.com/undertow-io/undertow 21 https://github.com/OpenZeppelin/openzeppelin-contracts 21 https://github.com/goharbor/harbor 21 https://github.com/hashicorp/vault 21 https://github.com/laravel/framework 21 https://github.com/jeecgboot/jeecg-boot 20 https://github.com/opencast/opencast 20 https://github.com/ethyca/fides 20 https://github.com/OpenNMS/opennms 20 https://github.com/funadmin/funadmin 20 https://github.com/cloudfoundry/uaa 19 https://github.com/huggingface/transformers 19 https://github.com/alkacon/opencms-core 19 https://github.com/TYPO3-CMS/core 19 https://github.com/simplesamlphp/simplesamlphp 19 https://github.com/team-alembic/ash_authentication 19 https://github.com/nilsteampassnet/teampass 19 https://github.com/containerd/containerd 19 https://github.com/intelliants/subrion 19 https://github.com/backstage/backstage 19 https://github.com/apache/camel 18 https://github.com/opencontainers/runc 18 https://github.com/vaadin/platform 18 https://github.com/perl5-dbi/dbi 18 https://github.com/OpenMage/magento-lts 18 https://github.com/rubygems/rubygems 18 https://github.com/ethereum/go-ethereum 17 https://github.com/openfga/openfga 17 https://github.com/mindsdb/mindsdb 17 https://github.com/vantage6/vantage6 17 https://github.com/liufee/cms 17 https://github.com/apache/kylin 17 https://github.com/quarkusio/quarkus 16 https://github.com/yetiforcecompany/yetiforcecrm 16 https://github.com/rusqlite/rusqlite 16 https://github.com/forkcms/forkcms 16 https://github.com/ImageMagick/ImageMagick 16 https://github.com/mojolicious/mojo 16 https://github.com/dotnet/aspnetcore 16 https://github.com/sequelize/sequelize 16 https://github.com/vitejs/vite 16 https://github.com/hashicorp/nomad 16 https://github.com/twbs/bootstrap 16 https://github.com/tinymce/tinymce 16 https://github.com/etcd-io/etcd 16 https://github.com/pyca/cryptography 16 https://github.com/drupal/core 15 https://github.com/xuxueli/xxl-job 15 https://github.com/decidim/decidim 15 https://github.com/puppetlabs/puppet 15 https://github.com/zendframework/zendframework 15 https://github.com/containers/podman 15 https://github.com/OPCFoundation/UA-.NETStandard 15 https://github.com/spring-projects/spring-security 15 https://github.com/MobSF/Mobile-Security-Framework-MobSF 15 https://github.com/ckeditor/ckeditor4 15 https://github.com/dompdf/dompdf 15 https://github.com/sqlite/sqlite 15 https://github.com/PHPMailer/PHPMailer 15 https://github.com/thorsten/phpMyFAQ 15 https://github.com/centreon/centreon 15 https://github.com/cobbler/cobbler 15 https://github.com/aio-libs/aiohttp 15 https://github.com/nodejs/undici 15 https://github.com/golang/go 14 https://github.com/publify/publify 14 https://github.com/TryGhost/Ghost 14 https://github.com/ming-soft/MCMS 14 https://github.com/cockpit-hq/cockpit 14 https://github.com/Graylog2/graylog2-server 14 https://github.com/apache/superset 14 https://github.com/janeczku/calibre-web 14 https://github.com/rails/rails-html-sanitizer 14 https://github.com/apache/zeppelin 14 https://github.com/twisted/twisted 14 https://github.com/pimcore/admin-ui-classic-bundle 14 https://github.com/elixir-mint/mint 14 https://github.com/pgadmin-org/pgadmin4 14 https://github.com/cosmos/cosmos-sdk 14 https://github.com/dpgaspar/Flask-AppBuilder 14 https://github.com/urllib3/urllib3 14 https://github.com/modoboa/modoboa 13 https://github.com/dromara/hutool 13 https://github.com/OpenRefine/OpenRefine 13 https://github.com/tonycoz/imager 13 https://github.com/OctoPrint/OctoPrint 13 https://github.com/zenml-io/zenml 13 https://github.com/openbao/openbao 13 https://github.com/ZenHive/mpp 13 https://github.com/h2oai/h2o-3 13