Media
CVE-2026-48523
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 51
Restablecer filtros
Media
CVE-2026-48522
PyJWKClient: missing scheme allowlist enables CVE-2024-21643-class SSRF + token forgery via file://, ftp://, data: schemes
Media
CVE-2026-39892
Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIs
Crítica
CVE-2026-32714
SciTokens is vulnerable to SQL Injection in KeyCache
Baja
CVE-2026-34073
cryptography has incomplete DNS name constraint enforcement on peer names
Alta
CVE-2026-28490
Authlib Vulnerable to JWE RSA1_5 Bleichenbacher Padding Oracle
Alta
CVE-2026-28498
Authlib: Fail-Open Cryptographic Verification in OIDC Hash Binding
Crítica
CVE-2026-27962
Authlib JWS JWK Header Injection: Signature Verification Bypass
Alta
CVE-2026-28802
Authlib: Setting `alg: none` and a blank signature appears to bypass signature verification
Alta
CVE-2026-26007
cryptography Vulnerable to a Subgroup Attack Due to Missing Subgroup Validation for SECT Curves
Media
CVE-2025-69277
libsodium has Incomplete List of Disallowed Inputs
Media
ghsa-h4gh-qq45-vh27
pyca/cryptography has a vulnerable OpenSSL included in cryptography wheels
Alta
CVE-2024-26130
cryptography NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override
Media
CVE-2023-49083
cryptography vulnerable to NULL-dereference when loading PKCS7 certificates
Baja
ghsa-v8gr-m533-ghj9
Vulnerable OpenSSL included in cryptography wheels
Baja
ghsa-jm77-qphf-c4w8
pyca/cryptography's wheels include vulnerable OpenSSL
Alta
CVE-2023-38325
cryptography mishandles SSH certificates
Baja
ghsa-5cpq-8wj7-hf2v
Vulnerable OpenSSL included in cryptography wheels
Media
CVE-2023-23931
Cipher.update_into can corrupt memory if passed an immutable python object as the outbuf
Media
ghsa-39hc-v87j-747x
Vulnerable OpenSSL included in cryptography wheels
Alta
CVE-2022-29217
Key confusion through non-blocklisted public key formats
Alta
CVE-2020-36242
PyCA Cryptography symmetrically encrypting large values can lead to integer overflow
Alta
CVE-2020-25659
RSA decryption vulnerable to Bleichenbacher timing vulnerability
Alta
CVE-2020-8897
Security issues in AWS KMS and AWS Encryption SDKs: in-band protocol negotiation and robustness
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.