unstale

pypi / cryptography

cryptography

What changed in cryptography 46 to 50, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-27.

7 security

See which of these apply to your code, ranked, in your agent:

npx @unstale/cli init

@unstale/cli 0.2.8 on npm

cryptography 501 changes

Security 1

  • cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing

    50.0.0security advisory

cryptography 492 changes

Security 2

  • python-cryptography: Duplicate self-signed intermediates can cause exponential path-building

    49.0.0security advisory

  • python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees

    49.0.0security advisory

cryptography 481 changes

Security 1

cryptography 463 changes

Security 3

  • Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIs

    46.0.7security advisory

  • cryptography has incomplete DNS name constraint enforcement on peer names

    46.0.6security advisory

  • cryptography Vulnerable to a Subgroup Attack Due to Missing Subgroup Validation for SECT Curves

    46.0.5security advisory