VDB
KO

PYSEC-2023-112

Details

The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI / cryptography
Introduced in: 40.0.0 Fixed in: 41.0.2
Fix pip install --upgrade 'cryptography>=41.0.2'

References