MEDIUM6.6PyPI
GHSA-2vhw-q7vh-7xv2· CVE-2026-74879, PYSEC-2026-3758openssl-encrypt's readiness endpoint leaks database error details to unauthenticated callers
Modified: 9/2/2026
package
PyPI/openssl-encrypt
pkg:pypi/openssl-encrypt
MEDIUM6.6PyPI
GHSA-425g-fjhq-5h92· CVE-2026-74875, PYSEC-2026-3755openssl-encrypt silently skips schema validation when jsonschema library is not installed
Modified: 9/2/2026
MEDIUM6.6PyPI
GHSA-4rh7-jwg9-m28m· CVE-2026-74880, PYSEC-2026-3759openssl-encrypt accepts refresh tokens as URL query parameters causing token leakage
Modified: 9/2/2026
MEDIUM6.6PyPI
GHSA-8h88-gxp3-j7pg· CVE-2026-74876, PYSEC-2026-3756openssl-encrypt's unverified key bundle from_dict() + to_identity() path allows encryption to attacker keys
Modified: 9/2/2026
MEDIUM6.6PyPI
GHSA-c65f-x25w-62jv· CVE-2026-74881, PYSEC-2026-3977openssl-encrypt has CORS wildcard with allow_credentials=True in standalone servers
Modified: 9/11/2026
MEDIUM6.6PyPI
GHSA-h3m5-p59h-x88p· CVE-2026-74873, PYSEC-2026-3753openssl-encrypt has visible password in process list via --password CLI argument
Modified: 9/2/2026
CRITICAL9.1PyPI
GHSA-h45m-mgcp-q388· CVE-2026-74878, PYSEC-2026-3757openssl-encrypt: TOTP rate limiter is in-memory only — not shared across workers, lost on restart
Modified: 9/2/2026
MEDIUM6.6PyPI
GHSA-hvc7-763r-4f3h· CVE-2026-74877, PYSEC-2026-3743openssl-encrypt has no owner verification on key revocation — any client can revoke any key
Modified: 9/1/2026
MEDIUM6.6PyPI
GHSA-j48q-4c78-rhf9· CVE-2026-74872, PYSEC-2026-3742openssl-encrypt: Dynamic .so loading for Whirlpool uses broad glob pattern without integrity verification
Modified: 9/1/2026
MEDIUM6.6PyPI
GHSA-vfgx-5q85-58q3· CVE-2026-74874, PYSEC-2026-3754openssl-encrypt has non-cryptographic PRNG used for steganography pixel selection
Modified: 9/2/2026
CRITICAL9.3PyPI
PYSEC-2026-3727· CVE-2026-74899Modified: 8/29/2026
CRITICAL9.3PyPI
PYSEC-2026-3742· CVE-2026-74872, GHSA-j48q-4c78-rhf9Modified: 9/1/2026
HIGH8.7PyPI
PYSEC-2026-3743· CVE-2026-74877, GHSA-hvc7-763r-4f3hModified: 9/1/2026
CRITICAL9.1PyPI
PYSEC-2026-3744· CVE-2026-74882, GHSA-2592-7m3g-7fq6Modified: 9/1/2026
MEDIUM5.9PyPI
PYSEC-2026-3745· CVE-2026-74887, GHSA-cx72-m6xj-3vf6Modified: 9/1/2026
HIGH8.7PyPI
PYSEC-2026-3746· CVE-2026-74892, GHSA-p926-6hjp-w9jwModified: 9/1/2026
HIGH8.7PyPI
PYSEC-2026-3753· CVE-2026-74873, GHSA-h3m5-p59h-x88pModified: 9/2/2026
HIGH8.7PyPI
PYSEC-2026-3754· CVE-2026-74874, GHSA-vfgx-5q85-58q3Modified: 9/2/2026
CRITICAL9.3PyPI
PYSEC-2026-3755· CVE-2026-74875, GHSA-425g-fjhq-5h92Modified: 9/2/2026
CRITICAL9.3PyPI
PYSEC-2026-3756· CVE-2026-74876, GHSA-8h88-gxp3-j7pgModified: 9/2/2026
CRITICAL9.3PyPI
PYSEC-2026-3757· CVE-2026-74878, GHSA-h45m-mgcp-q388Modified: 9/2/2026
HIGH8.7PyPI
PYSEC-2026-3758· CVE-2026-74879, GHSA-2vhw-q7vh-7xv2Modified: 9/2/2026
CRITICAL9.3PyPI
PYSEC-2026-3759· CVE-2026-74880, GHSA-4rh7-jwg9-m28mModified: 9/2/2026
HIGH8.7PyPI
PYSEC-2026-3760· CVE-2026-74883, GHSA-mcjj-qw7m-j3cpModified: 9/2/2026
HIGH8.7PyPI
PYSEC-2026-3761· CVE-2026-74884, GHSA-8jpj-w975-rwv5Modified: 9/2/2026
CRITICAL9.3PyPI
PYSEC-2026-3762· CVE-2026-74885, GHSA-43r4-3hf9-m84qModified: 9/2/2026
CRITICAL9.3PyPI
PYSEC-2026-3763· CVE-2026-74886, GHSA-9pgj-v69p-q586Modified: 9/2/2026
HIGH8.7PyPI
PYSEC-2026-3764· CVE-2026-74888, GHSA-743f-89fg-x288Modified: 9/2/2026
CRITICAL9.3PyPI
PYSEC-2026-3765· CVE-2026-74889, GHSA-j9mh-57cc-665xModified: 9/2/2026
CRITICAL9.3PyPI
PYSEC-2026-3766· CVE-2026-74890, GHSA-rvc2-5jxq-gpcjModified: 9/2/2026
HIGH8.7PyPI
PYSEC-2026-3767· CVE-2026-74891, GHSA-v4vm-4xf2-fhqjModified: 9/2/2026
HIGH8.7PyPI
PYSEC-2026-3768· CVE-2026-74893, GHSA-qc6h-gfjh-7qqgModified: 9/2/2026
CRITICAL9.3PyPI
PYSEC-2026-3769· CVE-2026-74894, GHSA-4g2c-wpgj-49w8Modified: 9/2/2026
CRITICAL9.3PyPI
PYSEC-2026-3770· CVE-2026-74895, GHSA-623h-chj7-hfx8Modified: 9/2/2026
CRITICAL9.3PyPI
PYSEC-2026-3771· CVE-2026-74896, GHSA-w7gr-9g4g-33mxModified: 9/2/2026
CRITICAL9.3PyPI
PYSEC-2026-3772· CVE-2026-74900, GHSA-p3gq-pcg9-qvfvModified: 9/2/2026
CRITICAL9.3PyPI
PYSEC-2026-3773· CVE-2026-74901, GHSA-w4j7-wfgw-r52wModified: 9/2/2026
CRITICAL9.3PyPI
PYSEC-2026-3774· CVE-2026-81695, GHSA-jwfm-99h7-2w5xModified: 9/2/2026
CRITICAL9.3PyPI
PYSEC-2026-3775· CVE-2026-81696, GHSA-539p-fxf4-7fv8Modified: 9/2/2026
HIGH8.8PyPI
PYSEC-2026-3776· CVE-2026-81698, GHSA-gw2m-mj6q-59hcModified: 9/2/2026
CRITICAL9.3PyPI
PYSEC-2026-3777· CVE-2026-81700, GHSA-x38r-8wf3-q9hqModified: 9/2/2026
CRITICAL9.3PyPI
PYSEC-2026-3778· CVE-2026-81701, GHSA-wxx9-p55f-wm34Modified: 9/2/2026
HIGH8.7PyPI
PYSEC-2026-3779· CVE-2026-81703, GHSA-qqfq-g2cv-j7v3Modified: 9/2/2026
HIGH8.7PyPI
PYSEC-2026-3780· CVE-2026-81705, GHSA-jgvm-7jxv-cgccModified: 9/2/2026
MEDIUM6.8PyPI
PYSEC-2026-3781· CVE-2026-81706, GHSA-8gmx-w9m8-vx7qModified: 9/2/2026
CRITICAL9.3PyPI
PYSEC-2026-3791· CVE-2026-81681, GHSA-2jv6-qqfm-m46mModified: 9/3/2026
MEDIUM5.5PyPI
PYSEC-2026-3792· CVE-2026-81683, GHSA-r8gw-6hfj-98jwModified: 9/3/2026
CRITICAL9.3PyPI
PYSEC-2026-3793· CVE-2026-81685, GHSA-49h2-qmcq-wvvcModified: 9/3/2026
MEDIUM5.5PyPI
PYSEC-2026-3794· CVE-2026-81686, GHSA-7fhx-8rmv-qjj3Modified: 9/3/2026
HIGH8.7PyPI
PYSEC-2026-3795· CVE-2026-81688, GHSA-7c3q-gp4v-q29qModified: 9/3/2026
HIGH8.7PyPI
PYSEC-2026-3796· CVE-2026-81690, GHSA-hw7h-wqf5-6crxModified: 9/3/2026
HIGH8.7PyPI
PYSEC-2026-3797· CVE-2026-81691, GHSA-xr64-hcxg-4ghrModified: 9/3/2026
HIGH8.7PyPI
PYSEC-2026-3798· CVE-2026-81693, GHSA-r23m-gf2m-8wwwModified: 9/3/2026
CRITICAL9.3PyPI
PYSEC-2026-3799· CVE-2026-81714, GHSA-xg52-638v-jc5mModified: 9/3/2026
HIGH8.7PyPI
PYSEC-2026-3800· CVE-2026-81716, GHSA-vr4h-5xqv-xxxfModified: 9/3/2026
CRITICAL9.3PyPI
PYSEC-2026-3801· CVE-2026-81717, GHSA-8jx3-27qf-3p97Modified: 9/3/2026
CRITICAL9.3PyPI
PYSEC-2026-3802· CVE-2026-81719, GHSA-587j-4r3v-cm2cModified: 9/3/2026
HIGH8.7PyPI
PYSEC-2026-3803· CVE-2026-81721, GHSA-7894-5gw8-69hrModified: 9/3/2026
HIGH8.7PyPI
PYSEC-2026-3956· CVE-2026-74870, GHSA-p9g8-wvh4-2jmxModified: 9/10/2026
MEDIUM5.3PyPI
PYSEC-2026-3957· CVE-2026-81680, GHSA-grhj-cpmg-f5mxModified: 9/10/2026
MEDIUM6.9PyPI
PYSEC-2026-3958· CVE-2026-81684, GHSA-rx2c-m92f-qv6pModified: 9/10/2026
HIGH8.7PyPI
PYSEC-2026-3959· CVE-2026-81689, GHSA-3v63-778v-3mvpModified: 9/10/2026
CRITICAL9.3PyPI
PYSEC-2026-3960· CVE-2026-81694, GHSA-c793-rj9w-r3wgModified: 9/10/2026
HIGH8.7PyPI
PYSEC-2026-3961· CVE-2026-81699, GHSA-phmr-p567-q5g6Modified: 9/10/2026
CRITICAL9.3PyPI
PYSEC-2026-3962· CVE-2026-81702, GHSA-q8p3-7h6h-ghfrModified: 9/10/2026
HIGH8.7PyPI
PYSEC-2026-3963· CVE-2026-81704, GHSA-v9r6-grch-fxw7Modified: 9/10/2026
HIGH8.7PyPI
PYSEC-2026-3964· CVE-2026-81715, GHSA-jqqp-pf9j-889jModified: 9/10/2026
MEDIUM6.9PyPI
PYSEC-2026-3965· CVE-2026-81720, GHSA-783h-8q2f-f762Modified: 9/10/2026
MEDIUM5.5PyPI
PYSEC-2026-3976· CVE-2026-74871, GHSA-vxf9-vwp6-2w43Modified: 9/11/2026
CRITICAL9.3PyPI
PYSEC-2026-3977· CVE-2026-74881, GHSA-c65f-x25w-62jvModified: 9/11/2026