cryptography.io cryptography

Name: cryptography.io cryptography
Brand: cryptography.io

productUS

cpe:2.3:a:cryptography.io:cryptography:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

2critical5high4medium0low

updated 2026-10-28

vulnerabilities (11)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-36242US	critical9.1	6.72% (94th)	—	3.3.2	2021-02-07	< 3.3.2
CVE-2016-9243US	high7.5	3.46% (89th)	—	no fix	2017-03-27	≤ 1.5.2
CVE-2020-25659US	medium5.9	2.46% (84th)	—	no fix	2021-01-11	= 3.2
CVE-2023-23931US	medium6.5	1.30% (70th)	—	39.0.1	2023-02-07	1.8 → 39.0.1
CVE-2023-50782US	high7.5	1.12% (66th)	—	42.0.0	2024-02-05	< 42.0.0
CVE-2023-49083US	high7.5	0.98% (62nd)	—	41.0.6	2023-11-29	3.1 → 41.0.6
CVE-2024-26130US	high7.5	0.83% (57th)	—	42.0.4	2024-02-21	38.0.0 → 42.0.4
CVE-2023-38325US	high7.5	0.73% (54th)	—	41.0.2	2023-07-14	40.0.0 → 41.0.2
CVE-2026-39892US	critical9.8	0.65% (51st)	—	46.0.7	2026-04-08	45.0.0 → 46.0.7
CVE-2026-26007US	medium6.5OT elevated	0.39% (33rd)	—	46.0.5	2026-02-10	< 46.0.5
CVE-2026-34073US	medium5.3	0.22% (13th)	—	46.0.6	2026-03-31	< 46.0.6

The flaw types (CWEs) most of these CVEs share.

CWE-295Improper Certificate Validation2 CVEs
CWE-385Covert Timing Channel2 CVEs
CWE-476NULL Pointer Dereference2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-131Incorrect Calculation of Buffer Size1 CVEs
CWE-190Integer Overflow or Wraparound1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-203Observable Discrepancy1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.