PT-2026-36147 · Pypi · Python-Cryptography
Published
2026-04-28
·
Updated
2026-04-28
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
python-cryptography versions prior to 2.8-3ubuntu0.3+esm2
Description
python-cryptography incorrectly handled subgroup validation for SECT curves. A remote attacker could exploit this to perform a subgroup attack, potentially recovering the least significant bits of private keys.
Recommendations
Update python-cryptography to version 2.8-3ubuntu0.3+esm2.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Python-Cryptography