[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2023-38325":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T11:35:27.363Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":27,"aliases":37,"duplicate_of":9,"upstream":43,"downstream":44,"duplicates":50,"related":51,"reserved_at":9,"published_at":58,"modified_at":59,"state":60,"summary":61,"references_raw":69,"kevs":148,"epss":149,"epss_history":152,"metrics":413,"affected":432},"CVE-2023-38325","The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-295","Improper Certificate Validation","The product does not validate, or incorrectly validates, a certificate.","weakness","Draft","Base",[19,23],{"id":20,"name":21,"techniques":22},"CAPEC-459","Creating a Rogue Certification Authority Certificate",[],{"id":24,"name":25,"techniques":26},"CAPEC-475","Signature Spoofing by Improper Validation",[],[28],{"_key":29,"name":30,"source":31,"url":32,"maturity":33,"reliability_score":34,"verified":35,"type":9,"platforms":36,"requires_auth":9,"exploitdb":9,"metasploit":9},"GITHUB_PYCA_CRYPTOGRAPHY","Cryptography","github","https://github.com/pyca/cryptography/issues/5615","poc",0.3,false,[],[38,39,40,41,42],"GHSA-cf7p-gm2m-833m","PYSEC-2023-112","ALPINE-CVE-2023-38325","CGA-4v6j-wjmp-6547","CGA-rm98-37r8-g25r",[],[45,47,48],{"_key":46},"OPENSUSE-SU-2024:13078-1",{"_key":40},{"_key":49},"OPENSUSE-SU-2026:11468-1",[],[52,53,54,56],{"_key":46},{"_key":49},{"_key":55},"CGA-64C7-9Q3G-WVXV",{"_key":57},"CGA-JC6X-V9R4-CWXP","2023-07-14T00:00:00.000Z","2024-10-30T16:00:29.757Z","Modified",{"cisa_kev":35,"cisa_ransomware":35,"cisa_vendor":9,"epss_severity":62,"epss_score":63,"severity":64,"severity_score":65,"severity_version":66,"severity_source":67,"severity_vector":68,"severity_status":60},"low",0.00732,"high",7.5,"v3.1","nvd","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",[70,84,88,94,98,102,106,111,115,119,123,127,131,135,139,143],{"url":71,"sources":72,"tags":77},"https://github.com/pyca/cryptography/issues/9207",[73,67,74,75,76],"cve.org","osv_pypi","osv_wolfi","osv_chainguard",[78,79,80,81,82,83],"Exploit","Issue Tracking","Patch","Vendor Advisory","WEB","REPORT",{"url":85,"sources":86,"tags":87},"https://github.com/pyca/cryptography/pull/9208",[73,67,74,75,76],[80,81,82],{"url":89,"sources":90,"tags":91},"https://pypi.org/project/cryptography/#history",[73,67,74,75,76],[92,82,93],"Release Notes","PACKAGE",{"url":95,"sources":96,"tags":97},"https://github.com/pyca/cryptography/compare/41.0.1...41.0.2",[73,67,74,75,76],[80,82],{"url":99,"sources":100,"tags":101},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMCCTYY3CSNQBFFYYC5DAV6KATHWCUZK/",[73,67],[81],{"url":103,"sources":104,"tags":105},"https://security.netapp.com/advisory/ntap-20230824-0010/",[73,67],[],{"url":107,"sources":108,"tags":109},"https://nvd.nist.gov/vuln/detail/CVE-2023-38325",[74,75,76],[110],"Advisory",{"url":112,"sources":113,"tags":114},"https://github.com/pyca/cryptography/pull/7960",[74,75,76],[82],{"url":116,"sources":117,"tags":118},"https://github.com/pyca/cryptography/commit/1ca7adc97b76a9dfbd3d850628b613eb93b78fc3",[74,75,76],[82],{"url":120,"sources":121,"tags":122},"https://github.com/pyca/cryptography",[74,75,76],[93],{"url":124,"sources":125,"tags":126},"https://github.com/pypa/advisory-database/tree/main/vulns/cryptography/PYSEC-2023-112.yaml",[74,75,76],[82],{"url":128,"sources":129,"tags":130},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMCCTYY3CSNQBFFYYC5DAV6KATHWCUZK",[74,75,76],[82],{"url":132,"sources":133,"tags":134},"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NMCCTYY3CSNQBFFYYC5DAV6KATHWCUZK",[74,75,76],[82],{"url":136,"sources":137,"tags":138},"https://security.netapp.com/advisory/ntap-20230824-0010",[74,75,76],[82],{"url":140,"sources":141,"tags":142},"https://github.com/advisories/GHSA-cf7p-gm2m-833m",[74],[110],{"url":144,"sources":145,"tags":147},"https://security.alpinelinux.org/vuln/CVE-2023-38325",[146],"osv_alpine",[110],[],{"date":150,"score":63,"percentile":151},"2026-09-19",0.52866,[153,157,160,163,166,169,172,174,176,179,182,185,188,191,194,198,201,203,206,209,212,214,217,219,222,225,227,230,233,236,239,242,245,248,250,253,256,259,262,265,268,271,274,277,280,283,286,289,291,294,298,301,304,307,310,313,316,319,322,325,327,330,333,336,339,342,345,348,351,354,356,359,362,365,368,371,374,377,380,383,386,389,392,395,398,401,404,406,408,410],{"date":154,"score":155,"percentile":156},"2025-11-04",0.01069,0.77015,{"date":158,"score":155,"percentile":159},"2025-11-05",0.77016,{"date":161,"score":155,"percentile":162},"2025-11-06",0.77013,{"date":164,"score":155,"percentile":165},"2025-11-07",0.77027,{"date":167,"score":155,"percentile":168},"2025-11-08",0.7703,{"date":170,"score":155,"percentile":171},"2025-11-09",0.77026,{"date":173,"score":155,"percentile":156},"2025-11-10",{"date":175,"score":155,"percentile":159},"2025-11-11",{"date":177,"score":155,"percentile":178},"2025-11-12",0.77034,{"date":180,"score":155,"percentile":181},"2025-11-13",0.77043,{"date":183,"score":155,"percentile":184},"2025-11-14",0.7705,{"date":186,"score":155,"percentile":187},"2025-11-15",0.77046,{"date":189,"score":155,"percentile":190},"2025-11-16",0.77045,{"date":192,"score":155,"percentile":193},"2025-11-17",0.77036,{"date":195,"score":196,"percentile":197},"2025-11-18",0.00301,0.50519,{"date":199,"score":196,"percentile":200},"2025-11-19",0.50531,{"date":202,"score":196,"percentile":197},"2025-11-20",{"date":204,"score":155,"percentile":205},"2025-11-21",0.77062,{"date":207,"score":155,"percentile":208},"2025-11-22",0.77061,{"date":210,"score":155,"percentile":211},"2025-11-23",0.77048,{"date":213,"score":155,"percentile":211},"2025-11-24",{"date":215,"score":155,"percentile":216},"2025-11-25",0.77055,{"date":218,"score":155,"percentile":208},"2025-11-26",{"date":220,"score":155,"percentile":221},"2025-11-27",0.77063,{"date":223,"score":155,"percentile":224},"2025-11-28",0.77053,{"date":226,"score":155,"percentile":205},"2025-11-29",{"date":228,"score":155,"percentile":229},"2025-11-30",0.77059,{"date":231,"score":155,"percentile":232},"2025-12-01",0.7717,{"date":234,"score":155,"percentile":235},"2025-12-02",0.7718,{"date":237,"score":155,"percentile":238},"2025-12-03",0.77168,{"date":240,"score":155,"percentile":241},"2025-12-04",0.77056,{"date":243,"score":155,"percentile":244},"2025-12-05",0.77064,{"date":246,"score":155,"percentile":247},"2025-12-06",0.77068,{"date":249,"score":155,"percentile":221},"2025-12-07",{"date":251,"score":155,"percentile":252},"2025-12-08",0.77069,{"date":254,"score":155,"percentile":255},"2025-12-09",0.77094,{"date":257,"score":155,"percentile":258},"2025-12-10",0.77122,{"date":260,"score":155,"percentile":261},"2025-12-11",0.77138,{"date":263,"score":155,"percentile":264},"2025-12-12",0.77158,{"date":266,"score":155,"percentile":267},"2025-12-13",0.77159,{"date":269,"score":155,"percentile":270},"2025-12-14",0.77156,{"date":272,"score":155,"percentile":273},"2025-12-15",0.77151,{"date":275,"score":155,"percentile":276},"2025-12-16",0.77162,{"date":278,"score":155,"percentile":279},"2025-12-17",0.77174,{"date":281,"score":155,"percentile":282},"2025-12-18",0.7719,{"date":284,"score":155,"percentile":285},"2025-12-19",0.77202,{"date":287,"score":155,"percentile":288},"2025-12-20",0.77195,{"date":290,"score":155,"percentile":282},"2025-12-21",{"date":292,"score":155,"percentile":293},"2025-12-22",0.77185,{"date":295,"score":296,"percentile":297},"2025-12-23",0.01197,0.78393,{"date":299,"score":296,"percentile":300},"2025-12-24",0.78405,{"date":302,"score":296,"percentile":303},"2025-12-25",0.78426,{"date":305,"score":296,"percentile":306},"2025-12-26",0.78425,{"date":308,"score":296,"percentile":309},"2025-12-27",0.78474,{"date":311,"score":296,"percentile":312},"2025-12-28",0.78414,{"date":314,"score":296,"percentile":315},"2025-12-29",0.78411,{"date":317,"score":296,"percentile":318},"2025-12-30",0.78416,{"date":320,"score":296,"percentile":321},"2025-12-31",0.78429,{"date":323,"score":296,"percentile":324},"2026-01-01",0.78537,{"date":326,"score":296,"percentile":324},"2026-01-02",{"date":328,"score":296,"percentile":329},"2026-01-03",0.78534,{"date":331,"score":296,"percentile":332},"2026-01-04",0.78428,{"date":334,"score":296,"percentile":335},"2026-01-05",0.78422,{"date":337,"score":296,"percentile":338},"2026-01-06",0.78431,{"date":340,"score":296,"percentile":341},"2026-01-07",0.78437,{"date":343,"score":296,"percentile":344},"2026-01-08",0.78445,{"date":346,"score":296,"percentile":347},"2026-01-09",0.78448,{"date":349,"score":296,"percentile":350},"2026-01-10",0.7845,{"date":352,"score":296,"percentile":353},"2026-01-11",0.78443,{"date":355,"score":296,"percentile":338},"2026-01-12",{"date":357,"score":296,"percentile":358},"2026-01-13",0.78427,{"date":360,"score":296,"percentile":361},"2026-01-14",0.78447,{"date":363,"score":296,"percentile":364},"2026-01-15",0.78449,{"date":366,"score":296,"percentile":367},"2026-01-16",0.78456,{"date":369,"score":296,"percentile":370},"2026-01-17",0.78464,{"date":372,"score":296,"percentile":373},"2026-01-18",0.7846,{"date":375,"score":296,"percentile":376},"2026-01-19",0.78458,{"date":378,"score":296,"percentile":379},"2026-01-20",0.78452,{"date":381,"score":296,"percentile":382},"2026-01-21",0.78457,{"date":384,"score":296,"percentile":385},"2026-01-22",0.78465,{"date":387,"score":296,"percentile":388},"2026-01-23",0.78492,{"date":390,"score":296,"percentile":391},"2026-01-24",0.78503,{"date":393,"score":296,"percentile":394},"2026-01-25",0.78497,{"date":396,"score":296,"percentile":397},"2026-01-26",0.7849,{"date":399,"score":296,"percentile":400},"2026-01-27",0.78489,{"date":402,"score":296,"percentile":403},"2026-01-28",0.78494,{"date":405,"score":296,"percentile":397},"2026-01-29",{"date":407,"score":296,"percentile":403},"2026-01-30",{"date":409,"score":296,"percentile":394},"2026-01-31",{"date":411,"score":296,"percentile":412},"2026-02-01",0.786,[414,419,424,426,429],{"source":67,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":415,"cvss_v4_0":9},{"baseScore":65,"baseSeverity":416,"vectorString":68,"impactScore":417,"exploitabilityScore":418},"HIGH",6,10,{"source":74,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":420,"cvss_v4_0":421},{"baseScore":65,"baseSeverity":9,"vectorString":68,"impactScore":417,"exploitabilityScore":418},{"baseScore":422,"baseSeverity":9,"vectorString":423,"impactScore":9,"exploitabilityScore":9},8.7,"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",{"source":146,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":425,"cvss_v4_0":9},{"baseScore":65,"baseSeverity":9,"vectorString":68,"impactScore":417,"exploitabilityScore":418},{"source":75,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":427,"cvss_v4_0":428},{"baseScore":65,"baseSeverity":9,"vectorString":68,"impactScore":417,"exploitabilityScore":418},{"baseScore":422,"baseSeverity":9,"vectorString":423,"impactScore":9,"exploitabilityScore":9},{"source":76,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":430,"cvss_v4_0":431},{"baseScore":65,"baseSeverity":9,"vectorString":68,"impactScore":417,"exploitabilityScore":418},{"baseScore":422,"baseSeverity":9,"vectorString":423,"impactScore":9,"exploitabilityScore":9},[433,448,456,461,470],{"ecosystem":434,"name":435,"vendor":436,"product":435,"cpe_part":9,"purl_type":437,"purl_namespace":436,"purl_name":435,"source":9,"versions":438},"Alpine Linux","py3-cryptography","alpine","apk",[439,447],{"version":440,"is_range":441,"range_type":442,"version_start":443,"version_start_type":444,"version_end":445,"version_end_type":446,"fixed_in":9},"gte40_0_0_lt41_0_2_r0",true,"ecosystem","40.0.0","including","41.0.2-r0","excluding",{"version":440,"is_range":441,"range_type":442,"version_start":443,"version_start_type":444,"version_end":445,"version_end_type":446,"fixed_in":9},{"ecosystem":449,"name":450,"vendor":451,"product":450,"cpe_part":9,"purl_type":437,"purl_namespace":451,"purl_name":450,"source":9,"versions":452},"Chainguard","conda","chainguard",[453],{"version":454,"is_range":441,"range_type":442,"version_start":9,"version_start_type":9,"version_end":455,"version_end_type":446,"fixed_in":9},"lt23_7_2_r1","23.7.2-r1",{"ecosystem":457,"name":450,"vendor":458,"product":450,"cpe_part":9,"purl_type":437,"purl_namespace":458,"purl_name":450,"source":9,"versions":459},"Wolfi","wolfi",[460],{"version":454,"is_range":441,"range_type":442,"version_start":9,"version_start_type":9,"version_end":455,"version_end_type":446,"fixed_in":9},{"ecosystem":9,"name":462,"vendor":463,"product":462,"cpe_part":464,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":465},"cryptography","cryptography.io","a",[466],{"version":467,"is_range":441,"range_type":468,"version_start":443,"version_start_type":444,"version_end":469,"version_end_type":446,"fixed_in":9},"gte40.0.0_lt41.0.2","cpe","41.0.2",{"ecosystem":471,"name":462,"vendor":471,"product":462,"cpe_part":9,"purl_type":472,"purl_namespace":9,"purl_name":462,"source":9,"versions":473},"PyPI","pypi",[474],{"version":475,"is_range":441,"range_type":442,"version_start":443,"version_start_type":444,"version_end":469,"version_end_type":446,"fixed_in":9},"gte40_0_0_lt41_0_2"]