VULNRABLE / Vulnerability / CVE-2026-39892

CVE-2026-39892

UNKNOWN LOW cryptography OSV

Exploit verdict: No active-exploit signal

CVSS Score
Severity
UNKNOWN
EPSS
1%
Source
OSV

Summary

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a non-cont...

What this means

CVE-2026-39892 is a unknown-severity vulnerability affecting cryptography. The EPSS model estimates a 1% probability of exploitation in the next 30 days. Published April 9, 2026.

View full advisory at OSV →