Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In versions 45.0.0 through 48.0.0, if an intermediate constrained CA permits the DNS name foo.example.com, and the leaf certificate has a wildcard in its DNS SAN of *.example.com, python-cryptography's verifier accepts which allows escaping outside of the permitted names. The core issue is in DNSConstraint::matches, where a wildcard pattern was treated as matching a more-specific permitted constraint even though *.example.com can expand to sibling names such as bar.example.com outside foo.example.com. This allows acceptance of an invalid certificate chain. This issue is fixed in 49.0.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-08-03 | 2 | General2 |
| 2026-08-21 | 1 | Patch1 |
いろいろ調べていたら CVE-2026-69248 が関連しているのかもと。 49.0.0以上が修正済みとのことだがpkgは48のまんま。。。
Post summary
The post notes a possible link to CVE‑2026‑69248, indicates that versions 49.0.0 and above have been patched, but the current package remains at 48.
🚨*CVE* CVE-2026-69248 cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 49.0.0, if an intermediate constrained CA permits the… https://www.cve.org/CVERecord?id=CVE-2026-69248 ----- Traducción: CVE-2026-69248 cry… http://infoflow.cloud`
Post summary
The tweet notes a vulnerability in the cryptography package (CVE‑2026‑69248) and mentions the affected version range, but does not provide a PoC, exploit, or patch details.
CVE-2026-69248 cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 49.0.0, if an intermediate constrained CA permits the… https://www.cve.org/CVERecord?id=CVE-2026-69248
Post summary
The text briefly references CVE-2026-69248 in the cryptography package, noting a version before 49.0.0, but provides no further details or actionable information.