CVE-2024-26130
HighAdvisory
Published 21 Feb 2024In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.008
- 56th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 184
- of 17,781 indexed, latest versions
- Container images
- 186
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
cryptography NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override
Carried by container images the latest versions of 184 of 17,781 indexed charts deploy, on 186 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| cryptographypypi | 1.9, 2.3, 2.4.1, 2.5+27 more | 42.0.4 | 186 |
| python-cryptographydeb | 38.0.4-3, 41.0.7-4build3 | 38.0.4-3+deb12u1, 41.0.7-4ubuntu0.1 | 2 |
- OSV records
- DEBIAN-CVE-2024-26130GHSA-6vqw-3v5j-54x4PYSEC-2024-225UBUNTU-CVE-2024-26130
- Also known as
- USN-6673-3
Charts affected
184 by stars
Container images carrying it
186 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| oomk8s/ | 875814cc853d | cryptography | 42.0.4 | 11 |
| argoproj/ | 830e86cacefd | cryptography | 42.0.4 | 3 |
| cloudve/ | 4a3d7fae90bb | cryptography | 42.0.4 | 3 |
| amancevice/ | 12a0a9e66550 | cryptography | 42.0.4 | 2 |
| apache/ | ae0b86d3c4d0 | cryptography python-cryptography | 42.0.4 41.0.7-4ubuntu0.1 | 2 |
| confluentinc/ | ac776fad95a5 | cryptography | 42.0.4 | 2 |
| confluentinc/ | cae577096489 | cryptography | 42.0.4 | 2 |
| cs3org/ | 02a9e78757b4 | cryptography | 42.0.4 | 2 |
| hjacobs/ | 4b2147f47425 | cryptography | 42.0.4 | 2 |
| library/ | 212fe73edca5 | cryptography | 42.0.4 | 2 |
| louislam/ | 917318f9d7be | cryptography | 42.0.4 | 2 |
| louislam/ | 9aeb4e51d038 | cryptography | 42.0.4 | 2 |
| louislam/ | a8610b3b4c38 | cryptography | 42.0.4 | 2 |
| ngoduykhanh/ | ba36ab196d3d | cryptography | 42.0.4 | 2 |
| weblate/ | 69c160d37a3c | cryptography | 42.0.4 | 2 |
| ghcr.io/ | b1ba7b054af2 | cryptography | 42.0.4 | 2 |
| akeyless/ | 4ba8900a0061 | cryptography | 42.0.4 | 1 |
| amancevice/ | c8c04bfe3d66 | cryptography | 42.0.4 | 1 |
| amundsendev/ | 69e7915e61c1 | cryptography | 42.0.4 | 1 |
| andrcuns/ | 43060f159f4c | cryptography | 42.0.4 | 1 |
| apache/ | 64e58748b6b9 | cryptography | 42.0.4 | 1 |
| apache/ | e5560ad0b86e | cryptography | 42.0.4 | 1 |
| apache/ | 75d48a62748f | cryptography | 42.0.4 | 1 |
| apache/ | a2bab1be574c | cryptography | 42.0.4 | 1 |
| apecloud/ | 8ac9947a2c84 | cryptography | 42.0.4 | 1 |
| arconixforge/ | c08d7c438966 | cryptography | 42.0.4 | 1 |
| assistiot/ | c3adbab6a3e7 | cryptography | 42.0.4 | 1 |
| behnambm/ | bd3ad88afff9 | cryptography | 42.0.4 | 1 |
| bnjbvr/ | 37e216b182c8 | cryptography | 42.0.4 | 1 |
| camerahub/ | a5af37dd6e1b | cryptography | 42.0.4 | 1 |
| camptocamp/ | 35c91d5fda04 | cryptography | 42.0.4 | 1 |
| camptocamp/ | 2924b43dbf40 | cryptography | 42.0.4 | 1 |
| ceticasbl/ | 6c0aa7567145 | cryptography | 42.0.4 | 1 |
| chorss/ | 5c549cacb8ab | cryptography | 42.0.4 | 1 |
| codecov/ | 0475cb1c3136 | cryptography | 42.0.4 | 1 |
| confluentinc/ | c0224a1adf7a | cryptography | 42.0.4 | 1 |
| confluentinc/ | dc9b972db002 | cryptography | 42.0.4 | 1 |
| confluentinc/ | 8ec46c27982f | cryptography | 42.0.4 | 1 |
| confluentinc/ | 0bec03c1f3ce | cryptography | 42.0.4 | 1 |
| datadog/ | 8f20e56b5311 | cryptography | 42.0.4 | 1 |
| deconzcommunity/ | 062de2362641 | cryptography | 42.0.4 | 1 |
| deconzcommunity/ | 6541bbb78952 | cryptography | 42.0.4 | 1 |
| devopstales/ | 75136aa7a26e | cryptography | 42.0.4 | 1 |
| djjudas21/ | f17233350c4f | cryptography | 42.0.4 | 1 |
| dnationcloud/ | dee6376560f5 | cryptography | 42.0.4 | 1 |
| douz/ | 4384103d0219 | cryptography | 42.0.4 | 1 |
| dpage/ | 37946e4f3e7b | cryptography | 42.0.4 | 1 |
| dpage/ | a5a656e1d5fd | cryptography | 42.0.4 | 1 |
| dysnix/ | 19951e3e7a32 | cryptography | 42.0.4 | 1 |
| elastichq/ | bb3bd22c2b87 | cryptography | 42.0.4 | 1 |