Skip to content

Bump cryptography from 46.0.5 to 46.0.6#233

Open
dependabot[bot] wants to merge 1 commit into8.0.xfrom
dependabot/pip/cryptography-46.0.6
Open

Bump cryptography from 46.0.5 to 46.0.6#233
dependabot[bot] wants to merge 1 commit into8.0.xfrom
dependabot/pip/cryptography-46.0.6

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 26, 2026 •
edited
Loading

Bumps cryptography from 46.0.5 to 46.0.6.

Changelog

Sourced from cryptography's changelog.

46.0.6 - 2026-03-25


* **SECURITY ISSUE**: Fixed a bug where name constraints were not applied
  to peer names during verification when the leaf certificate contains a
  wildcard DNS SAN. Ordinary X.509 topologies are not affected by this bug,
  including those used by the Web PKI. Credit to **Oleh Konko (1seal)** for
  reporting the issue. **CVE-2026-34073**

.. _v46-0-5:

Commits

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Mar 26, 2026
@dependabot
Bump cryptography from 46.0.5 to 46.0.6
1bd6b23 
Bumps [cryptography](https://github.com/pyca/cryptography) from 46.0.5 to 46.0.6.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@46.0.5...46.0.6)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-version: 46.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/pip/cryptography-46.0.6 branch from f0f3201 to 1bd6b23 Compare March 29, 2026 18:46
@bobbrodie bobbrodie added this to the v8.0.1 milestone Apr 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

SDKs & Plugins
Status: No status

Milestone

v8.0.1

Development

Successfully merging this pull request may close these issues.

1 participant

@bobbrodie