Is cryptography safe to use?

cryptography has 1 known vulnerabilities on the latest version (48.0.0). DepScope rates its health at 60/100 (moderate risk).

What is the latest version of cryptography?

The latest version of cryptography is 48.0.0, released 2026-05-04.

Does cryptography have known vulnerabilities?

Yes. cryptography has 1 known vulnerabilities. See depscope.dev/pkg/pypi/cryptography for details.

Is cryptography deprecated?

No, cryptography is actively maintained. Latest release: 48.0.0 (2026-05-04).

What are alternatives to cryptography?

Popular alternatives to cryptography in PyPI include: boto3, packaging, urllib3, requests, idna.

What license does cryptography use?

cryptography is licensed under Apache-2.0 OR BSD-3-Clause.

cryptography

pypiv48.0.0

cryptography is a package which provides cryptographic recipes and primitives to Python developers.

License Apache-2.0 OR BSD-3-Clausepermissive155 versions3 deps285,857,728 weekly dl

/ 100

Health

update required

[email protected] has vulnerabilities — update to latest

Update to >= 300.0.12 to fix known vulnerabilities

Moderate health score (60/100) — verify manually
1 high severity vulnerabilities

Health breakdown0 – 100

25/25

maintenance

20/20

popularity

20/25

security

15/15

maturity

0/15

community

0/15

popularity_floor

Vulnerabilities

1 high

Advisories (1)

Severity	ID	Summary	Fixed in
high	CVE-2023-0286	Vulnerable OpenSSL included in cryptography wheels	300.0.12

Threat intelligence

1 likely exploited (EPSS ≥ 0.5)

Threat tier per vulnerability derived from CISA KEV catalog + FIRST.org EPSS scores.

Quality signals

OSS Criticality

0.53high

Download trend

stable(0%)

Health History

Dependency Tree

License Audit

Dependencies (3)

cffi typing-extensions bcrypt

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/cryptography

cryptography

pypiv48.0.0

cryptography is a package which provides cryptographic recipes and primitives to Python developers.

License Apache-2.0 OR BSD-3-Clausepermissive155 versions3 deps285,857,728 weekly dl

/ 100

Health

update required

[email protected] has vulnerabilities — update to latest

Update to >= 300.0.12 to fix known vulnerabilities

Moderate health score (60/100) — verify manually
1 high severity vulnerabilities

Health breakdown0 – 100

25/25

maintenance

20/20

popularity

20/25

security

15/15

maturity

0/15

community

0/15

popularity_floor

Vulnerabilities

1 high

Advisories (1)

Severity	ID	Summary	Fixed in
high	CVE-2023-0286	Vulnerable OpenSSL included in cryptography wheels	300.0.12

Threat intelligence

1 likely exploited (EPSS ≥ 0.5)

Threat tier per vulnerability derived from CISA KEV catalog + FIRST.org EPSS scores.

Quality signals

OSS Criticality

0.53high

Download trend

stable(0%)

Health History

Dependency Tree

License Audit

Dependencies (3)

cffi typing-extensions bcrypt

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/cryptography