GHSA-5pwr-322w-8jr4: pyopenssl fixed in 26.0.0

GHSA-5pwr-322w-8jr4 PUBLISHED CVSS 7.199999809265137 HIGH

pyOpenSSL DTLS cookie callback buffer overflow

Record from GitHub Advisory Database · Published March 16, 2026

pyopenssl is fixed in 26.0.0 (PyPI)

pyOpenSSL DTLS cookie callback buffer overflow

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

Package	Ecosystem	Fixed in
pyopenssl	PyPI	26.0.0
superset-5.0	Chainguard	5.0.0-r20
datadog-agent-7.73	Wolfi	7.73.3-r23
datadog-agent-7.77	Wolfi	7.77.3-r5
dbt-snowflake	Chainguard	1.12.1-r0
datadog-agent-7.74	Wolfi	7.74.1-r24
py3-cassandra-medusa	Wolfi	0.27.0-r5
superset-6.0	Wolfi	6.0.0-r4
mitmproxy	Wolfi	12.2.3-r0
gitlab-cng-fips-19.0	Chainguard	19.0.2-r1
airflow-3	Wolfi	3.1.8-r8
datadog-agent-fips-7.76	Chainguard	7.76.3-r32

33 more packages have a fixed version. See every fix in Lookup.

Risk scores

CVSS 4.0

7.199999809265137

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U

Affected products

Vendor	Product	Versions
chainguard	superset-5.0	0
wolfi	datadog-agent-7.73	0
wolfi	datadog-agent-7.77	0
chainguard	dbt-snowflake	0
wolfi	datadog-agent-7.74	0
wolfi	py3-cassandra-medusa	0
wolfi	superset-6.0	0
wolfi	mitmproxy	0
chainguard	gitlab-cng-fips-19.0	0
wolfi	airflow-3	0
chainguard	datadog-agent-fips-7.76	0
wolfi	ggshield	0
wolfi	datadog-agent-7.76	0
chainguard	authentik-fips	0
chainguard	superset-6.0	0
chainguard	gitlab-cng-fips-18.7	0
chainguard	datadog-agent-fips-7.73	0
chainguard	request-1276	0
chainguard	keep-fips	0
chainguard	datadog-agent-7.74	0

…and 25 more

Timeline

Mar 16, 2026 CVE Published
Mar 24, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-5pwr-322w-8jr4
vulnetix vdb fixes GHSA-5pwr-322w-8jr4

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-5pwr-322w-8jr4/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →