The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options.
The product does not validate, or incorrectly validates, a certificate.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cryptography | Cryptography_project | 40.0.0 (including) | 41.0.2 (excluding) |