[GHSA-m2h6-j472-rp4c] python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees

[frenzymadness]

Updates

• Affected products
• CVSS v4
• Severity

Comments
If I'm not mistaken, the support for DNS wildcard patterns was added in pyca/cryptography@286c89128 as a fix for pyca/cryptography#12250 - if so, the range of vulnerable versions should be >= 45.0.0; <= 48.0.0.

P.S.: I've modified nothing else, just update the CVSS so github allows me to save this.

[github]

Hi there @alex! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository.

This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory

[frenzymadness]

I've really tried to update just the affected version; feel free to ignore the rest.