Sslyze

Latest version: v6.1.0

Safety actively analyzes 693883 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 12

6.1.0

* Added support for Python 3.13 and removed support for Python 3.8 (https://github.com/nabla-c0d3/sslyze/issues/616, https://github.com/nabla-c0d3/nassl/issues/121).
* Added experimental support for aarch64-based Linux (https://github.com/nabla-c0d3/nassl/issues/86).
* Removed support for Intel-based Macs.
* New check: support for the Extended Master Secret TLS extension (https://github.com/nabla-c0d3/sslyze/issues/680).
* New feature: a custom HTTP agent can be supplied via the Python API (https://github.com/nabla-c0d3/sslyze/pull/644).
* New feature: a custom SMTP EHLO hostname can be supplied via the Python API (https://github.com/nabla-c0d3/sslyze/pull/682).
* New feature: the number of attempts for testing client renegotiation can be configured via the Python API (https://github.com/nabla-c0d3/sslyze/pull/661).
* Fixed a few crashes (https://github.com/nabla-c0d3/sslyze/issues/675, https://github.com/nabla-c0d3/sslyze/issues/670, https://github.com/nabla-c0d3/sslyze/issues/672).
* Fixed a memory leak (https://github.com/nabla-c0d3/nassl/pull/119).
* Added support for newer versions of the pydantic and cryptography packages (https://github.com/nabla-c0d3/sslyze/issues/652)
* Fixed a crash when using the JSON output with a non-successful OCSP response (https://github.com/nabla-c0d3/sslyze/issues/646).
* Clarified the CLI output when showing the results of a scan for a server that uses leaf multiple certificates.

See also https://github.com/users/nabla-c0d3/projects/8 for more details.

6.0.0

* Added support for Python 3.12 (630).
* Removed support for Python 3.7 (616).
* Switched to Python Cryptography's implementation of certificate validation, in order to simplify the validation logic and make it more reliable (638).
* Removed direct dependency to pyOpenSSL.
* Removed usages of `ssl.match_hostname()` (627).
* JSON output changes for the certificate information plugin:
* `leaf_certificate_subject_matches_hostname` has been removed because hostname validation is now directly reported in the `path_validation_results`, which makes it simpler to process them.
* Similarly, `openssl_error_string` was renamed to `validation_error`.
* Fixed crash caused by "invalid padding" and "invalid encoding" errors (632, 634).
* Better output when an SMTP EHLO is rejected ( 635).

See also https://github.com/users/nabla-c0d3/projects/5 for more details.

5.2.0

* Fixed crashes affecting specific Linux distributions such as Red Hat Linux and CentOS (556, 621).
* Fixed a bug when probing TLS 1.3 servers that require client authentication (612).
* Fixed a crash when using the JSON output with the `MozillaTlsConfigurationChecker` (614).
* Added support for pydantic 2.x (611).
* Added support for cryptography 40 and 41 (610).
* Updated Windows executable to use Python 3.11 (588).
* Updated Mozilla configuration recommendations to v5.7 (608).
* Better handling of servers that only support SSL v2.0 (601).
* *WARNING: This is the last release to support Python 3.7.*
* *WARNING: This is the last release to support pydantic 1.x.*

See also https://github.com/users/nabla-c0d3/projects/7 for more details.

5.1.3

* Added native support for Apple Silicon (https://github.com/nabla-c0d3/nassl/pull/107).
* Fixed a crash when using older versions of PyOpenSSL (600).
* *WARNING: This is the last release to support Windows 7.*

5.1.2

* Updated cryptography to v39 (596).
* Updated the trust stores.

5.1.1

* Fixed compatibility with specific versions of pydantic (590).

Page 1 of 12

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.