# Final Request to Remediate Vulnerabilities in Pritunl VPN **URL:** \ **Category:** Pritunl VPN\ **Created:** [February 12, 2026, 12:39am UTC](https://forum.pritunl.com/t/final-request-to-remediate-vulnerabilities-in-pritunl-vpn/3716 "2026-02-12T00:39:19Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![dmytroAdvinow](https://forum.pritunl.com/user_avatar/forum.pritunl.com/dmytroadvinow/32/604_2.png) [@dmytroAdvinow](https://forum.pritunl.com/u/dmytroAdvinow)\ **Post date:** [February 12, 2026, 12:39am UTC](https://forum.pritunl.com/t/final-request-to-remediate-vulnerabilities-in-pritunl-vpn/3716/1 "2026-02-12T00:39:19Z")
**Final Request to Remediate Vulnerabilities in Pritunl VPN** We identified numerous vulnerabilities in the Pritunl VPN deployment. These issues have been flagged by our security scans and require prompt remediation to ensure system security and compliance. Could you please review the findings on your side and provide a remediation plan and estimated timeline for resolving these vulnerabilities as soon as possible? Thank you in advance for your cooperation. ![image](https://forum-static.pritunl.com/original/2X/e/eebfd95f2a9157d41eb809dccc08a2f4deb56a23.png) ---
**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\ **Post date:** [February 12, 2026, 1:15am UTC](https://forum.pritunl.com/t/final-request-to-remediate-vulnerabilities-in-pritunl-vpn/3716/2 "2026-02-12T01:15:23Z")
There’s currently version conflicts due to the [**Oracle Cloud oci library**](https://github.com/oracle/oci-python-sdk/blob/master/requirements.txt) this is preventing `cryptography` from being upgraded and several other packages. It appears Oracle is not going to move past `cryptography` v46 so it’s going to require rewriting code to replace the oci library usage. I have already gone through the details and usage of these libraries in Pritunl and the vulnerable components in these libraries is not used in Pritunl. ---
**Author:** ![dmytroAdvinow](https://forum.pritunl.com/user_avatar/forum.pritunl.com/dmytroadvinow/32/604_2.png) [@dmytroAdvinow](https://forum.pritunl.com/u/dmytroAdvinow)\ **Post date:** [February 12, 2026, 12:21pm UTC](https://forum.pritunl.com/t/final-request-to-remediate-vulnerabilities-in-pritunl-vpn/3716/3 "2026-02-12T12:21:24Z")
Even if some packages or parts of the code are not actually used, they still negatively affect our vulnerability score and currently make PritunlVPN appear as the most vulnerable application in our system. We kindly ask you to provide an ETA for fixing all identified vulnerabilities. ---
**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\ **Post date:** [February 12, 2026, 2:46pm UTC](https://forum.pritunl.com/t/final-request-to-remediate-vulnerabilities-in-pritunl-vpn/3716/4 "2026-02-12T14:46:48Z")
The problem is Oracle is not updating their requirements, it has been blocking the updates. I removed the oci library to allow the updates and this is in the repository now. I still need to test a reimplementation of the oci based code. This will be included in the next release in the next 1-2 weeks.