GHSA-hrvr-m27m-jc99Low
When ca_certs parameter was supplied to ssl.get_server_certificate() function, the identity of...
🔗 CVE IDs covered (1)
📋 Description
When ca_certs parameter was supplied to ssl.get_server_certificate() function, the identity of the certificate is not checked.
🔗 References (7)
- https://nvd.nist.gov/vuln/detail/CVE-2026-19552
- https://github.com/python/cpython/issues/161503
- https://github.com/python/cpython/pull/161507
- https://mail.python.org/archives/list/[email protected]/thread/SXBD6BGHDBTGM4KSUMQEWYIQ5RO4BQ76
- http://www.openwall.com/lists/oss-security/2026/11/09/25
- https://github.com/python/cpython/commit/8dde46eaa6baf5f027a7234845b20d50b509624e
- https://github.com/advisories/GHSA-hrvr-m27m-jc99