Lucene search
+L

71 matches found

PyPA
PyPA
•added 2026/10/15 10:22 a.m.•11 views

PyMongo: PYTHON-5990 Forced Unix domain socket connection via a .sock KMS endpoint in client-side field level encryption

SummaryPyMongo passed the KMS endpoint of a data key verbatim into parsehost, which returns any string ending in .sock unchanged instead of validating it as a hostname and port. The driver's connection code then treats such an address as a Unix domain socket path and connects to it with AFUNIX...

5.3CVSS6.2AI score0.00131EPSS
SaveExploits0References11Affected Software1
Rows per page
Query Builder