CVE-2026-118767

A flaw was found in Botan. Its Python bindings fail to properly reject embedded null characters when converting strings, causing bcrypt password hashing functions to truncate the input at the null byte. A remote attacker can exploit this flaw to bypass password length and complexity policies, as ...