2 matches found
BIT-LIBPYTHON-2026-19553 SSLContext.wrap_bio() missing validation of server_hostname parameter
ssl.SSLContext.wrapbio didn't require the serverhostname argument to not be None if ssl.SSLContext.checkhostname was set. Due to a missing parameter check in SSLObject, if the serverhostname argument isn't supplied then hostname verification would be silently skipped. This defect could lead to...
7.6CVSS5.9AI score0.00401EPSS
SaveExploits1References12
DEBIAN-CVE-2026-19553
ssl.SSLContext.wrapbio didn't require the serverhostname argument to not be None if ssl.SSLContext.checkhostname was set. Due to a missing parameter check in SSLObject, if the serverhostname argument isn't supplied then hostname verification would be silently skipped. This defect could lead to...
7.6CVSS5.9AI score0.00401EPSS
SaveExploits1References1
20