Lucene search
+L

5 matches found

OSV
OSV
•added 2026/09/22 4:17 p.m.•17 views

DEBIAN-CVE-2026-63374

AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. Prior to 4.14.2, connecttcp and TLSStream.wrap can validate internationalized host names after the standard library converts them with IDNA 2003 instead of IDNA 2008. When a...

9.3CVSS5.9AI score0.00289EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/22 4:17 p.m.•8 views

CVE-2026-63374

AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. Prior to 4.14.2, connecttcp and TLSStream.wrap can validate internationalized host names after the standard library converts them with IDNA 2003 instead of IDNA 2008. When a...

9.3CVSS0.00289EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/22 3:23 p.m.•29 views

CVE-2026-63374 AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing

AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. Prior to 4.14.2, connecttcp and TLSStream.wrap can validate internationalized host names after the standard library converts them with IDNA 2003 instead of IDNA 2008. When a...

9.3CVSS5.8AI score
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•5 views

CVE-2026-63374: Improper Certificate Validation

AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. Prior to 4.14.2, connecttcp and TLSStream.wrap can validate internationalized host names after the standard library converts them with IDNA 2003 instead of IDNA 2008. When a...

9.3CVSS5.9AI score0.00289EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/09/21 4:50 p.m.•3 views

SUSE CVE-2026-63374

AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. Prior to 4.14.2, connecttcp and TLSStream.wrap can validate internationalized host names after the standard library converts them with IDNA 2003 instead of IDNA 2008. When a...

9.3CVSS5.9AI score0.00289EPSS
SaveExploits0References3
Rows per page
Query Builder