Lucene search
+L

1 matches found

OSV
OSV
added 2026/06/22 4:34 p.m.7 views

CVE-2026-54275 AIOHTTP: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, the serverhostname TLS SNI check can be bypassed when an existing connection is reused. If an application makes multiple requests to the same domain, but with different per-request serverhostname...

6.9CVSS5.9AI score0.00266EPSS
SaveExploits0References3
Rows per page
Query Builder