8 matches found
BIT-LIBPYTHON-2026-19553 SSLContext.wrap_bio() missing validation of server_hostname parameter
ssl.SSLContext.wrapbio didn't require the serverhostname argument to not be None if ssl.SSLContext.checkhostname was set. Due to a missing parameter check in SSLObject, if the serverhostname argument isn't supplied then hostname verification would be silently skipped. This defect could lead to...
7.6CVSS6AI score0.00547EPSS
SaveExploits1References12
20