CVE-2026-118767

The Botan C++ cryptography library (versions 1.11.22 through 3.13.0) contains a vulnerability in its Python binding where strings containing U+0000 (NUL) characters are converted to const char* without consistent rejection. This causes the bcrypt and check_bcrypt APIs to process only the prefix b...