CVE-2026-116566

socket.getaddrinfo previously accepted null bytes within host and port parameters which can cause the values to be silently truncated...

EUVD-2026-113279

socket.getaddrinfo previously accepted null bytes within host and port parameters which can cause the values to be silently truncated...

CVE-2026-116566

The socket.getaddrinfo() function is vulnerable to improper neutralization of null bytes (CWE-158). It accepts null bytes within the host and port parameters, which can lead to the silent truncation of these values. This behavior can impact the security of network connections. Remediation involve...

CVE-2026-116566 socket.getaddrinfo() accepts embedded null bytes in host and port

socket.getaddrinfo previously accepted null bytes within host and port parameters which can cause the values to be silently truncated...

CVE-2026-116566 socket.getaddrinfo() accepts embedded null bytes in host and port

socket.getaddrinfo previously accepted null bytes within host and port parameters which can cause the values to be silently truncated...

CVE-2026-116566: Python Software Foundation CPython: socket.getaddrinfo() previously accepted null bytes within *host* and *port* parameters which can cause the values to…

socket.getaddrinfo previously accepted null bytes within host and port parameters which can cause the values to be silently truncated...

CVE-2026-73160 cti-transmute Unauthenticated SSRF via Hostnames Resolving to Internal IP Addresses

Affected versions of cti-transmute contain an SSRF vulnerability in the /fetchmispevent and /mispsearchevents endpoints. The URL validation routine checked whether a supplied hostname was itself an IP literal and rejected private, loopback, link-local, or reserved IPs. However, ordinary domain...