11 matches found
CVE-2026-19552
When cacerts parameter was supplied to ssl.getservercertificate function, the identity of the certificate is not checked...
DEBIAN-CVE-2026-19552
When cacerts parameter was supplied to ssl.getservercertificate function, the identity of the certificate is not checked...
CVE-2026-19552
When cacerts parameter was supplied to ssl.getservercertificate function, the identity of the certificate is not checked...
CVE-2026-19552 ssl.get_server_certificate(addr, ca_certs=...) verifies the chain but never the identity
When cacerts parameter was supplied to ssl.getservercertificate function, the identity of the certificate is not checked...
CVE-2026-19552
The ssl.get_server_certificate() function in the Python environment (implied by references) fails to check the identity of the certificate when the ca_certs parameter is provided. This lack of identity verification could potentially allow an attacker to present a certificate that is not properly ...
EUVD-2026-120066
When cacerts parameter was supplied to ssl.getservercertificate function, the identity of the certificate is not checked...
CVE-2026-19552: Python Software Foundation CPython: When ca_certs parameter was supplied to ssl.get_server_certificate() function, the identity of the certificate is not…
When cacerts parameter was supplied to ssl.getservercertificate function, the identity of the certificate is not checked...
EUVD-2025-12107
Malicious code in bioql PyPI...
CVE-2025-46417
The unsafe globals in Picklescan before 0.0.25 do not include ssl. Consequently, ssl.getservercertificate can exfiltrate data via DNS after deserialization...
Duplicate Advisory: Picklescan Vulnerable to Exfiltration via DNS via linecache and ssl.get_server_certificate
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-93mv-x874-956g. This link is maintained to preserve external references. Original Description The unsafe globals in Picklescan before 0.0.25 do not include ssl. Consequently, ssl.getservercertificate can...
