Lucene search
+L

6 matches found

PyPA
PyPA
•added 2026/06/29 11:50 a.m.•19 views

wolfSSL Python module vulnerable to Improper Authentication

A vulnerability in the handling of verifymode = CERTREQUIRED in the wolfssl Python package wolfssl-py causes client certificate requirements to not be fully enforced.Because the WOLFSSLVERIFYFAILIFNOPEERCERT flag was not included, the behavior effectively matched CERTOPTIONAL: a peer certificate...

9.3CVSS5.6AI score0.00334EPSS
SaveExploits0References7Affected Software1
OSV
OSV
•added 2026/06/29 11:50 a.m.•26 views

PYSEC-2026-575 wolfSSL Python module vulnerable to Improper Authentication

A vulnerability in the handling of verifymode = CERTREQUIRED in the wolfssl Python package wolfssl-py causes client certificate requirements to not be fully enforced. Because the WOLFSSLVERIFYFAILIFNOPEERCERT flag was not included, the behavior effectively matched CERTOPTIONAL: a peer certificate...

9.3CVSS5.6AI score0.00334EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/01/08 12:31 a.m.•43 views

EUVD-2026-1463

wolfSSL Python module vulnerable to Improper Authentication...

9.3CVSS5.9AI score0.00334EPSS
SaveExploits0References5
OSV
OSV
•added 2026/01/08 12:31 a.m.•14 views

GHSA-VJ87-JJ27-4H9C wolfSSL Python module vulnerable to Improper Authentication

A vulnerability in the handling of verifymode = CERTREQUIRED in the wolfssl Python package wolfssl-py causes client certificate requirements to not be fully enforced. Because the WOLFSSLVERIFYFAILIFNOPEERCERT flag was not included, the behavior effectively matched CERTOPTIONAL: a peer certificate...

9.3CVSS5.6AI score0.00334EPSS
SaveExploits0References5
OSV
OSV
•added 2026/01/08 12:15 a.m.•24 views

DEBIAN-CVE-2025-15346

A vulnerability in the handling of verifymode = CERTREQUIRED in the wolfssl Python package wolfssl-py causes client certificate requirements to not be fully enforced. Because the WOLFSSLVERIFYFAILIFNOPEERCERT flag was not included, the behavior effectively matched CERTOPTIONAL: a peer certificate...

9.3CVSS5.6AI score0.00334EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/08 12:15 a.m.•25 views

CVE-2025-15346

A vulnerability in the handling of verifymode = CERTREQUIRED in the wolfssl Python package wolfssl-py causes client certificate requirements to not be fully enforced. Because the WOLFSSLVERIFYFAILIFNOPEERCERT flag was not included, the behavior effectively matched CERTOPTIONAL: a peer certificate...

9.3CVSS0.00334EPSS
SaveExploits0References3
Rows per page
Query Builder