Exploit for CVE-2026-19553

abraxaslabs.tech · github.com/abraxas ·&...

PSF-2026-44

ssl.SSLContext.wrapbio didn't require the serverhostname argument to not be None if ssl.SSLContext.checkhostname was set. Due to a missing parameter check in SSLObject, if the serverhostname argument isn't supplied then hostname verification would be silently skipped. This defect could lead to...