MEDIUM 5.3 NVD
CVE-2026-116566
socket.getaddrinfo() previously accepted null bytes within *host* and *port* parameters which can cause the values to be silently truncated.
socket.getaddrinfo() previously accepted null bytes within *host* and *port* parameters which can cause the values to be silently truncated.
References
- https://github.com/python/cpython/issues/160898
- https://github.com/python/cpython/pull/160899
- https://mail.python.org/archives/list/security-announce@python.org/thread/HCHE62VYTPYI6WOP
- https://www.openwall.com/lists/oss-security/2026/10/29/4
This medium severity vulnerability with a CVSS score of 5.3 was published on 2026-10-29 via NVD.
vulnfeed aggregates 16884 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.