NONE 0.0 NVD
CVE-2026-19552
a.k.a. CPython
When ca_certs parameter was supplied to ssl.get_server_certificate() function, the identity of the certificate is not checked.
When ca_certs parameter was supplied to ssl.get_server_certificate() function, the identity of the certificate is not checked.
References
- https://github.com/python/cpython/commit/8dde46eaa6baf5f027a7234845b20d50b509624e
- https://github.com/python/cpython/issues/161503
- https://github.com/python/cpython/pull/161507
- https://mail.python.org/archives/list/security-announce@python.org/thread/SXBD6BGHDBTGM4KS
- http://www.openwall.com/lists/oss-security/2026/11/09/25
- https://www.openwall.com/lists/oss-security/2026/11/09/25
This none severity vulnerability with a CVSS score of 0.0 was published on 2026-11-09 via NVD.
vulnfeed aggregates 17092 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.