الرئيسية
الرئيسية
الاتجاهات
الاتجاهات
الثغرات
الثغرات
الأخبار
الأخبار
الباحثون
الباحثون
لماذا dbugs؟
لماذا dbugs؟
الإعدادات

Bhuvansh

#39045من 60,391
7.6إجمالي CVSS
الثغرات · 2
N/A
1
عالية
1
PT-2026-140424
2026-11-09
0.0
CVE-2026-19552
Python
Cpython
When ca certs parameter was supplied to ssl.get server certificate() function, the identity of the certificate is not checked.
PT-2026-103461
2026-09-30
7.6
CVE-2026-19553
Python
Python
The `ssl.SSLContext.wrap bio()` function fails to require the `server hostname` argument to be non-null when `ssl.SSLContext.check hostname` is enabled. Due to a missing parameter check in `SSLObject`, if the `server hostname` argument is not provided, hostname verification is silently skipped. This can lead to scenarios where certificate hostname verification appears to succeed despite misconfiguration, as no `ValueError` is raised. This issue also affects `asyncio.create connection()` and `asyncio.loop.start tls()`. If a `server hostname` value that is neither an empty string nor None is passed to these APIs, verification proceeds normally.