{"id":"CVE-2026-116566","published":"2026-10-29T18:17:24.667","lastModified":"2026-10-30T01:16:44.213","description":"socket.getaddrinfo() previously accepted null bytes within *host* and *port* parameters which can cause the values to be silently truncated.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-158"],"vendors":[],"products":[],"references":[{"url":"https://github.com/python/cpython/commit/131a3a66c5f400b588f9fd2732a5ed4e89623ee3","tags":[]},{"url":"https://github.com/python/cpython/issues/160898","tags":[]},{"url":"https://github.com/python/cpython/pull/160899","tags":[]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/HCHE62VYTPYI6WOPJQDWUBR4CINBPSM7/","tags":[]},{"url":"http://www.openwall.com/lists/oss-security/2026/10/29/4","tags":[]}],"exploitRefs":[{"url":"https://github.com/python/cpython/commit/131a3a66c5f400b588f9fd2732a5ed4e89623ee3","tags":[]},{"url":"https://github.com/python/cpython/issues/160898","tags":[]},{"url":"https://github.com/python/cpython/pull/160899","tags":[]}],"hasPoc":true,"ai":null}