{"id":"CVE-2026-19552","published":"2026-11-09T15:17:21.017","lastModified":"2026-11-11T01:17:16.593","description":"When ca_certs parameter was supplied to ssl.get_server_certificate() function, the identity of the certificate is not checked.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://github.com/python/cpython/commit/8dde46eaa6baf5f027a7234845b20d50b509624e","tags":[]},{"url":"https://github.com/python/cpython/issues/161503","tags":[]},{"url":"https://github.com/python/cpython/pull/161507","tags":[]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/SXBD6BGHDBTGM4KSUMQEWYIQ5RO4BQ76/","tags":[]},{"url":"http://www.openwall.com/lists/oss-security/2026/11/09/25","tags":[]}],"exploitRefs":[{"url":"https://github.com/python/cpython/commit/8dde46eaa6baf5f027a7234845b20d50b509624e","tags":[]},{"url":"https://github.com/python/cpython/issues/161503","tags":[]},{"url":"https://github.com/python/cpython/pull/161507","tags":[]}],"hasPoc":true,"ai":null}