← All credits

Bénédikt Tran (https://github.com/picnixz)

6 vulnerability records and advisories credit this contributor.

ssl.get_server_certificate(addr, ca_certs=...) verifies the chain but never the identity

Use-after-free of a server-side SSLContext when sni_callback switches contexts

CVE-2026-119170

Regression in FIPS enforcement of hash algorithms affecting only Python 3.14.10

SSLContext.wrap_bio() missing validation of server_hostname parameter

Potential DoS via quadratic complexity in unicodedata.normalize()

FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address