← All credits

Bhuvansh (https://github.com/BHUVANSH855)

2 vulnerability records and advisories credit this contributor.

ssl.get_server_certificate(addr, ca_certs=...) verifies the chain but never the identity

SSLContext.wrap_bio() missing validation of server_hostname parameter