← All credits

Kirill Podoprigora (https://github.com/Eclips4)

3 vulnerability records and advisories credit this contributor.

CVE-2026-124249

`http.cookiejar` applies expired `Set-Cookie` to cookie store before policy validation

ssl.get_server_certificate(addr, ca_certs=...) verifies the chain but never the identity

`HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matching