← All credits

devdanzin (https://github.com/devdanzin)

2 vulnerability records and advisories credit this contributor.

ssl.get_server_certificate(addr, ca_certs=...) verifies the chain but never the identity

SSLContext.wrap_bio() missing validation of server_hostname parameter