Beveiligingsadvies

CVE-2026-27459

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-17 23:34:28

Laatst bijgewerkt 2026-09-10 12:05:09

Toegewezen door GitHub_M

CVSS-score 8.1

Status PUBLISHED

Beschrijving

pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to `set_cookie_generate_callback` returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer. Starting in version 26.0.0, cookie values that are too long are now rejected.

← Alle CVE's bekijken Bekijk op cve.org ↗