Description
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration.
References
- www.cve.org/CVERecord ↗
- nvd.nist.gov/vuln/detail/CVE-2026-115557 ↗
- www.openwall.com/lists/oss-security/2026/10/20/29 ↗
- emudhra.we-have-a-problem.com/ ↗
- github.com/python/cpython/issues/160040 ↗
- github.com/python/cpython/pull/160042 ↗
- mail.python.org/archives/list/security-announce@python.org/thread/FNAJMZV6XQYLVPABNINDMF3VF66AYLW4/ ↗
- www.openwall.com/lists/oss-security/2026/10/24/5 ↗
Related CVEs
← CVE Index: search every CVE from the last 30 days
This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.