pyca pyopenssl vulnerabilities (CVE)

CVE records published for pyca pyopenssl, newest first. Follow to get an email when a new one appears.

2 results

7.2High

CVE-2026-27459 7 months ago

pyOpenSSL DTLS cookie callback buffer overflow

pyca pyopenssl; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9; Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9

pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to `set_cookie_generate_callback` returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL…

1.7Low

CVE-2026-27448 7 months ago

pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback

pyca pyopenssl

pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to `set_tlsext_servername_callback` raised an unhandled exception, this would result in a connection being accepted. …