CVE-2026-19553Published
SSLContext.wrap_bio() missing validation of server_hostname parameter
Exact source revision recorded 23 Oct 2026 15:48:27 UTC. It does not establish the source's current position. Latest evidence.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-19553 · Microsoft / collected KEV context
cve-program · CVE-2026-19553
- https://github.com/python/cpython/pull/158503
- https://github.com/python/cpython/issues/156793
- https://mail.python.org/archives/list/[email protected]/thread/QNZRG3YOAMTHDCMVCICXGY6YEFPY2VDL/
- https://github.com/python/cpython/commit/1697ea386c707142555d98a1263176bbbc014a96
- https://github.com/python/cpython/commit/641390146a16a38e6701923f4ee4f1940ae77082
- https://github.com/python/cpython/commit/966bf426d0b6c31c1b0a255ff14a17143a466ced
- https://github.com/python/cpython/commit/f4e43ba525187282f2011da0e6ffc0d2b08d8062
- https://github.com/python/cpython/commit/869069d52ce0efab2f8c38197e92cdaaa312f1ed
- https://github.com/python/cpython/commit/5867d4e4ae6d1062352baf6b497a4026e8578ccf
- https://github.com/python/cpython/commit/bdebbf9b366ec91e9cd9daa0b3510c9e84b60b80
Current operational correlations are not mixed into this historical source record. Open latest evidence to discover current connections.