As cited
Copy frozen at (site build).
vulnerabilities
[oss-security][CVE-2026-115557] Distrust compromised intermediate certificates in Python ssl module
Python has added a denylist of known compromised intermediate certificates to its ssl module to protect users from accepting invalid certificates. The change ensures that applications using Python's ssl library will reject these certificates regardless of their chain validation status.
Why it matters: Developers and operators running Python applications need to ensure they are running the patched version to prevent man-in-the-middle attacks via compromised certificate intermediates.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
[oss-security][CVE-2026-115557] Distrust compromised intermediate certificates in Python ssl module
Python's ssl module has been updated to include a denylist of known compromised intermediate certificates, protecting users who connect to servers presenting these certificates. The update addresses CVE-2026-115557 with a CVSS score of 9.4.
Why it matters: Organizations running Python applications need to patch to prevent accepting connections through compromised certificate chains, which could enable man-in-the-middle attacks even when users lack certificate pinning or other hardening measures.
- Source published
- First seen by Cybersecurity Tracker