bit-python-min-2026-115557

bitnami_vulndb

Description

Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration.

Timeline

Published: unknown
Last Modified: unknown

CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "affected": [
    {
      "package": {
        "ecosystem": "Bitnami",
        "name": "python-min",
        "purl": "pkg:bitnami/python-min"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.11.18"
            },
            {
              "introduced": "3.12.0"
            },
            {
              "fixed": "3.12.16"
            },
            {
              "introduced": "3.13.0"
            },
            {
              "fixed": "3.13.18"
            },
            {
              "introduced": "3.14.0"
            },
            {
              "fixed": "3.14.10"
            },
            {
              "introduced": "3.15.0"
            },
            {
              "fixed": "3.15.2"
            }
          ],
          "type": "SEMVER"
        }
      ],
      "severity": [
        {
          "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "type": "CVSS_V4"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2026-115557"
  ],
  "database_specific": {
    "cpes": [
      "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"
    ],
    "severity": "Critical"
  },
  "details": "Python has added a denylist for known compromised certificates to the \"ssl\" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration.",
  "id": "BIT-python-min-2026-115557",
  "modified": "2026-10-30T15:59:08.834Z",
  "published": "2026-10-30T15:37:31.388Z",
  "references": [
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2026/10/20/29"
    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2026/10/24/5"
    },
    {
      "type": "WEB",
      "url": "https://emudhra.we-have-a-problem.com/"
    },
    {
      "type": "WEB",
      "url": "https://github.com/python/cpython/commit/21a50891ab4be2e9955239e625ae2b40c6b1854d"
    },
    {
      "type": "WEB",
      "url": "https://github.com/python/cpython/commit/36cd295f32fc9ba19399e01abee91231440a41dd"
    },
    {
      "type": "WEB",
      "url": "https://github.com/python/cpython/commit/48d9b2712cd52206c7a5882d0fdca4863ed65e93"
    },
    {
      "type": "WEB",
      "url": "https://github.com/python/cpython/commit/7dd8b4736a1419750b94a388e6d158be15836fe6"
    },
    {
      "type": "WEB",
      "url": "https://github.com/python/cpython/commit/98f0e4ed349f370dc8a00366da1a9797e11c9ed5"
    },
    {
      "type": "WEB",
      "url": "https://github.com/python/cpython/commit/a17d9ef549008133eadf20689b1f4787902efe5b"
    },
    {
      "type": "WEB",
      "url": "https://github.com/python/cpython/commit/af52b41afa4330fb38583db553631baa2f122f90"
    },
    {
      "type": "WEB",
      "url": "https://github.com/python/cpython/commit/c7fd7edf7e0d122a3973cf676fae21b6aaa650a8"
    },
    {
      "type": "WEB",
      "url": "https://github.com/python/cpython/commit/e2a9dd97ef9571c710ac0afaa834c8879aebce78"
    },
    {
      "type": "WEB",
      "url": "https://github.com/python/cpython/commit/e4500d8a437ee5b988a5410cb9b59d177aa01370"
    },
    {
      "type": "WEB",
      "url": "https://github.com/python/cpython/commit/e4f63e65a93cf44c14274aa987e644b8c003625e"
    },
    {
      "type": "WEB",
      "url": "https://github.com/python/cpython/commit/e9bf2cf84eebf838a1edaa1c648c2b36345b99d3"
    },
    {
      "type": "WEB",
      "url": "https://github.com/python/cpython/issues/160040"
    },
    {
      "type": "WEB",
      "url": "https://github.com/python/cpython/pull/160042"
    },
    {
      "type": "WEB",
      "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/FNAJMZV6XQYLVPABNINDMF3VF66AYLW4/"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-115557"
    }
  ],
  "schema_version": "1.6.2",
  "summary": "Distrust compromised intermediate certificates in ssl module"
}

View JSON API Download JSON

bit-python-min-2026-115557

Raw JSON Data