Skip to content
OpenAdvisories

Package · Alpine

py3-openssl

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.2
    CVE-2026-27459

    pyOpenSSL DTLS cookie callback buffer overflow

    pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to `set_cookie_generate_callback` returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL…

    pyca pyopenssl pyopenssl pyopenssl Debian Ubuntu Alpine PyPI
  • Low 1.7
    CVE-2026-27448

    pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback

    pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to `set_tlsext_servername_callback` raised an unhandled exception, this would result in a connection being accepted. …

    pyca pyopenssl pyopenssl pyopenssl Debian Ubuntu Alpine PyPI