Skip to content
OpenAdvisories

Package · Debian

python-anyio

3 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.3

    AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing

    AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. Prior to 4.14.2, connect_tcp() and TLSStream.wrap() can validate internationalized host names after the standard library converts them with ID…