Skip to content
OpenAdvisories

Product · pyca

pyopenssl

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 1.7
    CVE-2026-27448

    pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback

    pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to `set_tlsext_servername_callback` raised an unhandled exception, this would result in a connection being accepted. …

    pyca pyopenssl pyopenssl pyopenssl Debian Ubuntu Alpine PyPI