BIT-python-min-2026-115557

See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/python-min/BIT-python-min-2026-115557.json
JSON Data
https://api.osv.dev/v1/vulns/BIT-python-min-2026-115557
Aliases
Published
2026-10-30T15:37:31Z
Modified
2026-10-30T20:55:55Z
Summary
Distrust compromised intermediate certificates in ssl module
Details

Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration.

Database specific 
{
    "cpes":  [
        "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"
    ],
    "severity":  "Critical"
}
References

Affected packages

Bitnami / python-min

Package

Name
python-min
Purl
pkg:bitnami/python-min

Severity

  • 9.4 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X CVSS Calculator

Affected ranges

Type
SEMVER
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.11.18
Introduced
3.12.0
Fixed
3.12.16
Introduced
3.13.0
Fixed
3.13.18
Introduced
3.14.0
Fixed
3.14.10
Introduced
3.15.0
Fixed
3.15.2

Database specific

source 
"https://github.com/bitnami/vulndb/tree/main/data/python-min/BIT-python-min-2026-115557.json"