Restkit allows man-in-the-middle attackers to spoof TLS servers by leveraging use of the ssl.wrapsocket function in Python with the default CERTNONE value for the cert_reqs argument.
"https://github.com/pypa/advisory-database/blob/main/vulns/restkit/PYSEC-2017-69.yaml"