https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-25T16:41:45.136450+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-113296 EUVD-2026-113296 2026-10-25T16:41:45.139773+00:00 EUVD-2026-113296 https://cve.radiocsirt.org/vuln/fkie_cve-2012-5825 fkie_cve-2012-5825 2026-10-25T16:41:45.139806+00:00

Tweepy does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to use of the Python httplib library.

 https://cve.radiocsirt.org/vuln/ghsa-pwx5-xg7g-wpc5 GHSA-pwx5-xg7g-wpc5 — Tweepy does not verify SSL Certificate 2026-10-25T16:41:45.139850+00:00

Affected: PyPI: tweepy

Tweepy does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to use of the Python httplib library.

 https://cve.radiocsirt.org/vuln/gsd-2012-5825 gsd-2012-5825 2026-10-25T16:41:45.139902+00:00 gsd-2012-5825 https://cve.radiocsirt.org/vuln/pysec-2012-17 PYSEC-2012-17 2026-10-25T16:41:45.139927+00:00

Affected: PyPI: tweepy

Tweepy does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to use of the Python httplib library.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2012-5825 Withdrawn: UBUNTU-CVE-2012-5825 2026-10-25T16:41:45.139951+00:00

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: tweepy

Tweepy does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to use of the Python httplib library.