https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T18:23:41.736933+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-166429 EUVD-2026-166429 2026-10-09T18:23:41.741429+00:00 EUVD-2026-166429 https://cve.radiocsirt.org/vuln/fkie_cve-2013-1909 fkie_cve-2013-1909 2026-10-09T18:23:41.741466+00:00

The Python client in Apache Qpid before 2.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

 https://cve.radiocsirt.org/vuln/ghsa-3g2p-7c6p-vj8c GHSA-3g2p-7c6p-vj8c — Apache Qpid Python client Improper certificate validation 2026-10-09T18:23:41.741510+00:00

Affected: PyPI: qpid-python

The Python client in Apache Qpid before 2.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

 https://cve.radiocsirt.org/vuln/gsd-2013-1909 gsd-2013-1909 2026-10-09T18:23:41.741549+00:00 gsd-2013-1909 https://cve.radiocsirt.org/vuln/pysec-2013-25 PYSEC-2013-25 2026-10-09T18:23:41.741567+00:00

Affected: PyPI: qpid-python

The Python client in Apache Qpid before 2.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

 https://cve.radiocsirt.org/vuln/rhsa-2013:1024 RHSA-2013:1024 — Red Hat Security Advisory: Red Hat Enterprise MRG Messaging 2.3.3 security update 2026-10-09T18:23:41.741600+00:00

python-qpid: client does not validate qpid server TLS/SSL certificate

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-1909 Withdrawn: UBUNTU-CVE-2013-1909 2026-10-09T18:23:41.741627+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: qpid-python, Ubuntu:16.04:LTS: qpid-python

The Python client in Apache Qpid before 2.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.