https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 23:34:14 +0000 https://cve.radiocsirt.org/vuln/cve-2025-15346 <p><strong>Affected:</strong> wolfSSL-py</p> <p>A vulnerability in the handling of verify_mode = CERT_REQUIRED in the wolfssl Python package (wolfssl-py) causes client certificate requirements to not be fully enforced.</p> <p>Because the WOLFSSL_VERIFY_FAIL_IF_NO_PEER_CERT flag was not included, the behavior effectively matched CERT_OPTIONAL: a peer certificate was verified if presented, but connections were incorrectly authenticated when no client certificate was provided.</p> <p>This results in improper authentication, allowing attackers to bypass mutual TLS (mTLS) client authentication by omitting a client certificate during the TLS handshake.</p> <p>The issue affects versions up to and including 5.8.2.</p> <p><strong>Affected:</strong> wolfSSL-py</p> <p>A vulnerability in the handling of verify_mode = CERT_REQUIRED in the wolfssl Python package (wolfssl-py) causes client certificate requirements to not be fully enforced.</p> <p>Because the WOLFSSL_VERIFY_FAIL_IF_NO_PEER_CERT flag was not included, the behavior effectively matched CERT_OPTIONAL: a peer certificate was verified if presented, but connections were incorrectly authenticated when no client certificate was provided.</p> <p>This results in improper authentication, allowing attackers to bypass mutual TLS (mTLS) client authentication by omitting a client certificate during the TLS handshake.</p> <p>The issue affects versions up to and including 5.8.2.</p> https://cve.radiocsirt.org/vuln/cve-2025-15346 https://cve.radiocsirt.org/vuln/ghsa-vj87-jj27-4h9c <p><strong>Affected:</strong> PyPI: wolfssl</p> <p>A vulnerability in the handling of verify_mode = CERT_REQUIRED in the wolfssl Python package (wolfssl-py) causes client certificate requirements to not be fully enforced.</p> <p>Because the WOLFSSL_VERIFY_FAIL_IF_NO_PEER_CERT flag was not included, the behavior effectively matched CERT_OPTIONAL: a peer certificate was verified if presented, but connections were incorrectly authenticated when no client certificate was provided.</p> <p>This results in improper authentication, allowing attackers to bypass mutual TLS (mTLS) client authentication by omitting a client certificate during the TLS handshake.</p> <p>The issue affects versions up to and including 5.8.2.</p> <p><strong>Affected:</strong> PyPI: wolfssl</p> <p>A vulnerability in the handling of verify_mode = CERT_REQUIRED in the wolfssl Python package (wolfssl-py) causes client certificate requirements to not be fully enforced.</p> <p>Because the WOLFSSL_VERIFY_FAIL_IF_NO_PEER_CERT flag was not included, the behavior effectively matched CERT_OPTIONAL: a peer certificate was verified if presented, but connections were incorrectly authenticated when no client certificate was provided.</p> <p>This results in improper authentication, allowing attackers to bypass mutual TLS (mTLS) client authentication by omitting a client certificate during the TLS handshake.</p> <p>The issue affects versions up to and including 5.8.2.</p> https://cve.radiocsirt.org/vuln/ghsa-vj87-jj27-4h9c