← All credits
Seth Larson (https://github.com/sethmlarson)
19 vulnerability records and advisories credit this contributor.
CVE-2026-115791
Prevent shadowing stdlib in gzip/tarfile/zipfile CLI during extraction
CVE-2026-19552
ssl.get_server_certificate(addr, ca_certs=...) verifies the chain but never the identity
CVE-2026-115557
Distrust compromised intermediate certificates in ssl module
CVE-2026-115559
imaplib STARTTLS serves plaintext bytes buffered before the handshake as if they came over TLS
CVE-2026-19553
SSLContext.wrap_bio() missing validation of server_hostname parameter
CVE-2026-19445
Use-after-free of a server-side SSLContext when sni_callback switches contexts
CVE-2026-18503
Super-linear CPU usage for unbounded input to csv.Sniffer.sniff()
CVE-2026-17084
stringprep.map_table_b2() deviates from RFC 3454 Table B.2
CVE-2026-15308
Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations
CVE-2026-6019
BaseCookie.js_output() does not neutralize embedded characters