https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T10:46:45.806259+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2013-4314 CVE-2013-4314 2026-09-28T10:46:45.809393+00:00

The X509Extension in pyOpenSSL before 0.13.1 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.

 https://vulnerability.circl.lu/vuln/ghsa-6748-36qp-fx6r GHSA-6748-36qp-fx6r — PyOpenSSL Mishandles NUL Byte In Certificate Subject Alternative Name 2026-09-28T10:46:45.809492+00:00

Affected: PyPI: pyOpenSSL

The X509Extension in pyOpenSSL before 0.13.1 does not properly handle a `\0` character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.

 https://vulnerability.circl.lu/vuln/pysec-2013-31 PYSEC-2013-31 2026-09-28T10:46:45.809544+00:00

Affected: PyPI: pyopenssl

The X509Extension in pyOpenSSL before 0.13.1 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.