CVE-2026-27448 PUBLISHED CVSS 7.199999809265137 HIGH

pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to `set_cookie_generate_callback` returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer. Starting in version 26.0.0, cookie values that are too long are now rejected.

EPSS 0.04% · 11.2th percentile

Risk Scores

CVSS v4.0
7.199999809265137
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
EPSS Score
0.04%
11.2th percentile

Affected Products

VendorProductVersions
LinuxLinux2be8e3ee8efd6f99ce454115c29d09750915021a, 2be8e3ee8efd6f99ce454115c29d09750915021a, 2be8e3ee8efd6f99ce454115c29d09750915021a
linuxlinux_kernel2.6.24, 2.6.24, 2.6.24
pycapyopenssl>= 22.0.0, < 26.0.0

Timeline

References

…and 11 more

Open in Interactive Console →