Distrust compromised intermediate certificates in Python ssl module
Python's ssl module now automatically rejects certificates on a denylist of known compromised certificates, regardless of SSLContext policy configuration.
Announced
Machine-extracted · Revision 1Original source
Evidence and details
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates on this denylist will automatically be rejected regardless of the SSLContext policy configuration.
Python
Python has added a denylist for known compromised certificates to the "ssl" module
- Affected versions
- Not stated in this extraction
- Fixed versions
- Not stated in this extraction
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2026-115557
https://www.cve.org/CVERecord?id=CVE-2026-115557
Publisher severity
No explicit severity was extracted.