{"schema_version":"1","data":[{"id":19312,"advisory_id":"444f4acf-6186-418c-b4ba-05e3e0d49050","revision":1,"source_id":"oss-security","source_url":"https://seclists.org/oss-sec/2026/q4/372","source_published_at":"2026-10-24T16:15:20+00:00","published_at":"2026-10-25T02:25:21.216012+00:00","extraction_method":"llm","technologies":["oss-security","python"],"cve_ids":["CVE-2026-115557"],"event_types":["other"],"payload":{"kind":"other","title":"Distrust compromised intermediate certificates in Python ssl module","summary":"Python's ssl module now automatically rejects certificates on a denylist of known compromised certificates, regardless of SSLContext policy configuration.","evidence":"Python has added a denylist for known compromised certificates to the \"ssl\" module to ensure user safety even without certificate revocation configured. Known compromised certificates on this denylist will automatically be rejected regardless of the SSLContext policy configuration.","products":[{"name":{"value":"Python","evidence":"Python has added a denylist for known compromised certificates to the \"ssl\" module"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2026-115557","evidence":"https://www.cve.org/CVERecord?id=CVE-2026-115557"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false}],"next_after":19312,"next_before":19312}