To report a security vulnerability, please use the GitHub private vulnerabilities disclosure workflow. The draft advisory will be used to coordinate the fix and disclosure.
Repository navigation
Security: sethmlarson/truststore
Security
.github/SECURITY.md
-
Concurrent handshakes with a shared `SSLContext` may disable certificate verification of subsequent handshakes on Windows and macOSGHSA-pmqj-r2x2-vx88 published
Oct 12, 2026 by sethmlarsonHigh -
SSLContext.wrap_socket() missing validation of server_hostname parameter for macOS and WindowsGHSA-8v28-6h89-pmvr published
Oct 12, 2026 by sethmlarsonModerate
Learn more about advisories related to sethmlarson/truststore in the GitHub Advisory Database