pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to `set_cookie_generate_callback` returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer. Starting in version 26.0.0, cookie values that are too long are now rejected.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-27459US | critical9.8 | — | ||
pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to `set_cookie_generate_callback` retu… | ||||
02
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/errata/RHSA-2026:10754ADVISORY
- https://access.redhat.com/errata/RHSA-2026:11856ADVISORY
- https://access.redhat.com/errata/RHSA-2026:11916ADVISORY
- https://access.redhat.com/errata/RHSA-2026:11996ADVISORY
- https://access.redhat.com/errata/RHSA-2026:13508ADVISORY
- https://access.redhat.com/errata/RHSA-2026:13512ADVISORY
- https://access.redhat.com/errata/RHSA-2026:13545ADVISORY
- https://access.redhat.com/errata/RHSA-2026:13553ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan