GHSA-5pwr-322w-8jr4
HIGHCVE-2026-27459If a user provided callback to setcookiegeneratecallback returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer.
- Affected
- >= 22.0.0, < 26.0.0
- Fixed in
- 26.0.0
- Weakness
- CWE-120
- Published
- 2026-03-16
- Source
- github