CVE-2026-19552

Description

When ca_certs parameter was supplied to ssl.get_server_certificate() function, the identity of the certificate is not checked.

References

• https://github.com/python/cpython/issues/161503
• https://github.com/python/cpython/pull/161507
• https://mail.python.org/archives/list/security-announce@python.org/thread/SXBD6BGHDBTGM4KSUMQEWYIQ5RO4BQ76/