CPE
CPython socket.getaddrinfo() has been identified as accepting embedded null bytes in host and port parameters.