Skip to content
Threat Feed
Subscribe

Vendor

AnyIO

1 brief RSS
critical advisory

AnyIO TLS Certificate Spoofing via IDNA 2003 Encoding

AnyIO versions prior to 4.14.2 are vulnerable to TLS certificate spoofing when using IDNA 2003 encoded internationalized domain names, allowing an attacker who redirects traffic to present a domain-validated certificate that the client incorrectly trusts.

AnyIO +1 privilege-escalation vulnerability python linux
1t updated