{"id":"CVE-2026-27448","aliases":["ALPINE-CVE-2026-27448","AZL-80031","BELL-CVE-2026-27448","CLSA-2026-1775781161","CLSA-2026-1775781163","CLSA-2026-1775781164","CLSA-2026-1776098295","CLSA-2026-1779181743","DEBIAN-CVE-2026-27448","EUVD-2026-12675","GHSA-vp96-hxj8-p424","MGASA-2026-0074","OESA-2026-1729","OESA-2026-1730","OESA-2026-1731","OESA-2026-1732","OESA-2026-1733","OESA-2026-1734","PYSEC-2026-2268","RHSA-2026:7224","ROOT-APP-PYPI-CVE-2026-27448","SUSE-EL-9-CLIENT-TOOLS-2026-2255","SUSE-RU-2026:2769-1","SUSE-SU-2026:1192-1","SUSE-SU-2026:1416-1","SUSE-SU-2026:1582-1","SUSE-SU-2026:20930-1","SUSE-SU-2026:20954-1","SUSE-SU-2026:20960-1","SUSE-SU-2026:21990-1","SUSE-SU-2026:2242-1","SUSE-SU-2026:2244-1","SUSE-SU-2026:2255-1","SUSE-SU-2026:3424-1","UBUNTU-CVE-2026-27448","USN-8115-1","USN-8335-1","openSUSE-SU-2026:10392-1","openSUSE-SU-2026:20419-1"],"status":"published","title":"pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback","description":"pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to `set_tlsext_servername_callback` raised an unhandled exception, this would result in a connection being accepted. If a user was relying on this callback for any security-sensitive behavior, this could allow bypassing it. Starting in version 26.0.0, unhandled exceptions now result in rejecting the connection.","severity":{"version":"4.0","score":1.7,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00256,"percentile":0.1739,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-636"],"published":"2026-03-16T15:15:43Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"PyPI","package":"pyopenssl","fixed_in":["26.0.0"],"sources":["ghsa","osv"]},{"ecosystem":"Alpine:v3.23","package":"py3-openssl","fixed_in":["26.1.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"py3-openssl","fixed_in":["26.1.0-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"pyOpenSSL","fixed_in":["24.2.1-2"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"py3-openssl","fixed_in":["25.0.0-r1"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"py3-openssl","fixed_in":["26.0.0-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"pyOpenSSL-doc","fixed_in":["21.0.0-1.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-pyOpenSSL","fixed_in":["21.0.0-1.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"pyOpenSSL-doc","fixed_in":["21.0.0-1.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-pyOpenSSL","fixed_in":["21.0.0-1.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"pyopenssl","fixed_in":["25.0.0-1+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"pyopenssl","fixed_in":["26.0.0-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"pyOpenSSL","fixed_in":["20.0.1-2.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"pyOpenSSL","fixed_in":["21.0.0-3.oe2203sp4"],"sources":["osv"]},{"ecosystem":"Root:PyPI","package":"rootio-pyOpenSSL","fixed_in":["22.0.0+root.io.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"python-pyOpenSSL","fixed_in":["19.0.0-150300.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"python-pyOpenSSL","fixed_in":["17.1.0-4.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"python3-pyOpenSSL","fixed_in":["21.0.0-150400.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"python3-pyOpenSSL","fixed_in":["21.0.0-150400.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"python3-pyOpenSSL","fixed_in":["21.0.0-150400.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"python3-pyOpenSSL","fixed_in":["21.0.0-150400.22.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"pyopenssl","fixed_in":["0.15.1-2ubuntu0.2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"pyopenssl","fixed_in":["17.5.0-1ubuntu1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"pyopenssl","fixed_in":["19.0.0-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"pyopenssl","fixed_in":["21.0.0-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"pyopenssl","fixed_in":["23.2.0-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"pyopenssl","fixed_in":["25.0.0-1ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"pyopenssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.14.0"},{"fixed":"26.0.0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"py3-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.1.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"py3-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.1.0-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.2.1-2"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"py3-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25.0.0-r0"},{"fixed":"25.0.0-r1"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"py3-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.2.0-r0"},{"fixed":"26.0.0-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"pyopenssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.3.0"},{"fixed":"23.3.0.post1+tuxcare"}]}],"versions":["23.3.0"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"pyopenssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24.3.0"},{"fixed":"24.3.0.post1+tuxcare"}]}],"versions":["24.3.0"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"pyopenssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25.3.0"},{"fixed":"25.3.0.post1+tuxcare"}]}],"versions":["25.3.0"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"pyOpenSSL-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.0-1.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.0-1.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"pyOpenSSL-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.0-1.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.0-1.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"pyopenssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["23.0.0-1","23.2.0-1","24.0.0-1","24.0.0-2","24.0.0-3","24.0.0-4","24.0.0-5","24.1.0-1","24.2.1-1","24.3.0-1","25.0.0-1","25.1.0-1","25.1.0-2","25.3.0-1","25.3.0-2","26.0.0-1","26.1.0-1","26.2.0-1","26.2.0-1~exp1","26.3.0-1","26.3.0-1~exp1","26.4.0-1"]},{"source":"osv","ecosystem":"Debian:13","package":"pyopenssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.0-1+deb13u1"}]}],"versions":["25.0.0-1"]},{"source":"osv","ecosystem":"Debian:14","package":"pyopenssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.0.0-1"}]}],"versions":["25.0.0-1","25.1.0-1","25.1.0-2","25.3.0-1","25.3.0-2"]},{"source":"osv","ecosystem":"PyPI","package":"pyopenssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.14.0"},{"fixed":"26.0.0"}]}],"versions":["0.14","0.15","0.15.1","16.0.0","16.1.0","16.2.0","17.0.0","17.1.0","17.2.0","17.3.0","17.4.0","17.5.0","18.0.0","19.0.0","19.1.0","20.0.0","20.0.1","21.0.0","22.0.0","22.1.0","23.0.0","23.1.0","23.1.1","23.2.0","23.3.0","24.0.0","24.1.0","24.2.1","24.3.0","25.0.0","25.1.0","25.2.0","25.3.0"]},{"source":"osv","ecosystem":"Mageia:9","package":"python-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.0-1.1.mga9"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.0-3.oe2403sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.0-3.oe2403sp2"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.0-3.oe2403sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.0.1-2.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.0-3.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.0-3.oe2403"}]}],"bundled":2},{"source":"osv","ecosystem":"PyPI","package":"pyopenssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.14"},{"fixed":"26.0.0"}]}],"versions":["0.14","0.15","0.15.1","16.0.0","16.1.0","16.2.0","17.0.0","17.1.0","17.2.0","17.3.0","17.4.0","17.5.0","18.0.0","19.0.0","19.1.0","20.0.0","20.0.1","21.0.0","22.0.0","22.1.0","23.0.0","23.1.0","23.1.1","23.2.0","23.3.0","24.0.0","24.1.0","24.2.1","24.3.0","25.0.0","25.1.0","25.2.0","25.3.0"]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.0.0-1.1.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"pyOpenSSL-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.0.0-1.1.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.0.0-1.1.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Root:PyPI","package":"rootio-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.0.0+root.io.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-1.76.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools SLE-15","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150002.5.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools SLE-Micro-5","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150002.5.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.2.0-150400.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP7","package":"python-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.2.0-150400.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"python-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.2.0-150400.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"python-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.2.0-150400.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"python-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.2.0-150400.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"python-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.2.0-150400.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"python-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.2.0-150400.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"python-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.2.0-150400.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"python-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.2.0-150400.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"python-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.2.0-150400.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"python-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.2.0-150400.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"python-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.2.0-150400.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.2.0-150400.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"python-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.0-150300.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"python-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.1.0-4.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"python-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.0-160000.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"python-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.0-160000.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"python-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.0-slfo.1.1_2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"python-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.0-2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"python3-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.0-150400.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"python3-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.0-150400.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"python3-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.0-150400.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"python3-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.0-150400.22.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"pyopenssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.1-2ubuntu0.2+esm1"}]}],"versions":["0.15.1-2build1","0.15.1-2ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"pyopenssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.5.0-1ubuntu1+esm1"}]}],"versions":["16.2.0-1","17.5.0-1","17.5.0-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"pyopenssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.0-1ubuntu0.1~esm1"}]}],"versions":["19.0.0-1","19.0.0-1build1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"pyopenssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.0-1ubuntu0.1"}]}],"versions":["20.0.1-1","21.0.0-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"pyopenssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.2.0-1ubuntu0.1"}]}],"versions":["23.0.0-1","23.2.0-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"pyopenssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.0-1ubuntu0.1"}]}],"versions":["25.0.0-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"pyopenssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.0-1ubuntu0.1"}]}],"versions":["20.0.1-1","21.0.0-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"pyopenssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.2.0-1ubuntu0.1"}]}],"versions":["23.0.0-1","23.2.0-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"pyopenssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.0-1ubuntu0.1"}]}],"versions":["25.0.0-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"pyopenssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.1-2ubuntu0.2+esm1"}]}],"versions":["0.15.1-2build1","0.15.1-2ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"pyopenssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.5.0-1ubuntu1+esm1"}]}],"versions":["16.2.0-1","17.5.0-1","17.5.0-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"pyopenssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.0-1ubuntu0.1~esm1"}]}],"versions":["19.0.0-1","19.0.0-1build1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.0.0-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"python-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.0-160000.3.1"}]}],"bundled":2}],"products":[{"vendor":"pyca","product":"pyopenssl"},{"vendor":"pyopenssl","product":"pyopenssl"}],"references":[{"url":"https://github.com/pyca/pyopenssl/security/advisories/GHSA-vp96-hxj8-p424","tags":["x_refsource_CONFIRM","Vendor Advisory","advisory","web","article","report"]},{"url":"https://github.com/pyca/pyopenssl/commit/d41a814759a9fb49584ca8ab3f7295de49a85aa0","tags":["x_refsource_MISC","Patch","fix","web","article"]},{"url":"https://github.com/pyca/pyopenssl/blob/358cbf29c4e364c59930e53a270116249581eaa3/CHANGELOG.rst#L27","tags":["x_refsource_MISC","Release Notes","web","advisory","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27448","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-vp96-hxj8-p424"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-27448","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-27448","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1776098295.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1779181743.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27448.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-27448","tags":["advisory"]},{"url":"https://github.com/pyca/pyopenssl","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2026-0074.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35254","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2026/03/20/5","tags":["web"]},{"url":"https://github.com/pyca/pyopenssl/security/advisories/GHSA-5pwr-322w-8jr4","tags":["advisory","article"]},{"url":"https://ubuntu.com/security/notices/USN-8115-1","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1729","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27459","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1730","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1731","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1732","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1733","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1734","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:7224","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-27459","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-27448","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7224.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2448508","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-27448","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2448503","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-27459","tags":["advisory"]},{"url":"https://github.com/pyca/pyopenssl/blob/358cbf29c4e364c59930e53a270116249581eaa3/CHANGELOG.rst","tags":["article"]},{"url":"https://github.com/pyca/pyopenssl/commit/57f09bb4bb051d3bc2a1abd36e9525313d5cd408","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement//suse-el-9-client-tools-2026-2255/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1254629","tags":["report"]},{"url":"https://bugzilla.suse.com/1254900","tags":["report"]},{"url":"https://bugzilla.suse.com/1257583","tags":["report"]},{"url":"https://bugzilla.suse.com/1257831","tags":["report"]},{"url":"https://bugzilla.suse.com/1258957","tags":["report"]},{"url":"https://bugzilla.suse.com/1259554","tags":["report"]},{"url":"https://bugzilla.suse.com/1259700","tags":["report"]},{"url":"https://bugzilla.suse.com/1259804","tags":["report"]},{"url":"https://bugzilla.suse.com/1259808","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31958","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/-2026-2769/suse-ru-20262769-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1255418","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261192-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261416-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261582-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620930-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620954-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620960-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621990-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1252964","tags":["report"]},{"url":"https://bugzilla.suse.com/1254619","tags":["report"]},{"url":"https://bugzilla.suse.com/1257941","tags":["report"]},{"url":"https://bugzilla.suse.com/1258927","tags":["report"]},{"url":"https://bugzilla.suse.com/1259208","tags":["report"]},{"url":"https://bugzilla.suse.com/1261810","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262242-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262244-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262255-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263424-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-27448","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8335-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-27459","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-27448","title":"pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback","description":"pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to `set_tlsext_servername_callback` raised an unhandled exception, this would result in a connection being accepted. If a user was relying on this callback for any security-sensitive behavior, this could allow bypassing it. Starting in version 26.0.0, unhandled exceptions now result in rejecting the connection.","status":"published","published":"2026-03-17T23:24:30.661Z","modified":"2026-03-18T20:18:08.768Z","cvss":[{"version":"4.0","score":1.7,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U","level":"low","assessor":"cna"}],"cwes":["CWE-636"],"updated_at":"2026-11-02T14:19:49.199185Z"}],"euvd":[{"id":"EUVD-2026-12675","description":"pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to `set_tlsext_servername_callback` raised an unhandled exception, this would result in a connection being accepted. If a user was relying on this callback for any security-sensitive behavior, this could allow bypassing it. Starting in version 26.0.0, unhandled exceptions now result in rejecting the connection.","status":"published","published":"2026-03-17T23:24:30Z","modified":"2026-03-18T20:18:08Z","cvss":[{"version":"4.0","score":1.7,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U","level":"low"}],"updated_at":"2026-11-02T19:25:32.813864Z"}],"ghsa":[{"id":"GHSA-vp96-hxj8-p424","title":"pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback","description":"If a user provided callback to `set_tlsext_servername_callback` raised an unhandled exception, this would result in a connection being accepted. If a user was relying on this callback for any security-sensitive behavior, this could allow bypassing it.\n\nUnhandled exceptions now result in rejecting the connection.\n\nCredit to **Leury Castillo** for reporting this issue.","status":"published","published":"2026-03-16T15:15:43Z","modified":"2026-03-19T18:28:02Z","cvss":[{"version":"4.0","score":1.7,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U","level":"low"}],"cwes":["CWE-636"],"updated_at":"2026-11-02T14:39:38.524712Z"}],"nvd":[{"id":"CVE-2026-27448","description":"pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to `set_tlsext_servername_callback` raised an unhandled exception, this would result in a connection being accepted. If a user was relying on this callback for any security-sensitive behavior, this could allow bypassing it. Starting in version 26.0.0, unhandled exceptions now result in rejecting the connection.","status":"published","published":"2026-03-18T00:16:19.107Z","modified":"2026-06-17T10:27:10.57Z","cvss":[{"version":"4.0","score":1.7,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low","assessor":"secondary"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-636"],"updated_at":"2026-11-02T14:12:09.735529Z"}],"osv":[{"id":"ALPINE-CVE-2026-27448","description":"pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to `set_tlsext_servername_callback` raised an unhandled exception, this would result in a connection being accepted. If a user was relying on this callback for any security-sensitive behavior, this could allow bypassing it. Starting in version 26.0.0, unhandled exceptions now result in rejecting the connection.","status":"published","published":"2026-03-18T00:16:19.107Z","modified":"2026-11-03T06:32:53.570902745Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T07:16:26.770911Z"},{"id":"BELL-CVE-2026-27448","status":"published","published":"2026-03-19T06:08:18.849825Z","modified":"2026-03-28T07:16:40.138542Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:23.315185Z"},{"id":"CVE-2026-27448","title":"pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback","description":"pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to `set_tlsext_servername_callback` raised an unhandled exception, this would result in a connection being accepted. If a user was relying on this callback for any security-sensitive behavior, this could allow bypassing it. Starting in version 26.0.0, unhandled exceptions now result in rejecting the connection.","status":"published","published":"2026-03-17T23:24:30.661Z","modified":"2026-10-28T02:30:29.90512758Z","cvss":[{"version":"4.0","score":1.7,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U","level":"low"}],"cwes":["CWE-636"],"updated_at":"2026-11-02T15:45:00.180685Z"},{"id":"DEBIAN-CVE-2026-27448","description":"pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to `set_tlsext_servername_callback` raised an unhandled exception, this would result in a connection being accepted. If a user was relying on this callback for any security-sensitive behavior, this could allow bypassing it. Starting in version 26.0.0, unhandled exceptions now result in rejecting the connection.","status":"published","published":"2026-03-18T00:16:19.107Z","modified":"2026-10-01T03:03:01.324353095Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:53.877573Z"},{"id":"GHSA-vp96-hxj8-p424","title":"pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback","description":"If a user provided callback to `set_tlsext_servername_callback` raised an unhandled exception, this would result in a connection being accepted. If a user was relying on this callback for any security-sensitive behavior, this could allow bypassing it.\n\nUnhandled exceptions now result in rejecting the connection.\n\nCredit to **Leury Castillo** for reporting this issue.","status":"published","published":"2026-03-16T15:15:43Z","modified":"2026-09-10T03:51:00.75301336Z","cvss":[{"version":"4.0","score":1.7,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U","level":"low"}],"cwes":["CWE-636"],"updated_at":"2026-11-02T15:46:57.694388Z"},{"id":"OESA-2026-1729","title":"pyOpenSSL security update","description":"pyOpenSSL is a rather thin wrapper around (a subset of) the OpenSSL library. With thin wrapper we mean that a lot of the object methods do nothing more than calling a corresponding function in the OpenSSL library.\r\n\r\nSecurity Fix(es):\n\nA security vulnerability exists in the PyOpenSSL library\u0026apos;s `set_tlsext_servername_callback` function. When a user-provided callback function raises an unhandled exception, the connection would still be accepted. If a user relies on this callback for any security-sensitive behavior (such as server name-based access control or certificate validation), this vulnerability could allow the security mechanism to be bypassed, potentially permitting unauthorized connections or access.(CVE-2026-27448)\n\npyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to `set_cookie_generate_callback` returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer. Starting in version 26.0.0, cookie values that are too long are now rejected.(CVE-2026-27459)","status":"published","published":"2026-03-27T11:10:45Z","modified":"2026-08-18T01:19:42.718919666Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1730","title":"pyOpenSSL security update","description":"pyOpenSSL is a rather thin wrapper around (a subset of) the OpenSSL library. With thin wrapper we mean that a lot of the object methods do nothing more than calling a corresponding function in the OpenSSL library.\r\n\r\nSecurity Fix(es):\n\nA security vulnerability exists in the PyOpenSSL library\u0026apos;s `set_tlsext_servername_callback` function. When a user-provided callback function raises an unhandled exception, the connection would still be accepted. If a user relies on this callback for any security-sensitive behavior (such as server name-based access control or certificate validation), this vulnerability could allow the security mechanism to be bypassed, potentially permitting unauthorized connections or access.(CVE-2026-27448)\n\npyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to `set_cookie_generate_callback` returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer. Starting in version 26.0.0, cookie values that are too long are now rejected.(CVE-2026-27459)","status":"published","published":"2026-03-27T11:10:45Z","modified":"2026-08-18T01:19:43.164903234Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1731","title":"pyOpenSSL security update","description":"pyOpenSSL is a rather thin wrapper around (a subset of) the OpenSSL library. With thin wrapper we mean that a lot of the object methods do nothing more than calling a corresponding function in the OpenSSL library.\r\n\r\nSecurity Fix(es):\n\nA security vulnerability exists in the PyOpenSSL library\u0026apos;s `set_tlsext_servername_callback` function. When a user-provided callback function raises an unhandled exception, the connection would still be accepted. If a user relies on this callback for any security-sensitive behavior (such as server name-based access control or certificate validation), this vulnerability could allow the security mechanism to be bypassed, potentially permitting unauthorized connections or access.(CVE-2026-27448)\n\npyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to `set_cookie_generate_callback` returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer. Starting in version 26.0.0, cookie values that are too long are now rejected.(CVE-2026-27459)","status":"published","published":"2026-03-27T11:10:45Z","modified":"2026-08-18T01:19:43.1155289Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1732","title":"pyOpenSSL security update","description":"pyOpenSSL is a rather thin wrapper around (a subset of) the OpenSSL library. With thin wrapper we mean that a lot of the object methods do nothing more than calling a corresponding function in the OpenSSL library.\r\n\r\nSecurity Fix(es):\n\nA security vulnerability exists in the PyOpenSSL library\u0026apos;s `set_tlsext_servername_callback` function. When a user-provided callback function raises an unhandled exception, the connection would still be accepted. If a user relies on this callback for any security-sensitive behavior (such as server name-based access control or certificate validation), this vulnerability could allow the security mechanism to be bypassed, potentially permitting unauthorized connections or access.(CVE-2026-27448)","status":"published","published":"2026-03-27T11:10:45Z","modified":"2026-08-18T01:19:43.052700161Z","cvss":[{"version":"4.0","score":1.7,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1733","title":"pyOpenSSL security update","description":"pyOpenSSL is a rather thin wrapper around (a subset of) the OpenSSL library. With thin wrapper we mean that a lot of the object methods do nothing more than calling a corresponding function in the OpenSSL library.\r\n\r\nSecurity Fix(es):\n\nA security vulnerability exists in the PyOpenSSL library\u0026apos;s `set_tlsext_servername_callback` function. When a user-provided callback function raises an unhandled exception, the connection would still be accepted. If a user relies on this callback for any security-sensitive behavior (such as server name-based access control or certificate validation), this vulnerability could allow the security mechanism to be bypassed, potentially permitting unauthorized connections or access.(CVE-2026-27448)","status":"published","published":"2026-03-27T11:10:45Z","modified":"2026-08-18T01:19:43.856655389Z","cvss":[{"version":"4.0","score":1.7,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1734","title":"pyOpenSSL security update","description":"pyOpenSSL is a rather thin wrapper around (a subset of) the OpenSSL library. With thin wrapper we mean that a lot of the object methods do nothing more than calling a corresponding function in the OpenSSL library.\r\n\r\nSecurity Fix(es):\n\nA security vulnerability exists in the PyOpenSSL library\u0026apos;s `set_tlsext_servername_callback` function. When a user-provided callback function raises an unhandled exception, the connection would still be accepted. If a user relies on this callback for any security-sensitive behavior (such as server name-based access control or certificate validation), this vulnerability could allow the security mechanism to be bypassed, potentially permitting unauthorized connections or access.(CVE-2026-27448)\n\npyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to `set_cookie_generate_callback` returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer. Starting in version 26.0.0, cookie values that are too long are now rejected.(CVE-2026-27459)","status":"published","published":"2026-03-27T11:10:45Z","modified":"2026-08-18T01:19:43.071956327Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"PYSEC-2026-2268","description":"pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to `set_tlsext_servername_callback` raised an unhandled exception, this would result in a connection being accepted. If a user was relying on this callback for any security-sensitive behavior, this could allow bypassing it. Starting in version 26.0.0, unhandled exceptions now result in rejecting the connection.","status":"published","published":"2026-03-18T00:16:19.107Z","modified":"2026-07-13T07:15:42.074177418Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:55.537808Z"},{"id":"RHSA-2026:7224","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-04-21T10:09:47Z","modified":"2026-10-10T10:20:14Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"ROOT-APP-PYPI-CVE-2026-27448","title":"CVE-2026-27448 in rootio-pyOpenSSL - Patched by Root","description":"Root has patched CVE-2026-27448 in the rootio-pyOpenSSL package for Root:PyPI. Multiple fixed versions available.","status":"published","published":"2026-07-11T08:16:10Z","modified":"2026-07-11T12:45:04.56863477Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:27.940619Z"},{"id":"UBUNTU-CVE-2026-27448","description":"pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to `set_tlsext_servername_callback` raised an unhandled exception, this would result in a connection being accepted. If a user was relying on this callback for any security-sensitive behavior, this could allow bypassing it. Starting in version 26.0.0, unhandled exceptions now result in rejecting the connection.","status":"published","published":"2026-03-18T00:00:00Z","modified":"2026-05-28T15:59:14.728670572Z","cvss":[{"version":"4.0","score":1.7,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U","level":"low"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T16:56:08.726452Z"},{"id":"AZL-80031","title":"CVE-2026-27448 affecting package pyOpenSSL for versions less than 24.2.1-2","description":"pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to `set_tlsext_servername_callback` raised an unhandled exception, this would result in a connection being accepted. If a user was relying on this callback for any security-sensitive behavior, this could allow bypassing it. Starting in version 26.0.0, unhandled exceptions now result in rejecting the connection.","status":"published","published":"2026-03-18T00:16:19Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:24.800038Z"},{"id":"CLSA-2026-1775781161","title":"TuxCare security update for pyopenssl (2 CVEs)","description":"TuxCare rebuilt pyopenssl to address 2 CVEs. Fixed in 23.3.0.post1+tuxcare.","status":"published","published":"2026-08-04T14:52:23Z","modified":"2026-10-15T09:48:05.04152633Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1775781163","title":"TuxCare security update for pyopenssl (2 CVEs)","description":"TuxCare rebuilt pyopenssl to address 2 CVEs. Fixed in 24.3.0.post1+tuxcare.","status":"published","published":"2026-08-04T14:52:23Z","modified":"2026-10-15T09:48:04.97673413Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1775781164","title":"TuxCare security update for pyopenssl (2 CVEs)","description":"TuxCare rebuilt pyopenssl to address 2 CVEs. Fixed in 25.3.0.post1+tuxcare.","status":"published","published":"2026-08-04T14:52:23Z","modified":"2026-10-15T09:48:04.987780229Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1776098295","title":"pyOpenSSL: Fix of CVE-2026-27448","description":"- CVE-2026-27448: fix fail-open in set_tlsext_servername_callback when callback raises exception","status":"published","published":"2026-04-13T16:38:20Z","modified":"2026-06-01T00:32:21.53014592Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1779181743","title":"pyOpenSSL: Fix of CVE-2026-27448","description":"- CVE-2026-27448: fix fail-open in set_tlsext_servername_callback when callback raises exception","status":"published","published":"2026-05-19T09:09:07Z","modified":"2026-06-01T00:32:52.843280398Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"MGASA-2026-0074","title":"Updated python-openssl packages fix security vulnerabilities","description":"pyOpenSSL allows TLS connection bypass via unhandled callback exception\nin set_tlsext_servername_callback. (CVE-2026-27448)\npyOpenSSL DTLS cookie callback buffer overflow. (CVE-2026-27459)\n","status":"published","published":"2026-03-31T23:05:51Z","modified":"2026-04-16T04:44:02.319414283Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2026:10392-1","title":"python311-pyOpenSSL-26.0.0-1.1 on GA media","description":"These are all security issues fixed in the python311-pyOpenSSL-26.0.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-03-19T00:00:00Z","modified":"2026-03-20T08:45:06.813518Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"openSUSE-SU-2026:20419-1","title":"Security update for python-pyOpenSSL","description":"This update for python-pyOpenSSL fixes the following issues:\n\n- CVE-2026-27448: unhandled exception can result in connection not being cancelled (bsc#1259804).\n- CVE-2026-27459: large cookie value can lead to a buffer overflow (bsc#1259808).\n","status":"published","published":"2026-03-25T03:41:43Z","modified":"2026-03-29T17:25:13.165199Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"SUSE-EL-9-CLIENT-TOOLS-2026-2255","title":"Security update 5.0.8 for Multi-Linux Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Security issues fixed:\n\n  - CVE-2026-31958: tornado: Fixed parsing large multipart bodies with many parts can cause a denial of service\n    (bsc#1259554)\n  - CVE-2026-27459: pyOpenSSL: Fixed issue with large cookie value that can lead to a buffer overflow (bsc#1259808)\n  - CVE-2026-27448: pyOpenSSL: Fixed unhandled exception can result in connection not being cancelled (bsc#1259804)\n\n- Other updates and bugfixes:\n\n  - Use non vendored Tornado with Python 3.11 (bsc#1257583, bsc#1259700)\n  - Hardened Tornado from invalid HTTP reason phrases\n  - Read full URI from ldap pillar config (bsc#1254900)\n  - Make users with backslash work for `salt-ssh` (bsc#1254629).\n  - Fixed `ansible.playbooks` `extra-vars` quoting (bsc#1257831),\n  - Fixed `virtualenv` call in test helper to use proper Python version.\n  - Fixed the issue preventing SELinux profile to be loaded on SLES 16\n    deployed using cloud images (bsc#1258957)\n\n","status":"published","published":"2026-06-03T14:19:09Z","modified":"2026-07-24T18:24:21.599683961Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-RU-2026:2769-1","title":"Recommended update 5.1.4 for Multi-Linux Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- CVE-2026-27459: large cookie value can lead to a buffer overflow (bsc#1259808)\n- CVE-2026-27448: unhandled exception can result in connection not being cancelled (bsc#1259804)\n\n- Improved shutdown reliability when the salt-master/minion is terminated\n- Fixed broken 'pkg.info_installed' after migration to salt.utils.timeutil\n- Calculate UUID grain for Xen PV guests (bsc#1255418)\n- Use non vendored tornado with Python 3.11 (bsc#1257583, bsc#1259700)\n- BDSA-2025-60810: Harden Tornado from invalid HTTP reason phrases\n- Read full URI from ldap pillar config (bsc#1254900)\n\n","status":"published","published":"2026-07-20T09:41:45Z","modified":"2026-07-21T09:45:06.738850828Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2026:1192-1","title":"Security update for python-pyOpenSSL","description":"This update for python-pyOpenSSL fixes the following issues:\n\n- CVE-2026-27448: unhandled exception can result in connection not being cancelled (bsc#1259804).\n- CVE-2026-27459: large cookie value can lead to a buffer overflow (bsc#1259808).\n","status":"published","published":"2026-04-07T08:39:34Z","modified":"2026-04-08T07:50:05.484377Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:1416-1","title":"Security update for python-pyOpenSSL","description":"This update for python-pyOpenSSL fixes the following issue:\n\n- CVE-2026-27448: unhandled exception can result in connection not being cancelled (bsc#1259804).\n","status":"published","published":"2026-04-16T15:36:01Z","modified":"2026-04-17T09:01:49.734741Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:1582-1","title":"Security update for python-pyOpenSSL","description":"This update for python-pyOpenSSL fixes the following issue:\n\n- CVE-2026-27448: unhandled exception can result in connection not being cancelled (bsc#1259804).\n","status":"published","published":"2026-04-23T16:48:46Z","modified":"2026-04-25T07:45:20.247274Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"SUSE-SU-2026:20930-1","title":"Security update for python-pyOpenSSL","description":"This update for python-pyOpenSSL fixes the following issues:\n\n- CVE-2026-27448: unhandled exception can result in connection not being cancelled (bsc#1259804).\n- CVE-2026-27459: large cookie value can lead to a buffer overflow (bsc#1259808).\n","status":"published","published":"2026-03-25T03:41:42Z","modified":"2026-04-02T17:24:37.011317Z","updated_at":"2026-11-02T15:54:01.953589Z"},{"id":"SUSE-SU-2026:20954-1","title":"Security update for python-pyOpenSSL","description":"This update for python-pyOpenSSL fixes the following issues:\n\n- CVE-2026-27448: unhandled exception can result in connection not being cancelled (bsc#1259804).\n- CVE-2026-27459: large cookie value can lead to a buffer overflow (bsc#1259808).\n","status":"published","published":"2026-04-01T09:35:43Z","modified":"2026-04-08T18:24:41.09002Z","updated_at":"2026-11-02T15:54:01.953589Z"},{"id":"SUSE-SU-2026:20960-1","title":"Security update for python-pyOpenSSL","description":"This update for python-pyOpenSSL fixes the following issues:\n\n- CVE-2026-27448: unhandled exception can result in connection not being cancelled (bsc#1259804).\n- CVE-2026-27459: large cookie value can lead to a buffer overflow (bsc#1259808).\n","status":"published","published":"2026-04-01T10:05:58Z","modified":"2026-04-08T18:24:38.208667Z","updated_at":"2026-11-02T15:54:01.953589Z"},{"id":"SUSE-SU-2026:21990-1","title":"Security update 5.0.8 for Multi-Linux Manager Client Tools, Salt Bundle and Salt","description":"This update fixes the following issues:\n\ngolang-github-prometheus-node_exporter:\n\n- Version 1.10.2:\n\n  * meminfo: Fix typo in Zswap metric name\n\n- Version 1.10.1:\n\n  * filesystem: Fix mount points being collected multiple\n    times\n  * filesystem: Refactor mountinfo parsing (bsc#1261810)\n  * meminfo: Add Zswap/Zswapped metrics\n\n- Version 1.10.0:\n\n  * Changes:\n\n    + mdadm: Use sysfs for RAID metrics\n    + filesystem: Add erofs in default excluded fs\n    + tcpstat: Use std lib binary.NativeEndian\n\n  * New Features:\n\n    + pcidevice: Add new collector for PCIe devices\n    + AIX: Add more metrics\n    + systemd: Add Virtualization metrics\n    + swaps: Add new collector\n\n  * Enhancements:\n\n    + wifi: Add packet received and transmitted metrics\n    + filesystem: Take super options into account for read-only\n    + pcidevice: Add additional metrics\n    + perf: Add tlb_data metrics\n\n  * Bugs fixed:\n\n    + interrupts: Fix OpenBSD interrupt device parsing\n    + diskstats: Simplify condition\n    + thermal: Sanitize darwin thermal strings\n    + filesystem: Fix Darwin collector cgo memory leak\n    + cpufreq: Fix: collector enable\n    + ethtool: Fix returning 0 for sanitized metrics\n    + netdev: Fix Darwin netdev i/o bytes metric\n    + systemd: Fix logging race\n    + filesystem: Fix duplicate Darwin CGO import\n\nsalt:\n\n- Security issues fixed:\n\n  - CVE-2026-31958: tornado: Fixed parsing large multipart bodies with many parts can cause a denial of service\n    (bsc#1259554)\n\n- Other updates and bugfixes:\n\n  - Use non vendored Tornado with Python 3.11 (bsc#1257583, bsc#1259700)\n  - Hardened Tornado from invalid HTTP reason phrases\n  - Read full URI from ldap pillar config (bsc#1254900)\n  - Fixed testsuite failures\n  - Make users with backslash working for salt-ssh (bsc#1254629)\n  - Fixed ansible.playbooks extra-vars quoting (bsc#1257831)\n  - Fixed virtualenv call in test helper to use proper python version\n\nuyuni-tools:\n\n- Version 0.1.39-0:\n\n  - mgrpxy ssh tuning should happen before crypto policies (bsc#1254619)\n  - Fixed default value for helm registry (bsc#1258927).\n  - Use static supportconfig name to avoid dynamic search\n    (bsc#1257941)\n  - Do not nest multiple tarball files and instead collect\n    all files into one tarball (bsc#1252964)\n  - Show where final tarball was generated (bsc#1259208)\n\nvenv-salt-minion:\n\n- Security issues fixed:\n\n  - CVE-2026-31958: tornado: Fixed parsing large multipart bodies with many parts can cause a denial of service\n    (bsc#1259554)\n  - CVE-2026-27459: pyOpenSSL: Fixed issue with large cookie value that can lead to a buffer overflow (bsc#1259808)\n  - CVE-2026-27448: pyOpenSSL: Fixed unhandled exception can result in connection not being cancelled (bsc#1259804)\n\n- Other updates and bugfixes:\n\n  - Use non vendored Tornado with Python 3.11 (bsc#1257583, bsc#1259700)\n  - Hardened Tornado from invalid HTTP reason phrases\n  - Read full URI from ldap pillar config (bsc#1254900)\n  - Make users with backslash work for `salt-ssh` (bsc#1254629).\n  - Fixed `ansible.playbooks` `extra-vars` quoting (bsc#1257831),\n  - Fixed `virtualenv` call in test helper to use proper Python version.\n  - Fixed the issue preventing SELinux profile to be loaded on SLES 16\n    deployed using cloud images (bsc#1258957)\n\n","status":"published","published":"2026-06-03T12:33:42Z","modified":"2026-06-06T18:24:19.097368628Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:2242-1","title":"Security update 5.0.8 for Multi-Linux Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Security issues fixed:\n\n  - CVE-2026-31958: tornado: Fixed parsing large multipart bodies with many parts can cause a denial of service\n    (bsc#1259554)\n  - CVE-2026-27459: pyOpenSSL: Fixed issue with large cookie value that can lead to a buffer overflow (bsc#1259808)\n  - CVE-2026-27448: pyOpenSSL: Fixed unhandled exception can result in connection not being cancelled (bsc#1259804)\n\n- Other updates and bugfixes:\n\n  - Use non vendored Tornado with Python 3.11 (bsc#1257583, bsc#1259700)\n  - Hardened Tornado from invalid HTTP reason phrases\n  - Read full URI from ldap pillar config (bsc#1254900)\n  - Make users with backslash work for `salt-ssh` (bsc#1254629).\n  - Fixed `ansible.playbooks` `extra-vars` quoting (bsc#1257831),\n  - Fixed `virtualenv` call in test helper to use proper Python version.\n  - Fixed the issue preventing SELinux profile to be loaded on SLES 16\n    deployed using cloud images (bsc#1258957)\n\n","status":"published","published":"2026-06-03T14:05:41Z","modified":"2026-06-04T09:00:07.801292354Z","updated_at":"2026-11-02T15:54:03.080707Z"},{"id":"SUSE-SU-2026:2244-1","title":"Security update 5.0.8 for Multi-Linux Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Security issues fixed:\n\n  - CVE-2026-31958: tornado: Fixed parsing large multipart bodies with many parts can cause a denial of service\n    (bsc#1259554)\n  - CVE-2026-27459: pyOpenSSL: Fixed issue with large cookie value that can lead to a buffer overflow (bsc#1259808)\n  - CVE-2026-27448: pyOpenSSL: Fixed unhandled exception can result in connection not being cancelled (bsc#1259804)\n\n- Other updates and bugfixes:\n\n  - Use non vendored Tornado with Python 3.11 (bsc#1257583, bsc#1259700)\n  - Hardened Tornado from invalid HTTP reason phrases\n  - Read full URI from ldap pillar config (bsc#1254900)\n  - Make users with backslash work for `salt-ssh` (bsc#1254629).\n  - Fixed `ansible.playbooks` `extra-vars` quoting (bsc#1257831),\n  - Fixed `virtualenv` call in test helper to use proper Python version.\n  - Fixed the issue preventing SELinux profile to be loaded on SLES 16\n    deployed using cloud images (bsc#1258957)\n\n","status":"published","published":"2026-06-03T14:11:42Z","modified":"2026-06-04T09:00:07.890519709Z","updated_at":"2026-11-02T15:54:03.080707Z"},{"id":"SUSE-SU-2026:2255-1","title":"Security update 5.0.8 for Multi-Linux Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Security issues fixed:\n\n  - CVE-2026-31958: tornado: Fixed parsing large multipart bodies with many parts can cause a denial of service\n    (bsc#1259554)\n  - CVE-2026-27459: pyOpenSSL: Fixed issue with large cookie value that can lead to a buffer overflow (bsc#1259808)\n  - CVE-2026-27448: pyOpenSSL: Fixed unhandled exception can result in connection not being cancelled (bsc#1259804)\n\n- Other updates and bugfixes:\n\n  - Use non vendored Tornado with Python 3.11 (bsc#1257583, bsc#1259700)\n  - Hardened Tornado from invalid HTTP reason phrases\n  - Read full URI from ldap pillar config (bsc#1254900)\n  - Make users with backslash work for `salt-ssh` (bsc#1254629).\n  - Fixed `ansible.playbooks` `extra-vars` quoting (bsc#1257831),\n  - Fixed `virtualenv` call in test helper to use proper Python version.\n  - Fixed the issue preventing SELinux profile to be loaded on SLES 16\n    deployed using cloud images (bsc#1258957)\n\n","status":"published","published":"2026-06-03T14:19:09Z","modified":"2026-06-04T09:00:04.527408669Z","updated_at":"2026-11-02T15:54:03.080707Z"},{"id":"SUSE-SU-2026:3424-1","title":"Security update for python3-pyOpenSSL","description":"This update for python3-pyOpenSSL fixes the following issue:\n\n- CVE-2026-27448: unhandled exception in `set_tlsext_servername_callback` callback can result in connection not being\n  cancelled and allows for possible security measure bypassing (bsc#1259804).\n","status":"published","published":"2026-07-30T11:07:52Z","modified":"2026-07-31T09:15:07.88962054Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"USN-8115-1","title":"pyopenssl vulnerabilities","description":"It was discovered that pyOpenSSL incorrectly handled exceptions in the\ntlsext_servername callback. This could result in connections being\naccepted after an exception, contrary to expectations. (CVE-2026-27448)\n\nIt was discovered that pyOpenSSL incorrectly handled the DTLS cookie\ngeneration callback. If a callback provided cookie values greater than 256\nbytes, an attacker could use this issue to cause pyOpenSSL to crash,\nresulting in a denial of service, or possibly execute arbitrary code. This\nissue only affected Ubuntu 24.04 LTS and Ubuntu 25.10. (CVE-2026-27459)","status":"published","published":"2026-03-23T13:08:05Z","modified":"2026-06-30T18:15:35.30257334Z","updated_at":"2026-11-02T16:58:22.951676Z"},{"id":"USN-8335-1","title":"pyopenssl vulnerability","description":"It was discovered that pyOpenSSL incorrectly handled exceptions in the\ntlsext_servername callback. This could result in connections being accepted\nafter an exception, contrary to expectations.","status":"published","published":"2026-05-28T12:47:22Z","modified":"2026-05-28T16:02:42.339860029Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}