Cryptography

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. The expat and elementtree parsers use insufficient entropy for XML hash-flooding protectionCVE-2026-7210Python Software Foundation · CVSS 6.3 · 0.7% likely

   CWE-331

2. SSLContext.wrap_bio() missing validation of server_hostname parameterCVE-2026-19553Python Software Foundation · CVSS 7.6 · 0.5% likelycovered by CyberSIXT

   CWE-2971 article

3. Distrust compromised intermediate certificates in ssl moduleCVE-2026-115557Python Software Foundation · CVSS 9.4 · 0.5% likely

   CWE-299

4. `HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matchingCVE-2026-15806Python Software Foundation · CVSS 6 · 0.5% likely

   CWE-319

5. ssl.get_server_certificate(addr, ca_certs=...) verifies the chain but never the identityCVE-2026-19552Python Software Foundation · CVSS 0 · 0.3% likely

   CWE-295

6. Base64 decoding stops at first padded quad by defaultCVE-2026-3446Python Software Foundation · CVSS 6 · 0.2% likely

   CWE-345

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.