Threats tagged 'ghsa-xhf3-pp4q-gxh5'

A memory race condition was discovered in the Python ssl module affecting the ssl.SSLContext methods cert_store_stats() and get_ca_certs(). This race condition can occur when these methods are called concurrently with certificate loading into SSLContext, such as during a TLS handshake with a configured certificate directory. The issue allows for potential memory corruption. It is fixed in CPython versions 3.10.14, 3.11.9, 3.12.3, and 3.13.0a5.