CVE-2023-40217

score

<0.1

cvss

5.3

epss

0.8%

published

2023-08-25

kev added

—

first seen

2026-10-21

Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and 3.11.x before 3.11.5 contain a TLS data handling issue caused by improper socket state detection, letting buffered data be read without authentication if a TLS server socket is quickly closed, exploit requires server-side TLS socket creation and quick closure.