https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T13:33:11.371118+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2013-4111 CVE-2013-4111 2026-09-28T13:33:11.376629+00:00

The Python client library for Glance (python-glanceclient) before 0.10.0 does not properly check the preverify_ok value, which prevents the server hostname from being verified with a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate and allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

 https://vulnerability.circl.lu/vuln/ghsa-qgfg-gvff-523v GHSA-qgfg-gvff-523v — python-glanceclient vulnerable to SSL server spoofing due to unverified X.509 certificate 2026-09-28T13:33:11.376726+00:00

Affected: PyPI: python-glanceclient

The Python client library for Glance (python-glanceclient) before 0.10.0 does not properly check the preverify_ok value, which prevents the server hostname from being verified with a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate and allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

 https://vulnerability.circl.lu/vuln/pysec-2013-11 PYSEC-2013-11 2026-09-28T13:33:11.376779+00:00

Affected: PyPI: python-glanceclient

The Python client library for Glance (python-glanceclient) before 0.10.0 does not properly check the preverify_ok value, which prevents the server hostname from being verified with a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate and allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.