python/python CVE-2026-116566: medium 5.3
socket.getaddrinfo() accepts embedded null bytes in host and port
Action: The 3.16.x fix (3.16.0) is not released yet.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.16.0 | - |
Fixed versions
| 3.16.0 |
Sources
- python-runtime: PSF-2026-48
- https://mail.python.org/archives/list/security-announce@python.org/thread/HCHE62VYTPYI6WOPJQDWUBR4CINBPSM7/
- https://www.cve.org/CVERecord?id=CVE-2026-116566
CVE-2026-116566 · published · modified · JSON