[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2023-40217":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T08:55:32.481Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":18,"aliases":19,"duplicate_of":9,"upstream":20,"downstream":21,"duplicates":130,"related":131,"reserved_at":9,"published_at":160,"modified_at":161,"state":162,"summary":163,"references_raw":172,"kevs":204,"epss":205,"epss_history":208,"metrics":473,"affected":479},"CVE-2023-40217","An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and 3.11.x before 3.11.5. It primarily affects servers (such as HTTP servers) that use TLS client authentication. If a TLS server-side socket is created, receives data into the socket buffer, and then is closed quickly, there is a brief window where the SSLSocket instance will detect the socket as \"not connected\" and won't initiate a handshake, but buffered data will still be readable from the socket buffer. This data will not be authenticated if the server-side TLS peer is expecting client certificate authentication, and is indistinguishable from valid TLS stream data. Data is limited in size to the amount that will fit in the buffer. (The TLS connection cannot directly be used for data exfiltration because the vulnerable code path requires that the connection be closed on initialization of the SSLSocket.)",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":9,"likelihood_of_exploit":9,"capec":17},"NVD-CWE-NOINFO","Insufficient Information","NVD uses this CWE ID when there is insufficient information to assign a specific CWE.","placeholder","NVD-Reserved",[],[],[],[],[22,24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98,100,102,104,106,108,110,112,114,116,118,120,122,124,126,128],{"_key":23},"ALPINE-CVE-2023-40217",{"_key":25},"OPENSUSE-SU-2024:13236-1",{"_key":27},"SUSE-SU-2023:3730-1",{"_key":29},"SUSE-SU-2023:3731-1",{"_key":31},"SUSE-SU-2023:3804-1",{"_key":33},"SUSE-SU-2023:3828-2",{"_key":35},"SUSE-SU-2023:3939-1",{"_key":37},"SUSE-SU-2024:0785-1",{"_key":39},"SUSE-SU-2023:3708-1",{"_key":41},"SUSE-SU-2023:3824-1",{"_key":43},"SUSE-SU-2023:3828-1",{"_key":45},"SUSE-SU-2023:3933-1",{"_key":47},"SUSE-SU-2023:3943-1",{"_key":49},"SUSE-SU-2024:0784-1",{"_key":51},"OPENSUSE-SU-2024:13193-1",{"_key":53},"OPENSUSE-SU-2024:13201-1",{"_key":55},"OPENSUSE-SU-2024:13215-1",{"_key":57},"OPENSUSE-SU-2024:13219-1",{"_key":59},"OPENSUSE-SU-2024:13248-1",{"_key":61},"OPENSUSE-SU-2024:14109-1",{"_key":63},"OPENSUSE-SU-2024:14434-1",{"_key":65},"DLA-3575-1",{"_key":67},"DLA-3614-1",{"_key":69},"DLA-3948-1",{"_key":71},"DLA-3980-1",{"_key":73},"OPENSUSE-SU-2025:15713-1",{"_key":75},"MGASA-2024-0084",{"_key":77},"UBUNTU-CVE-2023-40217",{"_key":79},"USN-6513-2",{"_key":81},"USN-7180-1",{"_key":83},"DEBIAN-CVE-2023-40217",{"_key":85},"USN-6513-1",{"_key":87},"USN-6891-1",{"_key":89},"RHSA-2023:5456",{"_key":91},"RHSA-2023:5462",{"_key":93},"RHSA-2023:5463",{"_key":95},"RHSA-2023:5472",{"_key":97},"RHSA-2023:5528",{"_key":99},"RHSA-2023:5531",{"_key":101},"RHSA-2023:5990",{"_key":103},"RHSA-2023:5991",{"_key":105},"RHSA-2023:5992",{"_key":107},"RHSA-2023:5993",{"_key":109},"RHSA-2023:5994",{"_key":111},"RHSA-2023:5995",{"_key":113},"RHSA-2023:5996",{"_key":115},"RHSA-2023:5997",{"_key":117},"RHSA-2023:5998",{"_key":119},"RHSA-2023:6068",{"_key":121},"RHSA-2023:6069",{"_key":123},"RHSA-2023:6290",{"_key":125},"RHSA-2023:6793",{"_key":127},"RHSA-2023:6823",{"_key":129},"RHSA-2023:6885",[],[132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,156,158],{"_key":25},{"_key":27},{"_key":29},{"_key":31},{"_key":33},{"_key":35},{"_key":37},{"_key":39},{"_key":41},{"_key":43},{"_key":45},{"_key":47},{"_key":49},{"_key":51},{"_key":53},{"_key":55},{"_key":57},{"_key":59},{"_key":61},{"_key":63},{"_key":73},{"_key":75},{"_key":155},"CGA-JMP2-8QHJ-9VQJ",{"_key":157},"CGA-RVX7-4CVM-R55X",{"_key":159},"CGA-M269-5Q86-F4HW","2023-08-25T00:00:00.000Z","2025-11-03T21:49:23.434Z","Modified",{"cisa_kev":164,"cisa_ransomware":164,"cisa_vendor":9,"epss_severity":165,"epss_score":166,"severity":167,"severity_score":168,"severity_version":169,"severity_source":170,"severity_vector":171,"severity_status":162},false,"low",0.00581,"medium",5.3,"v3.1","nvd","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",[173,179,183,188,192,196,200],{"url":174,"sources":175,"tags":177},"https://www.python.org/dev/security/",[176,170],"cve.org",[178],"Vendor Advisory",{"url":180,"sources":181,"tags":182},"https://mail.python.org/archives/list/security-announce%40python.org/thread/PEPLII27KYHLF4AK3ZQGKYNCRERG4YXY/",[176,170],[],{"url":184,"sources":185,"tags":186},"https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html",[176,170],[187],"Mailing List",{"url":189,"sources":190,"tags":191},"https://security.netapp.com/advisory/ntap-20231006-0014/",[176,170],[],{"url":193,"sources":194,"tags":195},"https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html",[176,170],[187],{"url":197,"sources":198,"tags":199},"https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html",[176,170],[],{"url":201,"sources":202,"tags":203},"https://lists.debian.org/debian-lts-announce/2024/11/msg00005.html",[176,170],[],[],{"date":206,"score":166,"percentile":207},"2026-06-04",0.69297,[209,212,215,218,221,224,227,230,233,236,239,242,245,248,251,255,258,261,265,268,271,274,277,280,283,286,289,291,294,297,300,302,305,308,310,313,316,319,322,325,328,331,334,337,339,342,345,347,350,353,355,358,361,364,368,371,374,378,381,384,387,390,393,396,399,402,405,407,410,413,416,419,422,425,428,431,434,437,439,442,445,448,451,454,457,460,463,465,468,470],{"date":210,"score":166,"percentile":211},"2025-11-04",0.68022,{"date":213,"score":166,"percentile":214},"2025-11-05",0.68002,{"date":216,"score":166,"percentile":217},"2025-11-06",0.68005,{"date":219,"score":166,"percentile":220},"2025-11-07",0.68016,{"date":222,"score":166,"percentile":223},"2025-11-08",0.68018,{"date":225,"score":166,"percentile":226},"2025-11-09",0.68008,{"date":228,"score":166,"percentile":229},"2025-11-10",0.67998,{"date":231,"score":166,"percentile":232},"2025-11-11",0.68004,{"date":234,"score":166,"percentile":235},"2025-11-12",0.68027,{"date":237,"score":166,"percentile":238},"2025-11-13",0.68037,{"date":240,"score":166,"percentile":241},"2025-11-14",0.68044,{"date":243,"score":166,"percentile":244},"2025-11-15",0.68042,{"date":246,"score":166,"percentile":247},"2025-11-16",0.68039,{"date":249,"score":166,"percentile":250},"2025-11-17",0.68036,{"date":252,"score":253,"percentile":254},"2025-11-18",0.01106,0.76234,{"date":256,"score":253,"percentile":257},"2025-11-19",0.76241,{"date":259,"score":253,"percentile":260},"2025-11-20",0.76252,{"date":262,"score":263,"percentile":264},"2025-11-21",0.00597,0.68538,{"date":266,"score":263,"percentile":267},"2025-11-22",0.68536,{"date":269,"score":263,"percentile":270},"2025-11-23",0.68526,{"date":272,"score":263,"percentile":273},"2025-11-24",0.68514,{"date":275,"score":263,"percentile":276},"2025-11-25",0.68521,{"date":278,"score":263,"percentile":279},"2025-11-26",0.68528,{"date":281,"score":263,"percentile":282},"2025-11-27",0.68529,{"date":284,"score":263,"percentile":285},"2025-11-28",0.68516,{"date":287,"score":263,"percentile":288},"2025-11-29",0.68502,{"date":290,"score":166,"percentile":220},"2025-11-30",{"date":292,"score":166,"percentile":293},"2025-12-01",0.68169,{"date":295,"score":166,"percentile":296},"2025-12-02",0.68175,{"date":298,"score":166,"percentile":299},"2025-12-03",0.68171,{"date":301,"score":166,"percentile":217},"2025-12-04",{"date":303,"score":166,"percentile":304},"2025-12-05",0.68019,{"date":306,"score":166,"percentile":307},"2025-12-06",0.68024,{"date":309,"score":166,"percentile":211},"2025-12-07",{"date":311,"score":166,"percentile":312},"2025-12-08",0.68025,{"date":314,"score":166,"percentile":315},"2025-12-09",0.68055,{"date":317,"score":166,"percentile":318},"2025-12-10",0.68101,{"date":320,"score":166,"percentile":321},"2025-12-11",0.6812,{"date":323,"score":166,"percentile":324},"2025-12-12",0.68145,{"date":326,"score":166,"percentile":327},"2025-12-13",0.68152,{"date":329,"score":166,"percentile":330},"2025-12-14",0.68155,{"date":332,"score":166,"percentile":333},"2025-12-15",0.68153,{"date":335,"score":166,"percentile":336},"2025-12-16",0.68159,{"date":338,"score":166,"percentile":299},"2025-12-17",{"date":340,"score":263,"percentile":341},"2025-12-18",0.6868,{"date":343,"score":263,"percentile":344},"2025-12-19",0.68696,{"date":346,"score":263,"percentile":344},"2025-12-20",{"date":348,"score":263,"percentile":349},"2025-12-21",0.68682,{"date":351,"score":263,"percentile":352},"2025-12-22",0.68685,{"date":354,"score":263,"percentile":341},"2025-12-23",{"date":356,"score":263,"percentile":357},"2025-12-24",0.68689,{"date":359,"score":263,"percentile":360},"2025-12-25",0.68718,{"date":362,"score":166,"percentile":363},"2025-12-26",0.68241,{"date":365,"score":366,"percentile":367},"2025-12-27",0.00382,0.59098,{"date":369,"score":166,"percentile":370},"2025-12-28",0.68213,{"date":372,"score":166,"percentile":373},"2025-12-29",0.68205,{"date":375,"score":376,"percentile":377},"2025-12-30",0.01749,0.82085,{"date":379,"score":376,"percentile":380},"2025-12-31",0.82097,{"date":382,"score":166,"percentile":383},"2026-01-01",0.68414,{"date":385,"score":166,"percentile":386},"2026-01-02",0.68401,{"date":388,"score":166,"percentile":389},"2026-01-03",0.68402,{"date":391,"score":376,"percentile":392},"2026-01-04",0.82074,{"date":394,"score":376,"percentile":395},"2026-01-05",0.8207,{"date":397,"score":376,"percentile":398},"2026-01-06",0.82075,{"date":400,"score":376,"percentile":401},"2026-01-07",0.82077,{"date":403,"score":376,"percentile":404},"2026-01-08",0.82084,{"date":406,"score":376,"percentile":404},"2026-01-09",{"date":408,"score":166,"percentile":409},"2026-01-10",0.68282,{"date":411,"score":166,"percentile":412},"2026-01-11",0.68274,{"date":414,"score":166,"percentile":415},"2026-01-12",0.68264,{"date":417,"score":166,"percentile":418},"2026-01-13",0.68262,{"date":420,"score":166,"percentile":421},"2026-01-14",0.68299,{"date":423,"score":166,"percentile":424},"2026-01-15",0.68305,{"date":426,"score":166,"percentile":427},"2026-01-16",0.68321,{"date":429,"score":166,"percentile":430},"2026-01-17",0.68314,{"date":432,"score":166,"percentile":433},"2026-01-18",0.68302,{"date":435,"score":166,"percentile":436},"2026-01-19",0.6829,{"date":438,"score":166,"percentile":433},"2026-01-20",{"date":440,"score":166,"percentile":441},"2026-01-21",0.6831,{"date":443,"score":166,"percentile":444},"2026-01-22",0.6832,{"date":446,"score":166,"percentile":447},"2026-01-23",0.68348,{"date":449,"score":166,"percentile":450},"2026-01-24",0.68359,{"date":452,"score":166,"percentile":453},"2026-01-25",0.68331,{"date":455,"score":166,"percentile":456},"2026-01-26",0.68323,{"date":458,"score":166,"percentile":459},"2026-01-27",0.68327,{"date":461,"score":166,"percentile":462},"2026-01-28",0.68338,{"date":464,"score":166,"percentile":462},"2026-01-29",{"date":466,"score":166,"percentile":467},"2026-01-30",0.68343,{"date":469,"score":166,"percentile":447},"2026-01-31",{"date":471,"score":166,"percentile":472},"2026-02-01",0.68498,[474],{"source":170,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":475,"cvss_v4_0":9},{"baseScore":168,"baseSeverity":476,"vectorString":171,"impactScore":477,"exploitabilityScore":478},"MEDIUM",2.3,10,[480],{"ecosystem":9,"name":481,"vendor":481,"product":481,"cpe_part":482,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":483},"python","a",[484,490,495,499],{"version":485,"is_range":486,"range_type":487,"version_start":9,"version_start_type":9,"version_end":488,"version_end_type":489,"fixed_in":9},"lt3.8.18",true,"cpe","3.8.18","excluding",{"version":491,"is_range":486,"range_type":487,"version_start":492,"version_start_type":493,"version_end":494,"version_end_type":489,"fixed_in":9},"gte3.9.0_lt3.9.18","3.9.0","including","3.9.18",{"version":496,"is_range":486,"range_type":487,"version_start":497,"version_start_type":493,"version_end":498,"version_end_type":489,"fixed_in":9},"gte3.10.0_lt3.10.13","3.10.0","3.10.13",{"version":500,"is_range":486,"range_type":487,"version_start":501,"version_start_type":493,"version_end":502,"version_end_type":489,"fixed_in":9},"gte3.11.0_lt3.11.5","3.11.0","3.11.5"]