Tag

cwe-295

Safeguard articles tagged "cwe-295" — guides, analysis, and best practices for software supply chain and application security.

1 article

urllib3 CA certificate verification bypass (CVE-2019-11324)

CVE-2019-11324 let urllib3 silently trust unintended CAs during custom certificate validation, undermining pinned-trust and mTLS setups.