Skip to content

[Fix] Fix critical issue in anyio via minor version upgrade from 4.14.1 to 4.14.2 - #21

Merged
sinachaichi merged 1 commit into
mainfrom
fix/security-update-packages-66713392-16bk
Jul 14, 2026
Merged

sinachaichi merged 1 commit into
mainfrom
fix/security-update-packages-66713392-16bk

Conversation

@aikido-autofix

Copy link
Copy Markdown
Contributor

Upgrade anyio to fix critical TLS hostname validation vulnerability where IDNA 2003 encoding could allow certificate validation bypass or rejection.

✅ 1 CVE resolved by this upgrade, including 1 critical 🚨 CVE

This PR will resolve the following CVEs:

Issue Severity           Description
AIKIDO-2026-889297
🚨 CRITICAL
[anyio] TLSStream.wrap() uses outdated IDNA 2003 instead of IDNA 2008 for hostname resolution, causing mismatches between intended and validated hostnames. This enables certificate validation bypass or rejection, potentially allowing man-in-the-middle attacks or legitimate connection failures.

@aikido-autofix aikido-autofix Bot added the fix Label created by Aikido AutoFix label Jul 14, 2026
@sinachaichi
sinachaichi marked this pull request as ready for review July 14, 2026 21:15
@sinachaichi
sinachaichi merged commit 4434b58 into main Jul 14, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

fix Label created by Aikido AutoFix

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant