imaplib STARTTLS serves plaintext bytes buffered before the handshake as if they came over TLS
CVE-2026-115559
Mariner
azl3 python-py 1.11.0-1 on Azure Linux 3.0
azl3 python3 3.12.16-1 on Azure Linux 3.0
Release Notes
The publication date reported by the vendor.
We collected the advisory from the official source.