agronholm/anyio Security Advisories | GitStock

high2026-09-18

AnyIO run_process/open_process ignores extra_groups and can retain parent supplementary groups

GHSA-3w57-8xmc-8v26 · CVE-2026-63349

critical2026-09-18

AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing

GHSA-82r6-8w77-94w6 · CVE-2026-63374

medium2026-09-18

AnyIO process-pool workers can block indefinitely on undrained stderr

GHSA-5p39-cfhj-2xmp · CVE-2026-64847