CWE-297 Improper Validation of Certificate with Host Mismatch

Xray-core: Pinning a CA certificate via pinnedPeerCertSha256 can lead to the success of MITM attacks

AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing

Apache Thrift Python bindings have a Improper Validation of Certificate with Host Mismatch vulnerabilit

Snowflake Connector for Python improperly verifies TLS hostnames

OpenStack oslo.messaging does not verify RabbitMQ broker hostname during TLS handshake

Apache Directory LDAP API lacks server certificate verification for LDAP hostnames

QUIC has Broken TLS verification

aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections

Apache Thrift has an Improper Validation of Certificate with Host Mismatch Vulnerability

Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client Certificates

Bouncy Castle Java Cryptography API vulnerable to DNS poisoning

Apache Log4j Core: `verifyHostName` attribute silently ignored in TLS configuration

Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager

Apache Ranger Vulnerable to Improper Validation of Certificate with Host Mismatch

JRuby-OpenSSL has hostname verification disabled by default

Apache Log4j does not verify the TLS hostname in its Socket Appender

Keycloak hostname verification

Couchbase .NET SDK (client library) does not properly enable hostname verification for TLS certificates

Duplicate Advisory: Keycloak hostname verification

ZITADEL's Improper Lockout Mechanism Leads to MFA Bypass

Missing hostname validation in Kroxylicious

casdoor's use of`ssh.InsecureIgnoreHostKey()` disables host key verification

Improper Validation of Certificates in apache axis

Missing hostname validation in Jenkins View26 Test-Reporting Plugin

Jenkins SmallTest Plugin missing hostname validation