socket.getaddrinfo() previously accepted null bytes within *host* and *port* parameters which can cause the values to be silently truncated.
PSF·CWE-158·Published 2026-10-29