Vulnerabilities for anyio

First version without a known vulnerability: 4.14.2

Details

• GHSA-3w57-8xmc-8v262026-09-18

  AnyIO run_process/open_process ignores extra_groups and can retain parent supplementary groups

  Fixed in: 4.14.2

• GHSA-82r6-8w77-94w62026-09-18

  AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing

  Fixed in: 4.14.2

• GHSA-5p39-cfhj-2xmp2026-09-18

  AnyIO process-pool workers can block indefinitely on undrained stderr

  Fixed in: 4.14.2