https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-31T05:01:26.883825+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2025-13836 CVE-2025-13836 — Excessive read buffering DoS in http.client 2026-10-31T05:01:26.885646+00:00

Affected: Python Software Foundation CPython

When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length. This allows a malicious server to cause the client to read large amounts of data into memory, potentially causing OOM or other DoS.

 https://db.gcve.eu/vuln/usn-7951-1 USN-7951-1 — python3.8, python3.9, python3.10, python3.11, python3.12, python3.13, python3.14 vulnerability 2026-10-31T05:01:26.885727+00:00

Affected: Ubuntu:Pro:18.04:LTS: python3.8, Ubuntu:Pro:20.04:LTS: python3.8, Ubuntu:Pro:20.04:LTS: python3.9, Ubuntu:22.04:LTS: python3.10, Ubuntu:Pro:22.04:LTS: python3.11, Ubuntu:24.04:LTS: python3.12, Ubuntu:25.10: python3.13, Ubuntu:25.10: python3.14

It was discovered that Python's http.client did not properly handle the Content-Length header in HTTP responses. A malicious server could exploit this to cause Python to allocate excessive memory, leading to a denial of service.