Vulnerability-Lookup

SUSE-SU-2026:24138-1

Vulnerability from csaf_suse - Published: 2026-10-10 17:21 - Updated: 2026-10-14 16:41

Summary

Security update for python311

Severity

Moderate

Notes

Title of the patch: Security update for python311

Description of the patch: This update for python311 fixes the following issues: - CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). - CVE-2026-19672: tarfile extraction filter bypass allows creation of directories outside the destination (bsc#1276227).

Patchnames: SUSE-SLE-Micro-6.0-924

CVE-2026-15310

3.1 (Low)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 12 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.16-159998.1.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.16-159998.1.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.16-159998.1.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:python311-0:3.11.16-159998.1.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:python311-0:3.11.16-159998.1.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:python311-0:3.11.16-159998.1.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:python311-base-0:3.11.16-159998.1.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:python311-base-0:3.11.16-159998.1.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:python311-base-0:3.11.16-159998.1.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:python311-curses-0:3.11.16-159998.1.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:python311-curses-0:3.11.16-159998.1.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:python311-curses-0:3.11.16-159998.1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2026-19672

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected products

Recommended 12 products, the same list as for CVE-2026-15310

Threats

Impact moderate

References

12 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://www.suse.com/support/update/announcement/…	self
https://bugzilla.suse.com/1276227	self
https://bugzilla.suse.com/1277111	self
https://www.suse.com/security/cve/CVE-2026-15310/	self
https://www.suse.com/security/cve/CVE-2026-19672/	self
https://www.suse.com/security/cve/CVE-2026-15310	external
https://bugzilla.suse.com/1277111	external
https://www.suse.com/security/cve/CVE-2026-19672	external
https://bugzilla.suse.com/1276227	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for python311",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for python311 fixes the following issues:\n\n- CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111).\n- CVE-2026-19672: tarfile extraction filter bypass allows creation of directories outside the destination (bsc#1276227).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-Micro-6.0-924",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_24138-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2026:24138-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202624138-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2026:24138-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202624138-1/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276227",
        "url": "https://bugzilla.suse.com/1276227"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277111",
        "url": "https://bugzilla.suse.com/1277111"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-15310 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-15310/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-19672 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-19672/"
      }
    ],
    "title": "Security update for python311",
    "tracking": {
      "current_release_date": "2026-10-14T16:41:38Z",
      "generator": {
        "date": "2026-10-10T17:21:34Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2026:24138-1",
      "initial_release_date": "2026-10-10T17:21:34Z",
      "revision_history": [
        {
          "date": "2026-10-10T17:21:34Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-10-14T16:41:38Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpython3_11-1_0-0:3.11.16-159998.1.1.aarch64",
                "product": {
                  "name": "libpython3_11-1_0-0:3.11.16-159998.1.1.aarch64",
                  "product_id": "libpython3_11-1_0-0:3.11.16-159998.1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.16:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libpython3_11-1_0@3.11.16-159998.1.1?arch=aarch64\u0026upstream=python311-0:3.11.16-159998.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python311-0:3.11.16-159998.1.1.aarch64",
                "product": {
                  "name": "python311-0:3.11.16-159998.1.1.aarch64",
                  "product_id": "python311-0:3.11.16-159998.1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.16:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python311@3.11.16-159998.1.1?arch=aarch64\u0026upstream=python311-0:3.11.16-159998.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python311-base-0:3.11.16-159998.1.1.aarch64",
                "product": {
                  "name": "python311-base-0:3.11.16-159998.1.1.aarch64",
                  "product_id": "python311-base-0:3.11.16-159998.1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.16:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python311-base@3.11.16-159998.1.1?arch=aarch64\u0026upstream=python311-0:3.11.16-159998.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python311-curses-0:3.11.16-159998.1.1.aarch64",
                "product": {
                  "name": "python311-curses-0:3.11.16-159998.1.1.aarch64",
                  "product_id": "python311-curses-0:3.11.16-159998.1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.16:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python311-curses@3.11.16-159998.1.1?arch=aarch64\u0026upstream=python311-0:3.11.16-159998.1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpython3_11-1_0-0:3.11.16-159998.1.1.s390x",
                "product": {
                  "name": "libpython3_11-1_0-0:3.11.16-159998.1.1.s390x",
                  "product_id": "libpython3_11-1_0-0:3.11.16-159998.1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.16:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libpython3_11-1_0@3.11.16-159998.1.1?arch=s390x\u0026upstream=python311-0:3.11.16-159998.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python311-0:3.11.16-159998.1.1.s390x",
                "product": {
                  "name": "python311-0:3.11.16-159998.1.1.s390x",
                  "product_id": "python311-0:3.11.16-159998.1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.16:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python311@3.11.16-159998.1.1?arch=s390x\u0026upstream=python311-0:3.11.16-159998.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python311-base-0:3.11.16-159998.1.1.s390x",
                "product": {
                  "name": "python311-base-0:3.11.16-159998.1.1.s390x",
                  "product_id": "python311-base-0:3.11.16-159998.1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.16:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python311-base@3.11.16-159998.1.1?arch=s390x\u0026upstream=python311-0:3.11.16-159998.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python311-curses-0:3.11.16-159998.1.1.s390x",
                "product": {
                  "name": "python311-curses-0:3.11.16-159998.1.1.s390x",
                  "product_id": "python311-curses-0:3.11.16-159998.1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.16:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python311-curses@3.11.16-159998.1.1?arch=s390x\u0026upstream=python311-0:3.11.16-159998.1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpython3_11-1_0-0:3.11.16-159998.1.1.x86_64",
                "product": {
                  "name": "libpython3_11-1_0-0:3.11.16-159998.1.1.x86_64",
                  "product_id": "libpython3_11-1_0-0:3.11.16-159998.1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.16:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libpython3_11-1_0@3.11.16-159998.1.1?arch=x86_64\u0026upstream=python311-0:3.11.16-159998.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python311-0:3.11.16-159998.1.1.x86_64",
                "product": {
                  "name": "python311-0:3.11.16-159998.1.1.x86_64",
                  "product_id": "python311-0:3.11.16-159998.1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.16:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python311@3.11.16-159998.1.1?arch=x86_64\u0026upstream=python311-0:3.11.16-159998.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python311-base-0:3.11.16-159998.1.1.x86_64",
                "product": {
                  "name": "python311-base-0:3.11.16-159998.1.1.x86_64",
                  "product_id": "python311-base-0:3.11.16-159998.1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.16:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python311-base@3.11.16-159998.1.1?arch=x86_64\u0026upstream=python311-0:3.11.16-159998.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python311-curses-0:3.11.16-159998.1.1.x86_64",
                "product": {
                  "name": "python311-curses-0:3.11.16-159998.1.1.x86_64",
                  "product_id": "python311-curses-0:3.11.16-159998.1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.16:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python311-curses@3.11.16-159998.1.1?arch=x86_64\u0026upstream=python311-0:3.11.16-159998.1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Micro 6.0",
                "product": {
                  "name": "SUSE Linux Micro 6.0",
                  "product_id": "SUSE Linux Micro 6.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sl-micro:6.0"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpython3_11-1_0-0:3.11.16-159998.1.1.aarch64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.16-159998.1.1.aarch64"
        },
        "product_reference": "libpython3_11-1_0-0:3.11.16-159998.1.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpython3_11-1_0-0:3.11.16-159998.1.1.s390x as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.16-159998.1.1.s390x"
        },
        "product_reference": "libpython3_11-1_0-0:3.11.16-159998.1.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpython3_11-1_0-0:3.11.16-159998.1.1.x86_64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.16-159998.1.1.x86_64"
        },
        "product_reference": "libpython3_11-1_0-0:3.11.16-159998.1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python311-0:3.11.16-159998.1.1.aarch64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:python311-0:3.11.16-159998.1.1.aarch64"
        },
        "product_reference": "python311-0:3.11.16-159998.1.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python311-0:3.11.16-159998.1.1.s390x as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:python311-0:3.11.16-159998.1.1.s390x"
        },
        "product_reference": "python311-0:3.11.16-159998.1.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python311-0:3.11.16-159998.1.1.x86_64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:python311-0:3.11.16-159998.1.1.x86_64"
        },
        "product_reference": "python311-0:3.11.16-159998.1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python311-base-0:3.11.16-159998.1.1.aarch64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:python311-base-0:3.11.16-159998.1.1.aarch64"
        },
        "product_reference": "python311-base-0:3.11.16-159998.1.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python311-base-0:3.11.16-159998.1.1.s390x as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:python311-base-0:3.11.16-159998.1.1.s390x"
        },
        "product_reference": "python311-base-0:3.11.16-159998.1.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python311-base-0:3.11.16-159998.1.1.x86_64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:python311-base-0:3.11.16-159998.1.1.x86_64"
        },
        "product_reference": "python311-base-0:3.11.16-159998.1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python311-curses-0:3.11.16-159998.1.1.aarch64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:python311-curses-0:3.11.16-159998.1.1.aarch64"
        },
        "product_reference": "python311-curses-0:3.11.16-159998.1.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python311-curses-0:3.11.16-159998.1.1.s390x as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:python311-curses-0:3.11.16-159998.1.1.s390x"
        },
        "product_reference": "python311-curses-0:3.11.16-159998.1.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python311-curses-0:3.11.16-159998.1.1.x86_64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:python311-curses-0:3.11.16-159998.1.1.x86_64"
        },
        "product_reference": "python311-curses-0:3.11.16-159998.1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-15310",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-15310"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "When decompressing crafted zip files using the bzip/LZMA/Zstandard \n\ncompressions, Python could use an attacker-controlled size to \n\npre-allocate memory, possibly resulting in memory exhaustion.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.16-159998.1.1.aarch64",
          "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.16-159998.1.1.s390x",
          "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.16-159998.1.1.x86_64",
          "SUSE Linux Micro 6.0:python311-0:3.11.16-159998.1.1.aarch64",
          "SUSE Linux Micro 6.0:python311-0:3.11.16-159998.1.1.s390x",
          "SUSE Linux Micro 6.0:python311-0:3.11.16-159998.1.1.x86_64",
          "SUSE Linux Micro 6.0:python311-base-0:3.11.16-159998.1.1.aarch64",
          "SUSE Linux Micro 6.0:python311-base-0:3.11.16-159998.1.1.s390x",
          "SUSE Linux Micro 6.0:python311-base-0:3.11.16-159998.1.1.x86_64",
          "SUSE Linux Micro 6.0:python311-curses-0:3.11.16-159998.1.1.aarch64",
          "SUSE Linux Micro 6.0:python311-curses-0:3.11.16-159998.1.1.s390x",
          "SUSE Linux Micro 6.0:python311-curses-0:3.11.16-159998.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-15310",
          "url": "https://www.suse.com/security/cve/CVE-2026-15310"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277111 for CVE-2026-15310",
          "url": "https://bugzilla.suse.com/1277111"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.16-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.16-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.16-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-0:3.11.16-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-0:3.11.16-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-0:3.11.16-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.16-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.16-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.16-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.16-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.16-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.16-159998.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.16-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.16-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.16-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-0:3.11.16-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-0:3.11.16-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-0:3.11.16-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.16-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.16-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.16-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.16-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.16-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.16-159998.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-10T17:21:34Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-15310"
    },
    {
      "cve": "CVE-2026-19672",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-19672"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The tarfile module\u0027s tar and data\n extraction filters created directories outside the destination for \nmembers whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name as given.\n\nOnly\n empty directories are created outside the destination. Member contents \nare still extracted inside it. To return to the destination the member\u0027s\n name must contain the destination directory\u0027s own final component, so \nextraction into a secure randomised directory is not affected.\n\nThis affects POSIX platforms only. On Windows, .. components are collapsed before the path reaches the filesystem, so the directories outside the destination are never created.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.16-159998.1.1.aarch64",
          "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.16-159998.1.1.s390x",
          "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.16-159998.1.1.x86_64",
          "SUSE Linux Micro 6.0:python311-0:3.11.16-159998.1.1.aarch64",
          "SUSE Linux Micro 6.0:python311-0:3.11.16-159998.1.1.s390x",
          "SUSE Linux Micro 6.0:python311-0:3.11.16-159998.1.1.x86_64",
          "SUSE Linux Micro 6.0:python311-base-0:3.11.16-159998.1.1.aarch64",
          "SUSE Linux Micro 6.0:python311-base-0:3.11.16-159998.1.1.s390x",
          "SUSE Linux Micro 6.0:python311-base-0:3.11.16-159998.1.1.x86_64",
          "SUSE Linux Micro 6.0:python311-curses-0:3.11.16-159998.1.1.aarch64",
          "SUSE Linux Micro 6.0:python311-curses-0:3.11.16-159998.1.1.s390x",
          "SUSE Linux Micro 6.0:python311-curses-0:3.11.16-159998.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-19672",
          "url": "https://www.suse.com/security/cve/CVE-2026-19672"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276227 for CVE-2026-19672",
          "url": "https://bugzilla.suse.com/1276227"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.16-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.16-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.16-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-0:3.11.16-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-0:3.11.16-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-0:3.11.16-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.16-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.16-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.16-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.16-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.16-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.16-159998.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.16-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.16-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.16-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-0:3.11.16-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-0:3.11.16-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-0:3.11.16-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.16-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.16-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.16-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.16-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.16-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.16-159998.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-10T17:21:34Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-19672"
    }
  ]
}

CVE-2026-15310 (GCVE-0-2026-15310)

Vulnerability from cvelistv5 – Published: 2026-08-25 15:07 – Updated: 2026-10-02 00:39

Title

zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits

Summary

When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion.

Severity

2.1 (Low)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-25 15:34 UTC

CWE

CWE-400

Assigner

PSF CNA under the mitre root

CNA scorecard B 80/100 over 27 records in the last 180 days details

References

13 references

URL	Tags
https://github.com/python/cpython/pull/156003	patch
https://github.com/python/cpython/issues/156002	issue-tracking
https://mail.python.org/archives/list/security-an…	vendor-advisory
https://github.com/python/cpython/commit/f897dbf2…	patch
https://github.com/python/cpython/commit/1b424c01…	patch
https://github.com/python/cpython/commit/31980e84…	patch
https://github.com/python/cpython/commit/e2311cfb…	patch
https://github.com/python/cpython/commit/f507e694…	patch
https://github.com/python/cpython/commit/9d167992…	patch
https://github.com/python/cpython/commit/dcdd406d…	patch
https://github.com/python/cpython/commit/09a2e7e6…	patch
https://github.com/python/cpython/commit/6257029d…	patch
https://github.com/python/cpython/commit/c2bfbcdd…	patch

Impacted products

1 product

Vendor	Product	Version
Python Software Foundation	CPython	Affected: 0 , < 3.10.22 (python) Affected: 3.11.0 , < 3.11.17 (python) Affected: 3.12.0 , < 3.12.15 (python) Affected: 3.13.0 , < 3.13.16 (python) Affected: 3.14.0 , < 3.14.8 (python) Affected: 3.15.0a1 , < 3.15.0rc2 (python)

Credits

tonghuaroot (童话) (https://github.com/tonghuaroot) Petr Viktorin (https://github.com/encukou) William Woodruff (https://github.com/woodruffw)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-15310",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-25T15:34:06.442859Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-25T17:43:24.947Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "CPython",
          "repo": "https://github.com/python/cpython",
          "vendor": "Python Software Foundation",
          "versions": [
            {
              "lessThan": "3.10.22",
              "status": "affected",
              "version": "0",
              "versionType": "python"
            },
            {
              "lessThan": "3.11.17",
              "status": "affected",
              "version": "3.11.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.12.15",
              "status": "affected",
              "version": "3.12.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.13.16",
              "status": "affected",
              "version": "3.13.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.14.8",
              "status": "affected",
              "version": "3.14.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.15.0rc2",
              "status": "affected",
              "version": "3.15.0a1",
              "versionType": "python"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "tonghuaroot (\u7ae5\u8bdd) (https://github.com/tonghuaroot)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Petr Viktorin (https://github.com/encukou)"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "William Woodruff (https://github.com/woodruffw)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "type": "text/html",
              "value": "When decompressing crafted zip files using the bzip/LZMA/Zstandard \u003cbr\u003e\ncompressions, Python could use an attacker-controlled size to \u003cbr\u003e\npre-allocate memory, possibly resulting in memory exhaustion."
            }
          ],
          "value": "When decompressing crafted zip files using the bzip/LZMA/Zstandard \n\ncompressions, Python could use an attacker-controlled size to \n\npre-allocate memory, possibly resulting in memory exhaustion."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 2.1,
            "baseSeverity": "LOW",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "ACTIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-02T00:39:36.038Z",
        "orgId": "28c92f92-d60d-412d-b760-e73465c3df22",
        "shortName": "PSF"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/pull/156003"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://github.com/python/cpython/issues/156002"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/YUHXURX2WZGKGNA4ANYBQS2VZRYQ5JNK/"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/f897dbf2f36a5935700b7c2d94d4681d2136b7d4"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/1b424c0178a01e155fd0267dc28a8fc1159b33a8"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/31980e84b9a708424a0a1dfecde3fc991e313f89"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/e2311cfb3dd518f008f312fe0631f4f7490d237a"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/f507e6946a3194e83e1d7b8ee6e14567175e46de"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/9d167992b59cf5e23c66b9ed742b13f5925f7d70"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/dcdd406ddbfc4cb29b24c3df17cbabe21d316ce1"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/09a2e7e6678b4f65449e7ad8f112c48f944591e2"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/6257029de42ef89b67f3d20137de87d43e197530"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/c2bfbcdd1a11690507a10bc0998f95b8dc6b6fac"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "28c92f92-d60d-412d-b760-e73465c3df22",
    "assignerShortName": "PSF",
    "cveId": "CVE-2026-15310",
    "datePublished": "2026-08-25T15:07:58.054Z",
    "dateReserved": "2026-07-09T17:39:12.652Z",
    "dateUpdated": "2026-10-02T00:39:36.038Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-19672 (GCVE-0-2026-19672)

Vulnerability from cvelistv5 – Published: 2026-08-19 15:24 – Updated: 2026-08-27 19:41

Title

tarfile extraction filter bypass allows creation of directories outside the destination

Summary

The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name as given. Only empty directories are created outside the destination. Member contents are still extracted inside it. To return to the destination the member's name must contain the destination directory's own final component, so extraction into a secure randomised directory is not affected. This affects POSIX platforms only. On Windows, .. components are collapsed before the path reaches the filesystem, so the directories outside the destination are never created.

Severity

6.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-26 19:28 UTC

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Assigner

PSF CNA under the mitre root

CNA scorecard B 80/100 over 27 records in the last 180 days details

References

3 references

URL	Tags
https://github.com/python/cpython/pull/156000	patch
https://mail.python.org/archives/list/security-an…	vendor-advisory
http://www.openwall.com/lists/oss-security/2026/0…

Impacted products

1 product

Vendor	Product	Version
Python Software Foundation	CPython	Affected: 0 , < 3.16.0 (python)

Credits

Lohinth (https://github.com/l0h1nth) Stan Ulbrych (https://github.com/StanFromIreland) Petr Viktorin (https://github.com/encukou) Ethan Furman (https://github.com/ethanfurman)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2026-08-26T01:30:52.965Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/08/25/10"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-19672",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-26T19:28:09.797384Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-22",
                "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-27T19:41:14.871Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "modules": [
            "tarfile"
          ],
          "product": "CPython",
          "repo": "https://github.com/python/cpython",
          "vendor": "Python Software Foundation",
          "versions": [
            {
              "lessThan": "3.16.0",
              "status": "affected",
              "version": "0",
              "versionType": "python"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Lohinth (https://github.com/l0h1nth)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Stan Ulbrych (https://github.com/StanFromIreland)"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "Petr Viktorin (https://github.com/encukou)"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "Ethan Furman (https://github.com/ethanfurman)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "type": "text/html",
              "value": "The \u003cspan\u003etarfile\u003c/span\u003e module\u0027s \u003cspan\u003etar\u003c/span\u003e and \u003cspan\u003edata\u003c/span\u003e\n extraction filters created directories outside the destination for \nmembers whose name leaves the destination and returns to it, such as \u003cspan\u003e../evil/../dest/sub/file\u003c/span\u003e. The containment check used the resolved path, but intermediate directories were created from the name as given.\u003cbr\u003e\u003cbr\u003eOnly\n empty directories are created outside the destination. Member contents \nare still extracted inside it. To return to the destination the member\u0027s\n name must contain the destination directory\u0027s own final component, so \nextraction into a secure randomised directory is not affected.\u003cbr\u003e\u003cbr\u003eThis affects POSIX platforms only. On Windows, \u003cspan\u003e..\u003c/span\u003e components are collapsed before the path reaches the filesystem, so the directories outside the destination are never created."
            }
          ],
          "value": "The tarfile module\u0027s tar and data\n extraction filters created directories outside the destination for \nmembers whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name as given.\n\nOnly\n empty directories are created outside the destination. Member contents \nare still extracted inside it. To return to the destination the member\u0027s\n name must contain the destination directory\u0027s own final component, so \nextraction into a secure randomised directory is not affected.\n\nThis affects POSIX platforms only. On Windows, .. components are collapsed before the path reaches the filesystem, so the directories outside the destination are never created."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "LOW",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-19T15:24:08.616Z",
        "orgId": "28c92f92-d60d-412d-b760-e73465c3df22",
        "shortName": "PSF"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/pull/156000"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://github.com/python/cpython/pull/156000"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/J2WT2ALRWEXQJOB3C7Q2HYWUXP3CINWO/"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "tarfile extraction filter bypass allows creation of directories outside the destination"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "28c92f92-d60d-412d-b760-e73465c3df22",
    "assignerShortName": "PSF",
    "cveId": "CVE-2026-19672",
    "datePublished": "2026-08-19T15:24:08.616Z",
    "dateReserved": "2026-08-12T21:17:15.148Z",
    "dateUpdated": "2026-08-27T19:41:14.871Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

SUSE-SU-2026:24138-1

CVE-2026-15310 (GCVE-0-2026-15310)

CVE-2026-19672 (GCVE-0-2026-19672)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour