Vulnerability-Lookup

SUSE-SU-2026:24325-1

Vulnerability from csaf_suse - Published: 2026-10-19 08:33 - Updated: 2026-10-26 19:20

Summary

Security update for python311

Severity

Important

Notes

Title of the patch: Security update for python311

Description of the patch: This update for python311 fixes the following issues: - CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). - CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). - CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226). - CVE-2026-19445: reassigned SNI callbacks with unreferenced SSLContext instances can cause use-after-free (bsc#1283969). - CVE-2026-19553: omitted server_hostname arguments in wrap_bio() can cause silent hostname verification bypasses (bsc#1283826). - CVE-2026-19672: tarfile extraction filter bypass allows creation of directories outside the destination (bsc#1276227). - CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459). Changes for python311: - Update to 3.11.17: - Security - gh-158446: Fix a crash or incorrect output that could occur when formatting a float or complex with a precision close to the platform's INT_MAX. PyOS_double_to_string() now raises ValueError for any precision of that magnitude, regardless of presentation type or value, as the format string parsers already did for precisions above INT_MAX. - gh-157190: Fixed a vulnerability in the tarfile data and tar extraction filters where a crafted archive using a hard link to a symbolic link could change the permissions and modification time of a file outside the destination directory, and expose its contents inside the extracted tree. This addresses CVE 2026-82049. (bsc#1280459, CVE-2026-82049) - gh-156793: asyncio: loop.start_tls() and loop.create_connection() now validate the server_hostname argument if an ssl.SSLContext is passed with check_hostname set to True, emitting DeprecationWarning if server_hostname is missing. (This will raise ValueError in Python 3.13 and later.) (bsc#1283826, CVE-2026-19553) - gh-156793: ssl.SSLContext.wrap_bio() now validates its server_side, server_hostname and session arguments similar to ssl.SSLContext.wrap_socket(), but for backward compatiblity reasons emits DeprecationWarning instead of ValueError. In particular, a context with check_hostname enabled and no server_hostname passed to wrap_bio() now emits DeprecationWarning to indicate the hostname wasn't checked. (In Python 3.13 and later, this raises ValueError.) - gh-157265: In tarfile, when extracting a link falls back to extracting a member of the archive, skip the member when the filter function returns None when called with the extracted member's name replaced with the link's. - gh-157953: Update bundled libexpat to version 2.8.5. - gh-156002: Bound the amount of data zipfile decompresses per read for members compressed with bzip2, LZMA, or Zstandard, matching the existing limit for deflate. A small archive member could previously expand into an unbounded allocation even when read in small chunks. (bsc#1277111, CVE-2026-15310) - gh-155999: Fix the tarfile tar and data extraction filters creating directories outside the destination for members whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name as given. (bsc#1276227, CVE-2026-19672) - gh-156293: Fix a crash in ssl when an sni_callback switches a connection to another SSLContext and the context that carries the callback is no longer referenced by the application. Servers that keep their sni_callback context alive (the usual case when it wraps the listening socket or is stored on the server object) were not affected. This addresses CVE-2026-19445. (bsc#1283969, CVE-2026-19445) - gh-155292: Change the stringprep module and encodings.idna codec to not consider Unicode codepoint attributes beyond those defined in RFC 3454. (bsc#1276226, CVE-2026-17084) - gh-155694: Fix CVE-2026-15806 by scoping HTTPPasswordMgr credentials to the URL scheme, preventing credentials stored for an HTTPS URL from being used for a matching HTTP URL, while URIs without a scheme continue to match any scheme. (bsc#1276223, CVE-2026-15806) - Library - gh-156002: zipfile again reads members through a third-party decompressor installed by monkey-patching the private _get_decompressor() to return an object that only implements old BZ2Decompressor API from Python 3.3. Note that decompressors without needs_input and two-argument decompress() are vulnerable to CVE 2026-15310. - gh-156353: Fix configparser parsing when using whitespace in delimiters. - Build - gh-155757: Set the --argv0 argument to wasmtime for WASI builds so the test suite passes. Otherwise the calculated paths to the stdlib for frozen modules is incorrect.

Patchnames: SUSE-SLE-Micro-6.0-938

CVE-2026-15310

3.1 (Low)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 12 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2026-15806

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 12 products, the same list as for CVE-2026-15310

Threats

Impact moderate

CVE-2026-17084

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected products

Recommended 12 products, the same list as for CVE-2026-15310

Threats

Impact moderate

CVE-2026-19445

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 12 products, the same list as for CVE-2026-15310

Threats

Impact moderate

CVE-2026-19553

6.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Affected products

Recommended 12 products, the same list as for CVE-2026-15310

Threats

Impact moderate

CVE-2026-19672

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected products

Recommended 12 products, the same list as for CVE-2026-15310

Threats

Impact moderate

CVE-2026-82049

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Affected products

Recommended 12 products, the same list as for CVE-2026-15310

Threats

Impact important

References

32 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://www.suse.com/support/update/announcement/…	self
https://bugzilla.suse.com/1276223	self
https://bugzilla.suse.com/1276226	self
https://bugzilla.suse.com/1276227	self
https://bugzilla.suse.com/1277111	self
https://bugzilla.suse.com/1280459	self
https://bugzilla.suse.com/1283826	self
https://bugzilla.suse.com/1283969	self
https://www.suse.com/security/cve/CVE-2026-15310/	self
https://www.suse.com/security/cve/CVE-2026-15806/	self
https://www.suse.com/security/cve/CVE-2026-17084/	self
https://www.suse.com/security/cve/CVE-2026-19445/	self
https://www.suse.com/security/cve/CVE-2026-19553/	self
https://www.suse.com/security/cve/CVE-2026-19672/	self
https://www.suse.com/security/cve/CVE-2026-82049/	self
https://www.suse.com/security/cve/CVE-2026-15310	external
https://bugzilla.suse.com/1277111	external
https://www.suse.com/security/cve/CVE-2026-15806	external
https://bugzilla.suse.com/1276223	external
https://www.suse.com/security/cve/CVE-2026-17084	external
https://bugzilla.suse.com/1276226	external
https://www.suse.com/security/cve/CVE-2026-19445	external
https://bugzilla.suse.com/1283969	external
https://www.suse.com/security/cve/CVE-2026-19553	external
https://bugzilla.suse.com/1283826	external
https://www.suse.com/security/cve/CVE-2026-19672	external
https://bugzilla.suse.com/1276227	external
https://www.suse.com/security/cve/CVE-2026-82049	external
https://bugzilla.suse.com/1280459	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for python311",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for python311 fixes the following issues:\n\n- CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111).\n- CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223).\n- CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226).\n- CVE-2026-19445: reassigned SNI callbacks with unreferenced SSLContext instances can cause use-after-free\n  (bsc#1283969).\n- CVE-2026-19553: omitted server_hostname arguments in wrap_bio() can cause silent hostname verification bypasses\n  (bsc#1283826).\n- CVE-2026-19672: tarfile extraction filter bypass allows creation of directories outside the destination (bsc#1276227).\n- CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file\n  modification and content disclosure (bsc#1280459).\n\nChanges for python311:\n\n- Update to 3.11.17:\n - Security\n - gh-158446: Fix a crash or incorrect output that could occur\n when formatting a float or complex with a precision close\n to the platform\u0027s INT_MAX. PyOS_double_to_string() now\n raises ValueError for any precision of that magnitude,\n regardless of presentation type or value, as the format\n string parsers already did for precisions above INT_MAX.\n - gh-157190: Fixed a vulnerability in the tarfile data and\n tar extraction filters where a crafted archive using a hard\n link to a symbolic link could change the permissions and\n modification time of a file outside the destination\n directory, and expose its contents inside the extracted\n tree. This addresses CVE 2026-82049. (bsc#1280459,\n CVE-2026-82049)\n - gh-156793: asyncio: loop.start_tls() and\n loop.create_connection() now validate the server_hostname\n argument if an ssl.SSLContext is passed with check_hostname\n set to True, emitting DeprecationWarning if server_hostname\n is missing. (This will raise ValueError in Python 3.13 and\n later.) (bsc#1283826, CVE-2026-19553)\n - gh-156793: ssl.SSLContext.wrap_bio() now validates its\n server_side, server_hostname and session arguments similar\n to ssl.SSLContext.wrap_socket(), but for backward\n compatiblity reasons emits DeprecationWarning instead of\n ValueError.\n In particular, a context with check_hostname enabled and no\n server_hostname passed to wrap_bio() now emits\n DeprecationWarning to indicate the hostname wasn\u0027t\n checked. (In Python 3.13 and later, this raises\n ValueError.)\n - gh-157265: In tarfile, when extracting a link falls back to\n extracting a member of the archive, skip the member when\n the filter function returns None when called with the\n extracted member\u0027s name replaced with the link\u0027s.\n - gh-157953: Update bundled libexpat to version 2.8.5.\n - gh-156002: Bound the amount of data zipfile decompresses\n per read for members compressed with bzip2, LZMA, or\n Zstandard, matching the existing limit for deflate. A small\n archive member could previously expand into an unbounded\n allocation even when read in small chunks. (bsc#1277111,\n CVE-2026-15310)\n - gh-155999: Fix the tarfile tar and data extraction filters\n creating directories outside the destination for members\n whose name leaves the destination and returns to it, such\n as ../evil/../dest/sub/file. The containment check used the\n resolved path, but intermediate directories were created\n from the name as given. (bsc#1276227, CVE-2026-19672)\n - gh-156293: Fix a crash in ssl when an sni_callback switches\n a connection to another SSLContext and the context that\n carries the callback is no longer referenced by the\n application. Servers that keep their sni_callback context\n alive (the usual case when it wraps the listening socket or\n is stored on the server object) were not affected. This\n addresses CVE-2026-19445. (bsc#1283969, CVE-2026-19445)\n - gh-155292: Change the stringprep module and encodings.idna\n codec to not consider Unicode codepoint attributes beyond\n those defined in RFC 3454. (bsc#1276226, CVE-2026-17084)\n - gh-155694: Fix CVE-2026-15806 by scoping HTTPPasswordMgr\n credentials to the URL scheme, preventing credentials\n stored for an HTTPS URL from being used for a matching HTTP\n URL, while URIs without a scheme continue to match any\n scheme. (bsc#1276223, CVE-2026-15806)\n - Library\n - gh-156002: zipfile again reads members through a\n third-party decompressor installed by monkey-patching the\n private _get_decompressor() to return an object that only\n implements old BZ2Decompressor API from Python 3.3. Note\n that decompressors without needs_input and two-argument\n decompress() are vulnerable to CVE 2026-15310.\n - gh-156353: Fix configparser parsing when using whitespace\n in delimiters.\n - Build\n - gh-155757: Set the --argv0 argument to wasmtime for WASI\n builds so the test suite passes. Otherwise the calculated\n paths to the stdlib for frozen modules is incorrect.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-Micro-6.0-938",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_24325-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2026:24325-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202624325-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2026:24325-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202624325-1/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276223",
        "url": "https://bugzilla.suse.com/1276223"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276226",
        "url": "https://bugzilla.suse.com/1276226"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276227",
        "url": "https://bugzilla.suse.com/1276227"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277111",
        "url": "https://bugzilla.suse.com/1277111"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280459",
        "url": "https://bugzilla.suse.com/1280459"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283826",
        "url": "https://bugzilla.suse.com/1283826"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283969",
        "url": "https://bugzilla.suse.com/1283969"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-15310 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-15310/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-15806 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-15806/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-17084 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-17084/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-19445 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-19445/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-19553 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-19553/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-19672 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-19672/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-82049 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-82049/"
      }
    ],
    "title": "Security update for python311",
    "tracking": {
      "current_release_date": "2026-10-26T19:20:13Z",
      "generator": {
        "date": "2026-10-19T08:33:46Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2026:24325-1",
      "initial_release_date": "2026-10-19T08:33:46Z",
      "revision_history": [
        {
          "date": "2026-10-19T08:33:46Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-10-26T19:20:13Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpython3_11-1_0-0:3.11.17-159998.1.1.aarch64",
                "product": {
                  "name": "libpython3_11-1_0-0:3.11.17-159998.1.1.aarch64",
                  "product_id": "libpython3_11-1_0-0:3.11.17-159998.1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.17:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libpython3_11-1_0@3.11.17-159998.1.1?arch=aarch64\u0026upstream=python311-0:3.11.17-159998.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python311-0:3.11.17-159998.1.1.aarch64",
                "product": {
                  "name": "python311-0:3.11.17-159998.1.1.aarch64",
                  "product_id": "python311-0:3.11.17-159998.1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.17:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python311@3.11.17-159998.1.1?arch=aarch64\u0026upstream=python311-0:3.11.17-159998.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python311-base-0:3.11.17-159998.1.1.aarch64",
                "product": {
                  "name": "python311-base-0:3.11.17-159998.1.1.aarch64",
                  "product_id": "python311-base-0:3.11.17-159998.1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.17:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python311-base@3.11.17-159998.1.1?arch=aarch64\u0026upstream=python311-0:3.11.17-159998.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python311-curses-0:3.11.17-159998.1.1.aarch64",
                "product": {
                  "name": "python311-curses-0:3.11.17-159998.1.1.aarch64",
                  "product_id": "python311-curses-0:3.11.17-159998.1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.17:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python311-curses@3.11.17-159998.1.1?arch=aarch64\u0026upstream=python311-0:3.11.17-159998.1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpython3_11-1_0-0:3.11.17-159998.1.1.s390x",
                "product": {
                  "name": "libpython3_11-1_0-0:3.11.17-159998.1.1.s390x",
                  "product_id": "libpython3_11-1_0-0:3.11.17-159998.1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.17:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libpython3_11-1_0@3.11.17-159998.1.1?arch=s390x\u0026upstream=python311-0:3.11.17-159998.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python311-0:3.11.17-159998.1.1.s390x",
                "product": {
                  "name": "python311-0:3.11.17-159998.1.1.s390x",
                  "product_id": "python311-0:3.11.17-159998.1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.17:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python311@3.11.17-159998.1.1?arch=s390x\u0026upstream=python311-0:3.11.17-159998.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python311-base-0:3.11.17-159998.1.1.s390x",
                "product": {
                  "name": "python311-base-0:3.11.17-159998.1.1.s390x",
                  "product_id": "python311-base-0:3.11.17-159998.1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.17:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python311-base@3.11.17-159998.1.1?arch=s390x\u0026upstream=python311-0:3.11.17-159998.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python311-curses-0:3.11.17-159998.1.1.s390x",
                "product": {
                  "name": "python311-curses-0:3.11.17-159998.1.1.s390x",
                  "product_id": "python311-curses-0:3.11.17-159998.1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.17:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python311-curses@3.11.17-159998.1.1?arch=s390x\u0026upstream=python311-0:3.11.17-159998.1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpython3_11-1_0-0:3.11.17-159998.1.1.x86_64",
                "product": {
                  "name": "libpython3_11-1_0-0:3.11.17-159998.1.1.x86_64",
                  "product_id": "libpython3_11-1_0-0:3.11.17-159998.1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.17:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libpython3_11-1_0@3.11.17-159998.1.1?arch=x86_64\u0026upstream=python311-0:3.11.17-159998.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python311-0:3.11.17-159998.1.1.x86_64",
                "product": {
                  "name": "python311-0:3.11.17-159998.1.1.x86_64",
                  "product_id": "python311-0:3.11.17-159998.1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.17:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python311@3.11.17-159998.1.1?arch=x86_64\u0026upstream=python311-0:3.11.17-159998.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python311-base-0:3.11.17-159998.1.1.x86_64",
                "product": {
                  "name": "python311-base-0:3.11.17-159998.1.1.x86_64",
                  "product_id": "python311-base-0:3.11.17-159998.1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.17:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python311-base@3.11.17-159998.1.1?arch=x86_64\u0026upstream=python311-0:3.11.17-159998.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python311-curses-0:3.11.17-159998.1.1.x86_64",
                "product": {
                  "name": "python311-curses-0:3.11.17-159998.1.1.x86_64",
                  "product_id": "python311-curses-0:3.11.17-159998.1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.17:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python311-curses@3.11.17-159998.1.1?arch=x86_64\u0026upstream=python311-0:3.11.17-159998.1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Micro 6.0",
                "product": {
                  "name": "SUSE Linux Micro 6.0",
                  "product_id": "SUSE Linux Micro 6.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sl-micro:6.0"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpython3_11-1_0-0:3.11.17-159998.1.1.aarch64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.aarch64"
        },
        "product_reference": "libpython3_11-1_0-0:3.11.17-159998.1.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpython3_11-1_0-0:3.11.17-159998.1.1.s390x as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.s390x"
        },
        "product_reference": "libpython3_11-1_0-0:3.11.17-159998.1.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpython3_11-1_0-0:3.11.17-159998.1.1.x86_64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.x86_64"
        },
        "product_reference": "libpython3_11-1_0-0:3.11.17-159998.1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python311-0:3.11.17-159998.1.1.aarch64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.aarch64"
        },
        "product_reference": "python311-0:3.11.17-159998.1.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python311-0:3.11.17-159998.1.1.s390x as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.s390x"
        },
        "product_reference": "python311-0:3.11.17-159998.1.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python311-0:3.11.17-159998.1.1.x86_64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.x86_64"
        },
        "product_reference": "python311-0:3.11.17-159998.1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python311-base-0:3.11.17-159998.1.1.aarch64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.aarch64"
        },
        "product_reference": "python311-base-0:3.11.17-159998.1.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python311-base-0:3.11.17-159998.1.1.s390x as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.s390x"
        },
        "product_reference": "python311-base-0:3.11.17-159998.1.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python311-base-0:3.11.17-159998.1.1.x86_64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.x86_64"
        },
        "product_reference": "python311-base-0:3.11.17-159998.1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python311-curses-0:3.11.17-159998.1.1.aarch64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.aarch64"
        },
        "product_reference": "python311-curses-0:3.11.17-159998.1.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python311-curses-0:3.11.17-159998.1.1.s390x as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.s390x"
        },
        "product_reference": "python311-curses-0:3.11.17-159998.1.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python311-curses-0:3.11.17-159998.1.1.x86_64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.x86_64"
        },
        "product_reference": "python311-curses-0:3.11.17-159998.1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-15310",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-15310"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "When decompressing crafted zip files using the bzip/LZMA/Zstandard \n\ncompressions, Python could use an attacker-controlled size to \n\npre-allocate memory, possibly resulting in memory exhaustion.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.aarch64",
          "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.s390x",
          "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.x86_64",
          "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.aarch64",
          "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.s390x",
          "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.x86_64",
          "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.aarch64",
          "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.s390x",
          "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.x86_64",
          "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.aarch64",
          "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.s390x",
          "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-15310",
          "url": "https://www.suse.com/security/cve/CVE-2026-15310"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277111 for CVE-2026-15310",
          "url": "https://bugzilla.suse.com/1277111"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T08:33:46Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-15310"
    },
    {
      "cve": "CVE-2026-15806",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-15806"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme into account when matching stored credentials against a requested URL. Credentials added for an https:// URL were also used for requests to the same host over http://, so an attacker able to redirect or downgrade a client to plain HTTP (for example, via an HTTPS-to-HTTP redirect or an on-path position) could capture credentials in cleartext. Credentials added for http:// URLs could likewise be sent over https://.\n\nCredential matching is now scoped by URL scheme. Credentials registered with a URL that includes a scheme are only used for requests with the same scheme. Credentials registered with a bare authority (such as example.com or example.com:8080) continue to match any scheme, preserving compatibility with existing code, including proxy authentication.\n\nUsers who cannot upgrade immediately can mitigate by ensuring that applications never make plain http:// requests to hosts for which credentials are registered, for example by not following redirects to http:// URLs.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.aarch64",
          "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.s390x",
          "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.x86_64",
          "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.aarch64",
          "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.s390x",
          "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.x86_64",
          "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.aarch64",
          "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.s390x",
          "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.x86_64",
          "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.aarch64",
          "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.s390x",
          "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-15806",
          "url": "https://www.suse.com/security/cve/CVE-2026-15806"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276223 for CVE-2026-15806",
          "url": "https://bugzilla.suse.com/1276223"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T08:33:46Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-15806"
    },
    {
      "cve": "CVE-2026-17084",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-17084"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The \"stringprep\" module didn\u0027t process characters from RFC 3454 tables \nB.2 or B.3 correctly: the latest Unicode codepoint attributes were used \ninstead of the specified Unicode 3.2.0. This behavior would cause \nmismatches when processing domain names using IDNA 2003 (the \"idna\" \ncodec) and the in_table_b2() function of the \"stringprep\" module. This \nonly affects domain names containing characters that were not previously\n registered or had their Unicode attributes such as case-folding \nbehavior updated since Unicode 3.2.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.aarch64",
          "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.s390x",
          "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.x86_64",
          "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.aarch64",
          "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.s390x",
          "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.x86_64",
          "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.aarch64",
          "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.s390x",
          "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.x86_64",
          "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.aarch64",
          "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.s390x",
          "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-17084",
          "url": "https://www.suse.com/security/cve/CVE-2026-17084"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276226 for CVE-2026-17084",
          "url": "https://bugzilla.suse.com/1276226"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T08:33:46Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-17084"
    },
    {
      "cve": "CVE-2026-19445",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-19445"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A remote, unauthenticated TLS client can make a server crash or call\nthrough a freed pointer if its sni_callback assigns a different context to\nSSLSocket.context (the documented way to select a certificate per server\nname) and nothing else keeps the original ssl.SSLContext alive. Typical\ncases are servers that create an SSLContext per connection or replace it\nwhile connections are open; servers that wrap their listening socket with\nit are not affected.\n\n\nMitigation: keep a reference to every SSLContext that sets sni_callback for\nthe lifetime of the server. TLS clients are not affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.aarch64",
          "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.s390x",
          "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.x86_64",
          "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.aarch64",
          "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.s390x",
          "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.x86_64",
          "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.aarch64",
          "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.s390x",
          "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.x86_64",
          "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.aarch64",
          "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.s390x",
          "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-19445",
          "url": "https://www.suse.com/security/cve/CVE-2026-19445"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283969 for CVE-2026-19445",
          "url": "https://bugzilla.suse.com/1283969"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T08:33:46Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-19445"
    },
    {
      "cve": "CVE-2026-19553",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-19553"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ssl.SSLContext.wrap_bio() didn\u0027t require the server_hostname argument\nto not be None if ssl.SSLContext.check_hostname was set. Due to a\nmissing parameter check in SSLObject, if the server_hostname argument\nisn\u0027t supplied then hostname verification would be silently skipped.\n\n\nThis defect could lead to programs where certificate hostname verification\n*appeared* to be succeeding with SSLContext.check_hostname = True and no\nValueError being raised due to misconfiguration.\n\n\nIf the program passes a server_hostname value that isn\u0027t an empty string\nor None to any of these APIs then certificate hostname verification\nproceeds as expected and the program is not affected by this vulnerability.\n\n\nMitigating this vulnerability doesn\u0027t require updating Python or applying\nthe patch. To mitigate, pass a valid non-None and non-empty\nserver_hostname value to SSLContext.wrap_bio(),\nasyncio.create_connection(), or asyncio.loop.start_tls() and\ncertificate hostname verification will proceed as expected. Upgrading to\nthe latest version of Python or applying the patch only changes the\nbehavior from silently skipping hostname verification to raising a\nValueError, similar to SSLContext.wrap_socket(), when server_hostname\nisn\u0027t supplied.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.aarch64",
          "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.s390x",
          "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.x86_64",
          "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.aarch64",
          "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.s390x",
          "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.x86_64",
          "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.aarch64",
          "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.s390x",
          "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.x86_64",
          "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.aarch64",
          "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.s390x",
          "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-19553",
          "url": "https://www.suse.com/security/cve/CVE-2026-19553"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283826 for CVE-2026-19553",
          "url": "https://bugzilla.suse.com/1283826"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T08:33:46Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-19553"
    },
    {
      "cve": "CVE-2026-19672",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-19672"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The tarfile module\u0027s tar and data\n extraction filters created directories outside the destination for \nmembers whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name as given.\n\nOnly\n empty directories are created outside the destination. Member contents \nare still extracted inside it. To return to the destination the member\u0027s\n name must contain the destination directory\u0027s own final component, so \nextraction into a secure randomised directory is not affected.\n\nThis affects POSIX platforms only. On Windows, .. components are collapsed before the path reaches the filesystem, so the directories outside the destination are never created.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.aarch64",
          "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.s390x",
          "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.x86_64",
          "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.aarch64",
          "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.s390x",
          "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.x86_64",
          "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.aarch64",
          "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.s390x",
          "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.x86_64",
          "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.aarch64",
          "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.s390x",
          "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-19672",
          "url": "https://www.suse.com/security/cve/CVE-2026-19672"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276227 for CVE-2026-19672",
          "url": "https://bugzilla.suse.com/1276227"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T08:33:46Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-19672"
    },
    {
      "cve": "CVE-2026-82049",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-82049"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In CPython 3.13 and earlier, the tarfile  module\u0027s data  and tar extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link. Such archives may cause extraction to modify the permissions or modification time of a file outside the destination directory, or expose the contents of that file within the extracted tree.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.aarch64",
          "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.s390x",
          "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.x86_64",
          "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.aarch64",
          "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.s390x",
          "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.x86_64",
          "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.aarch64",
          "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.s390x",
          "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.x86_64",
          "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.aarch64",
          "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.s390x",
          "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-82049",
          "url": "https://www.suse.com/security/cve/CVE-2026-82049"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280459 for CVE-2026-82049",
          "url": "https://bugzilla.suse.com/1280459"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:libpython3_11-1_0-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-base-0:3.11.17-159998.1.1.x86_64",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.aarch64",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.s390x",
            "SUSE Linux Micro 6.0:python311-curses-0:3.11.17-159998.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T08:33:46Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-82049"
    }
  ]
}

CVE-2026-15310 (GCVE-0-2026-15310)

Vulnerability from cvelistv5 – Published: 2026-08-25 15:07 – Updated: 2026-10-02 00:39

Title

zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits

Summary

When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion.

Severity

2.1 (Low)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-25 15:34 UTC

CWE

CWE-400

Assigner

PSF CNA under the mitre root

CNA scorecard B 80/100 over 27 records in the last 180 days details

References

13 references

URL	Tags
https://github.com/python/cpython/pull/156003	patch
https://github.com/python/cpython/issues/156002	issue-tracking
https://mail.python.org/archives/list/security-an…	vendor-advisory
https://github.com/python/cpython/commit/f897dbf2…	patch
https://github.com/python/cpython/commit/1b424c01…	patch
https://github.com/python/cpython/commit/31980e84…	patch
https://github.com/python/cpython/commit/e2311cfb…	patch
https://github.com/python/cpython/commit/f507e694…	patch
https://github.com/python/cpython/commit/9d167992…	patch
https://github.com/python/cpython/commit/dcdd406d…	patch
https://github.com/python/cpython/commit/09a2e7e6…	patch
https://github.com/python/cpython/commit/6257029d…	patch
https://github.com/python/cpython/commit/c2bfbcdd…	patch

Impacted products

1 product

Vendor	Product	Version
Python Software Foundation	CPython	Affected: 0 , < 3.10.22 (python) Affected: 3.11.0 , < 3.11.17 (python) Affected: 3.12.0 , < 3.12.15 (python) Affected: 3.13.0 , < 3.13.16 (python) Affected: 3.14.0 , < 3.14.8 (python) Affected: 3.15.0a1 , < 3.15.0rc2 (python)

Credits

tonghuaroot (童话) (https://github.com/tonghuaroot) Petr Viktorin (https://github.com/encukou) William Woodruff (https://github.com/woodruffw)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-15310",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-25T15:34:06.442859Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-25T17:43:24.947Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "CPython",
          "repo": "https://github.com/python/cpython",
          "vendor": "Python Software Foundation",
          "versions": [
            {
              "lessThan": "3.10.22",
              "status": "affected",
              "version": "0",
              "versionType": "python"
            },
            {
              "lessThan": "3.11.17",
              "status": "affected",
              "version": "3.11.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.12.15",
              "status": "affected",
              "version": "3.12.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.13.16",
              "status": "affected",
              "version": "3.13.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.14.8",
              "status": "affected",
              "version": "3.14.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.15.0rc2",
              "status": "affected",
              "version": "3.15.0a1",
              "versionType": "python"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "tonghuaroot (\u7ae5\u8bdd) (https://github.com/tonghuaroot)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Petr Viktorin (https://github.com/encukou)"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "William Woodruff (https://github.com/woodruffw)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "type": "text/html",
              "value": "When decompressing crafted zip files using the bzip/LZMA/Zstandard \u003cbr\u003e\ncompressions, Python could use an attacker-controlled size to \u003cbr\u003e\npre-allocate memory, possibly resulting in memory exhaustion."
            }
          ],
          "value": "When decompressing crafted zip files using the bzip/LZMA/Zstandard \n\ncompressions, Python could use an attacker-controlled size to \n\npre-allocate memory, possibly resulting in memory exhaustion."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 2.1,
            "baseSeverity": "LOW",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "ACTIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-02T00:39:36.038Z",
        "orgId": "28c92f92-d60d-412d-b760-e73465c3df22",
        "shortName": "PSF"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/pull/156003"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://github.com/python/cpython/issues/156002"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/YUHXURX2WZGKGNA4ANYBQS2VZRYQ5JNK/"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/f897dbf2f36a5935700b7c2d94d4681d2136b7d4"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/1b424c0178a01e155fd0267dc28a8fc1159b33a8"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/31980e84b9a708424a0a1dfecde3fc991e313f89"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/e2311cfb3dd518f008f312fe0631f4f7490d237a"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/f507e6946a3194e83e1d7b8ee6e14567175e46de"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/9d167992b59cf5e23c66b9ed742b13f5925f7d70"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/dcdd406ddbfc4cb29b24c3df17cbabe21d316ce1"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/09a2e7e6678b4f65449e7ad8f112c48f944591e2"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/6257029de42ef89b67f3d20137de87d43e197530"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/c2bfbcdd1a11690507a10bc0998f95b8dc6b6fac"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "28c92f92-d60d-412d-b760-e73465c3df22",
    "assignerShortName": "PSF",
    "cveId": "CVE-2026-15310",
    "datePublished": "2026-08-25T15:07:58.054Z",
    "dateReserved": "2026-07-09T17:39:12.652Z",
    "dateUpdated": "2026-10-02T00:39:36.038Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-15806 (GCVE-0-2026-15806)

Vulnerability from cvelistv5 – Published: 2026-08-18 15:50 – Updated: 2026-10-02 00:39

Title

`HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matching

Summary

The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme into account when matching stored credentials against a requested URL. Credentials added for an https:// URL were also used for requests to the same host over http://, so an attacker able to redirect or downgrade a client to plain HTTP (for example, via an HTTPS-to-HTTP redirect or an on-path position) could capture credentials in cleartext. Credentials added for http:// URLs could likewise be sent over https://. Credential matching is now scoped by URL scheme. Credentials registered with a URL that includes a scheme are only used for requests with the same scheme. Credentials registered with a bare authority (such as example.com or example.com:8080) continue to match any scheme, preserving compatibility with existing code, including proxy authentication. Users who cannot upgrade immediately can mitigate by ensuring that applications never make plain http:// requests to hosts for which credentials are registered, for example by not following redirects to http:// URLs.

Severity

6 (Medium)


                        
                          CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-18 18:56 UTC

CWE

Assigner

PSF CNA under the mitre root

CNA scorecard B 80/100 over 27 records in the last 180 days details

References

11 references

URL	Tags
https://github.com/python/cpython/issues/155694	issue-tracking
https://github.com/python/cpython/pull/155696	patch
https://mail.python.org/archives/list/security-an…	vendor-advisory
https://github.com/python/cpython/commit/a0d023fb…	patch
https://github.com/python/cpython/commit/a2773a34…	patch
https://github.com/python/cpython/commit/a7bb524f…	patch
https://github.com/python/cpython/commit/641be42b…	patch
https://github.com/python/cpython/commit/851cf9a7…	patch
https://github.com/python/cpython/commit/95355ee3…	patch
https://github.com/python/cpython/commit/dac88d86…	patch
http://www.openwall.com/lists/oss-security/2026/08/18/3

Impacted products

1 product

Vendor	Product	Version
Python Software Foundation	CPython	Affected: 0 , < 3.10.22 (python) Affected: 3.11.0 , < 3.11.17 (python) Affected: 3.12.0 , < 3.12.15 (python) Affected: 3.13.0 , < 3.13.16 (python) Affected: 3.14.0 , < 3.14.8 (python) Affected: 3.15.0a1 , < 3.15.0rc2 (python)

Credits

Łukasz (https://github.com/lkk7) Kirill Podoprigora (https://github.com/Eclips4) Senthil Kumaran (https://github.com/orsenthil)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2026-08-18T18:07:31.778Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/08/18/3"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-15806",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-18T18:56:36.349726Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-18T18:56:57.585Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/python/cpython/issues/155694"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "CPython",
          "repo": "https://github.com/python/cpython",
          "vendor": "Python Software Foundation",
          "versions": [
            {
              "lessThan": "3.10.22",
              "status": "affected",
              "version": "0",
              "versionType": "python"
            },
            {
              "lessThan": "3.11.17",
              "status": "affected",
              "version": "3.11.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.12.15",
              "status": "affected",
              "version": "3.12.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.13.16",
              "status": "affected",
              "version": "3.13.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.14.8",
              "status": "affected",
              "version": "3.14.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.15.0rc2",
              "status": "affected",
              "version": "3.15.0a1",
              "versionType": "python"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "\u0141ukasz (https://github.com/lkk7)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Kirill Podoprigora (https://github.com/Eclips4)"
        },
        {
          "lang": "en",
          "type": "analyst",
          "value": "Senthil Kumaran (https://github.com/orsenthil)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "type": "text/html",
              "value": "The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme into account when matching stored credentials against a requested URL. Credentials added for an https:// URL were also used for requests to the same host over http://, so an attacker able to redirect or downgrade a client to plain HTTP (for example, via an HTTPS-to-HTTP redirect or an on-path position) could capture credentials in cleartext. Credentials added for http:// URLs could likewise be sent over https://.\u003cbr\u003e\u003cbr\u003eCredential matching is now scoped by URL scheme. Credentials registered with a URL that includes a scheme are only used for requests with the same scheme. Credentials registered with a bare authority (such as example.com or example.com:8080) continue to match any scheme, preserving compatibility with existing code, including proxy authentication.\u003cbr\u003e\u003cbr\u003eUsers who cannot upgrade immediately can mitigate by ensuring that applications never make plain http:// requests to hosts for which credentials are registered, for example by not following redirects to http:// URLs."
            }
          ],
          "value": "The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme into account when matching stored credentials against a requested URL. Credentials added for an https:// URL were also used for requests to the same host over http://, so an attacker able to redirect or downgrade a client to plain HTTP (for example, via an HTTPS-to-HTTP redirect or an on-path position) could capture credentials in cleartext. Credentials added for http:// URLs could likewise be sent over https://.\n\nCredential matching is now scoped by URL scheme. Credentials registered with a URL that includes a scheme are only used for requests with the same scheme. Credentials registered with a bare authority (such as example.com or example.com:8080) continue to match any scheme, preserving compatibility with existing code, including proxy authentication.\n\nUsers who cannot upgrade immediately can mitigate by ensuring that applications never make plain http:// requests to hosts for which credentials are registered, for example by not following redirects to http:// URLs."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "HIGH",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-319",
              "description": "CWE-319",
              "lang": "en",
              "type": "CWE"
            },
            {
              "cweId": "CWE-522",
              "description": "CWE-522",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-02T00:39:20.429Z",
        "orgId": "28c92f92-d60d-412d-b760-e73465c3df22",
        "shortName": "PSF"
      },
      "references": [
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://github.com/python/cpython/issues/155694"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/pull/155696"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/3OKPE5S75KDNA7FY7AI3PL2MXM2X5RB3/"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/a0d023fbd23773e24b35d8368789470e22cda5d8"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/a2773a34183b7d94a243bb98fd658926cc5348ce"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/a7bb524fef61f77ede01f660ffbd591e1d5837ce"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/641be42bb07921ba0f8bffe228b1dc706b092ef6"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/851cf9a7142ecbdd39f831055533f58284ad2bcc"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/95355ee3a8e1d3c3d4858d1973aa42a9b91a2801"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/dac88d8615078c55f1304ea4c7a2d822700d4e5a"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "`HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matching",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "28c92f92-d60d-412d-b760-e73465c3df22",
    "assignerShortName": "PSF",
    "cveId": "CVE-2026-15806",
    "datePublished": "2026-08-18T15:50:57.983Z",
    "dateReserved": "2026-07-15T08:49:13.390Z",
    "dateUpdated": "2026-10-02T00:39:20.429Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-17084 (GCVE-0-2026-17084)

Vulnerability from cvelistv5 – Published: 2026-08-18 13:57 – Updated: 2026-10-02 00:39

Title

stringprep.map_table_b2() deviates from RFC 3454 Table B.2

Summary

The "stringprep" module didn't process characters from RFC 3454 tables B.2 or B.3 correctly: the latest Unicode codepoint attributes were used instead of the specified Unicode 3.2.0. This behavior would cause mismatches when processing domain names using IDNA 2003 (the "idna" codec) and the in_table_b2() function of the "stringprep" module. This only affects domain names containing characters that were not previously registered or had their Unicode attributes such as case-folding behavior updated since Unicode 3.2.0.

Severity

6 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-18 16:03 UTC

CWE

CWE-436 - Interpretation Conflict

Assigner

PSF CNA under the mitre root

CNA scorecard B 80/100 over 27 records in the last 180 days details

References

12 references

URL	Tags
https://github.com/python/cpython/pull/155293	patch
https://github.com/python/cpython/issues/155292	issue-tracking
https://mail.python.org/archives/list/security-an…	vendor-advisory
https://github.com/python/cpython/commit/7e109d08…	patch
https://github.com/python/cpython/commit/5181304b…	patch
https://github.com/python/cpython/commit/1e54caa0…	patch
https://github.com/python/cpython/commit/c016c253…	patch
https://github.com/python/cpython/commit/c28b121a…	patch
https://github.com/python/cpython/commit/c42790b3…	patch
https://github.com/python/cpython/commit/69f92eba…	patch
https://github.com/python/cpython/commit/d397a497…	patch
http://www.openwall.com/lists/oss-security/2026/08/18/2

Impacted products

1 product

Vendor	Product	Version
Python Software Foundation	CPython	Affected: 0 , < 3.10.22 (python) Affected: 3.11.0 , < 3.11.17 (python) Affected: 3.12.0 , < 3.12.15 (python) Affected: 3.13.0 , < 3.13.16 (python) Affected: 3.14.0 , < 3.14.8 (python) Affected: 3.15.0a1 , < 3.15.0rc2 (python)

Credits

Bitshift (https://github.com/TheShiftedBit) Seth Larson (https://github.com/sethmlarson) Stan Ulbrych (https://github.com/StanFromIreland) Marc-Andre Lemburg (https://github.com/malemburg) Petr Viktorin (https://github.com/encukou)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-17084",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-18T16:03:21.438212Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-436",
                "description": "CWE-436 Interpretation Conflict",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-18T16:03:44.732Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2026-08-18T17:08:22.725Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/08/18/2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "modules": [
            "stringprep",
            "idna"
          ],
          "product": "CPython",
          "repo": "https://github.com/python/cpython",
          "vendor": "Python Software Foundation",
          "versions": [
            {
              "lessThan": "3.10.22",
              "status": "affected",
              "version": "0",
              "versionType": "python"
            },
            {
              "lessThan": "3.11.17",
              "status": "affected",
              "version": "3.11.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.12.15",
              "status": "affected",
              "version": "3.12.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.13.16",
              "status": "affected",
              "version": "3.13.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.14.8",
              "status": "affected",
              "version": "3.14.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.15.0rc2",
              "status": "affected",
              "version": "3.15.0a1",
              "versionType": "python"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Bitshift (https://github.com/TheShiftedBit)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Seth Larson (https://github.com/sethmlarson)"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Stan Ulbrych (https://github.com/StanFromIreland)"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "Marc-Andre Lemburg (https://github.com/malemburg)"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "Petr Viktorin (https://github.com/encukou)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The \"stringprep\" module didn\u0027t process characters from RFC 3454 tables \nB.2 or B.3 correctly: the latest Unicode codepoint attributes were used \ninstead of the specified Unicode 3.2.0. This behavior would cause \nmismatches when processing domain names using IDNA 2003 (the \"idna\" \ncodec) and the in_table_b2() function of the \"stringprep\" module. This \nonly affects domain names containing characters that were not previously\n registered or had their Unicode attributes such as case-folding \nbehavior updated since Unicode 3.2.0."
            }
          ],
          "value": "The \"stringprep\" module didn\u0027t process characters from RFC 3454 tables \nB.2 or B.3 correctly: the latest Unicode codepoint attributes were used \ninstead of the specified Unicode 3.2.0. This behavior would cause \nmismatches when processing domain names using IDNA 2003 (the \"idna\" \ncodec) and the in_table_b2() function of the \"stringprep\" module. This \nonly affects domain names containing characters that were not previously\n registered or had their Unicode attributes such as case-folding \nbehavior updated since Unicode 3.2.0."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-02T00:39:09.384Z",
        "orgId": "28c92f92-d60d-412d-b760-e73465c3df22",
        "shortName": "PSF"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/pull/155293"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://github.com/python/cpython/issues/155292"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/EUHHTC6EV7HCLSUHP25C5VHSV4V2MUZN/"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/7e109d084d55e7eb25837a5f3b47ef9beee547bc"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/5181304bcec9cfc3c15311741c9154cdff2e3fd7"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/1e54caa096678a38afcabecabb1ff72400dd6bae"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/c016c2535b74227fddf2cf7334dbfead6c930214"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/c28b121a4f0b975937c8b5a1b4934bb361d84296"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/c42790b34f634051750e5da340d17c7da19e4784"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/69f92ebaec681e9149dfd70fd02d4ed52d2a6296"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/d397a4979cfc80a8cd6c73838aa10e9c8cf5ef72"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "stringprep.map_table_b2() deviates from RFC 3454 Table B.2",
      "x_generator": {
        "engine": "Vulnogram 0.6.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "28c92f92-d60d-412d-b760-e73465c3df22",
    "assignerShortName": "PSF",
    "cveId": "CVE-2026-17084",
    "datePublished": "2026-08-18T13:57:31.876Z",
    "dateReserved": "2026-07-24T14:36:15.943Z",
    "dateUpdated": "2026-10-02T00:39:09.384Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-19445 (GCVE-0-2026-19445)

Vulnerability from cvelistv5 – Published: 2026-09-30 16:16 – Updated: 2026-10-03 00:36

Title

Use-after-free of a server-side SSLContext when sni_callback switches contexts

Summary

A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its sni_callback assigns a different context to SSLSocket.context (the documented way to select a certificate per server name) and nothing else keeps the original ssl.SSLContext alive. Typical cases are servers that create an SSLContext per connection or replace it while connections are open; servers that wrap their listening socket with it are not affected. Mitigation: keep a reference to every SSLContext that sets sni_callback for the lifetime of the server. TLS clients are not affected.

Severity

9.2 (Critical)


                        
                          CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

CWE

CWE-416

Assigner

PSF CNA under the mitre root

CNA scorecard B 80/100 over 27 records in the last 180 days details

References

11 references

URL	Tags
https://github.com/python/cpython/pull/158504	patch
https://mail.python.org/archives/list/security-an…	vendor-advisory
https://github.com/python/cpython/issues/156293	issue-tracking
https://github.com/python/cpython/commit/34a53dce…	patch
https://github.com/python/cpython/commit/46133cd5…	patch
https://github.com/python/cpython/commit/63fab143…	patch
https://github.com/python/cpython/commit/cd7e51e7…	patch
https://github.com/python/cpython/commit/d8717ed0…	patch
https://github.com/python/cpython/commit/b12968ce…	patch
https://github.com/python/cpython/commit/ec44b5a3…	patch
http://www.openwall.com/lists/oss-security/2026/0…

Impacted products

1 product

Vendor	Product	Version
Python Software Foundation	CPython	Affected: 0 , < 3.10.22 (python) Affected: 3.11.0 , < 3.11.17 (python) Affected: 3.12.0 , < 3.12.15 (python) Affected: 3.13.0 , < 3.13.16 (python) Affected: 3.14.0 , < 3.14.8 (python) Affected: 3.15.0a1 , < 3.15.0rc3 (python)

Credits

Gregory P. Smith (https://github.com/gpshead) Seth Larson (https://github.com/sethmlarson) Bénédikt Tran (https://github.com/picnixz)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2026-09-30T18:09:39.735Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/09/30/17"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "modules": [
            "ssl"
          ],
          "product": "CPython",
          "repo": "https://github.com/python/cpython",
          "vendor": "Python Software Foundation",
          "versions": [
            {
              "lessThan": "3.10.22",
              "status": "affected",
              "version": "0",
              "versionType": "python"
            },
            {
              "lessThan": "3.11.17",
              "status": "affected",
              "version": "3.11.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.12.15",
              "status": "affected",
              "version": "3.12.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.13.16",
              "status": "affected",
              "version": "3.13.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.14.8",
              "status": "affected",
              "version": "3.14.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.15.0rc3",
              "status": "affected",
              "version": "3.15.0a1",
              "versionType": "python"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Gregory P. Smith (https://github.com/gpshead)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Seth Larson (https://github.com/sethmlarson)"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "B\u00e9n\u00e9dikt Tran (https://github.com/picnixz)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "type": "text/html",
              "value": "\u003cp\u003eA remote, unauthenticated TLS client can make a server crash or call\nthrough a freed pointer if its sni_callback assigns a different context to\nSSLSocket.context (the documented way to select a certificate per server\nname) and nothing else keeps the original ssl.SSLContext alive. Typical\ncases are servers that create an SSLContext per connection or replace it\nwhile connections are open; servers that wrap their listening socket with\nit are not affected.\u003c/p\u003e\n\u003cp\u003eMitigation: keep a reference to every SSLContext that sets sni_callback for\nthe lifetime of the server. TLS clients are not affected.\u003c/p\u003e"
            }
          ],
          "value": "A remote, unauthenticated TLS client can make a server crash or call\nthrough a freed pointer if its sni_callback assigns a different context to\nSSLSocket.context (the documented way to select a certificate per server\nname) and nothing else keeps the original ssl.SSLContext alive. Typical\ncases are servers that create an SSLContext per connection or replace it\nwhile connections are open; servers that wrap their listening socket with\nit are not affected.\n\n\nMitigation: keep a reference to every SSLContext that sets sni_callback for\nthe lifetime of the server. TLS clients are not affected."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "HIGH",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 9.2,
            "baseSeverity": "CRITICAL",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-03T00:36:46.398Z",
        "orgId": "28c92f92-d60d-412d-b760-e73465c3df22",
        "shortName": "PSF"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/pull/158504"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/QMQIUQB6WGGC3MI7I3WKQXOYOBDSPPS3/"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://github.com/python/cpython/issues/156293"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/34a53dce8174da2fceb12fe084a4def02a10053d"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/46133cd57d309652139ada74014aca7665ac552b"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/63fab143d94cafae71850831acfb52041ba44af7"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/cd7e51e7d4563866fbaa1e2521ae69b45daf3698"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/d8717ed01717a9641686e6e6f83f0ab8af235e2c"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/b12968cefe69ca1dcb8606c832ff73ee7dbf4ba8"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/ec44b5a3258cbda947d5e07242ee562ed05ef24b"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Use-after-free of a server-side SSLContext when sni_callback switches contexts",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "28c92f92-d60d-412d-b760-e73465c3df22",
    "assignerShortName": "PSF",
    "cveId": "CVE-2026-19445",
    "datePublished": "2026-09-30T16:16:04.923Z",
    "dateReserved": "2026-08-10T13:31:21.724Z",
    "dateUpdated": "2026-10-03T00:36:46.398Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-19553 (GCVE-0-2026-19553)

Vulnerability from cvelistv5 – Published: 2026-09-30 16:17 – Updated: 2026-10-16 18:33

Title

SSLContext.wrap_bio() missing validation of server_hostname parameter

Summary

ssl.SSLContext.wrap_bio() didn't require the server_hostname argument to not be None if ssl.SSLContext.check_hostname was set. Due to a missing parameter check in SSLObject, if the server_hostname argument isn't supplied then hostname verification would be silently skipped. This defect could lead to programs where certificate hostname verification *appeared* to be succeeding with SSLContext.check_hostname = True and no ValueError being raised due to misconfiguration. If the program passes a server_hostname value that isn't an empty string or None to any of these APIs then certificate hostname verification proceeds as expected and the program is not affected by this vulnerability. Mitigating this vulnerability doesn't require updating Python or applying the patch. To mitigate, pass a valid non-None and non-empty server_hostname value to SSLContext.wrap_bio(), asyncio.create_connection(), or asyncio.loop.start_tls() and certificate hostname verification will proceed as expected. Upgrading to the latest version of Python or applying the patch only changes the behavior from silently skipping hostname verification to raising a ValueError, similar to SSLContext.wrap_socket(), when server_hostname isn't supplied.

Severity

7.6 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-16 18:33 UTC

CWE

CWE-297

Assigner

PSF CNA under the mitre root

CNA scorecard B 80/100 over 27 records in the last 180 days details

References

11 references

URL	Tags
https://github.com/python/cpython/pull/158503	patch
https://github.com/python/cpython/issues/156793	issue-tracking
https://mail.python.org/archives/list/security-an…	vendor-advisory
https://github.com/python/cpython/commit/1697ea38…	patch
https://github.com/python/cpython/commit/64139014…	patch
https://github.com/python/cpython/commit/966bf426…	patch
https://github.com/python/cpython/commit/f4e43ba5…	patch
https://github.com/python/cpython/commit/869069d5…	patch
https://github.com/python/cpython/commit/5867d4e4…	patch
https://github.com/python/cpython/commit/bdebbf9b…	patch
http://www.openwall.com/lists/oss-security/2026/0…

Impacted products

1 product

Vendor	Product	Version
Python Software Foundation	CPython	Affected: 0 , < 3.10.22 (python) Affected: 3.11.0 , < 3.11.17 (python) Affected: 3.12.0 , < 3.12.15 (python) Affected: 3.13.0 , < 3.13.16 (python) Affected: 3.14.0 , < 3.14.8 (python) Affected: 3.15.0a1 , < 3.15.0rc3 (python)

Credits

devdanzin (https://github.com/devdanzin) Bhuvansh (https://github.com/BHUVANSH855) Bénédikt Tran (https://github.com/picnixz) Seth Larson (https://github.com/sethmlarson)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2026-09-30T18:09:40.939Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/09/30/16"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-19553",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-16T18:33:08.291056Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-16T18:33:12.475Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "modules": [
            "ssl"
          ],
          "product": "CPython",
          "repo": "https://github.com/python/cpython",
          "vendor": "Python Software Foundation",
          "versions": [
            {
              "lessThan": "3.10.22",
              "status": "affected",
              "version": "0",
              "versionType": "python"
            },
            {
              "lessThan": "3.11.17",
              "status": "affected",
              "version": "3.11.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.12.15",
              "status": "affected",
              "version": "3.12.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.13.16",
              "status": "affected",
              "version": "3.13.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.14.8",
              "status": "affected",
              "version": "3.14.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.15.0rc3",
              "status": "affected",
              "version": "3.15.0a1",
              "versionType": "python"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "devdanzin (https://github.com/devdanzin)"
        },
        {
          "lang": "en",
          "type": "analyst",
          "value": "Bhuvansh (https://github.com/BHUVANSH855)"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "B\u00e9n\u00e9dikt Tran (https://github.com/picnixz)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Seth Larson (https://github.com/sethmlarson)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "type": "text/html",
              "value": "\u003cp\u003e\u003ccode\u003essl.SSLContext.wrap_bio()\u003c/code\u003e didn\u0027t require the \u003ccode\u003eserver_hostname\u003c/code\u003e argument\nto not be \u003ccode\u003eNone\u003c/code\u003e if \u003ccode\u003essl.SSLContext.check_hostname\u003c/code\u003e was set. Due to a\nmissing parameter check in \u003ccode\u003eSSLObject\u003c/code\u003e, if the \u003ccode\u003eserver_hostname\u003c/code\u003e argument\nisn\u0027t supplied then hostname verification would be silently skipped.\u003c/p\u003e\n\u003cp\u003eThis defect could lead to programs where certificate hostname verification\n\u003cem\u003e*appeared*\u003c/em\u003e to be succeeding with \u003ccode\u003eSSLContext.check_hostname = True\u003c/code\u003e and no\n\u003ccode\u003eValueError\u003c/code\u003e being raised due to misconfiguration.\u003c/p\u003e\n\u003cp\u003eIf the program passes a \u003ccode\u003eserver_hostname\u003c/code\u003e value that isn\u0027t an empty string\nor \u003ccode\u003eNone\u003c/code\u003e to any of these APIs then certificate hostname verification\nproceeds as expected and the program is not affected by this vulnerability.\u003c/p\u003e\n\u003cp\u003eMitigating this vulnerability doesn\u0027t require updating Python or applying\nthe patch. To mitigate, pass a valid non-\u003ccode\u003eNone\u003c/code\u003e and non-empty\n\u003ccode\u003eserver_hostname\u003c/code\u003e value to \u003ccode\u003eSSLContext.wrap_bio()\u003c/code\u003e,\n\u003ccode\u003easyncio.create_connection()\u003c/code\u003e, or \u003ccode\u003easyncio.loop.start_tls()\u003c/code\u003e and\ncertificate hostname verification will proceed as expected. Upgrading to\nthe latest version of Python or applying the patch only changes the\nbehavior from silently skipping hostname verification to raising a\n\u003ccode\u003eValueError\u003c/code\u003e, similar to \u003ccode\u003eSSLContext.wrap_socket()\u003c/code\u003e, when \u003ccode\u003eserver_hostname\u003c/code\u003e\nisn\u0027t supplied.\u003c/p\u003e"
            }
          ],
          "value": "ssl.SSLContext.wrap_bio() didn\u0027t require the server_hostname argument\nto not be None if ssl.SSLContext.check_hostname was set. Due to a\nmissing parameter check in SSLObject, if the server_hostname argument\nisn\u0027t supplied then hostname verification would be silently skipped.\n\n\nThis defect could lead to programs where certificate hostname verification\n*appeared* to be succeeding with SSLContext.check_hostname = True and no\nValueError being raised due to misconfiguration.\n\n\nIf the program passes a server_hostname value that isn\u0027t an empty string\nor None to any of these APIs then certificate hostname verification\nproceeds as expected and the program is not affected by this vulnerability.\n\n\nMitigating this vulnerability doesn\u0027t require updating Python or applying\nthe patch. To mitigate, pass a valid non-None and non-empty\nserver_hostname value to SSLContext.wrap_bio(),\nasyncio.create_connection(), or asyncio.loop.start_tls() and\ncertificate hostname verification will proceed as expected. Upgrading to\nthe latest version of Python or applying the patch only changes the\nbehavior from silently skipping hostname verification to raising a\nValueError, similar to SSLContext.wrap_socket(), when server_hostname\nisn\u0027t supplied."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-297",
              "description": "CWE-297",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-03T00:36:35.156Z",
        "orgId": "28c92f92-d60d-412d-b760-e73465c3df22",
        "shortName": "PSF"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/pull/158503"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://github.com/python/cpython/issues/156793"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/QNZRG3YOAMTHDCMVCICXGY6YEFPY2VDL/"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/1697ea386c707142555d98a1263176bbbc014a96"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/641390146a16a38e6701923f4ee4f1940ae77082"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/966bf426d0b6c31c1b0a255ff14a17143a466ced"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/f4e43ba525187282f2011da0e6ffc0d2b08d8062"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/869069d52ce0efab2f8c38197e92cdaaa312f1ed"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/5867d4e4ae6d1062352baf6b497a4026e8578ccf"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/bdebbf9b366ec91e9cd9daa0b3510c9e84b60b80"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "SSLContext.wrap_bio() missing validation of server_hostname parameter",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "28c92f92-d60d-412d-b760-e73465c3df22",
    "assignerShortName": "PSF",
    "cveId": "CVE-2026-19553",
    "datePublished": "2026-09-30T16:17:39.368Z",
    "dateReserved": "2026-08-11T15:22:03.833Z",
    "dateUpdated": "2026-10-16T18:33:12.475Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-19672 (GCVE-0-2026-19672)

Vulnerability from cvelistv5 – Published: 2026-08-19 15:24 – Updated: 2026-08-27 19:41

Title

tarfile extraction filter bypass allows creation of directories outside the destination

Summary

The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name as given. Only empty directories are created outside the destination. Member contents are still extracted inside it. To return to the destination the member's name must contain the destination directory's own final component, so extraction into a secure randomised directory is not affected. This affects POSIX platforms only. On Windows, .. components are collapsed before the path reaches the filesystem, so the directories outside the destination are never created.

Severity

6.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-26 19:28 UTC

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Assigner

PSF CNA under the mitre root

CNA scorecard B 80/100 over 27 records in the last 180 days details

References

3 references

URL	Tags
https://github.com/python/cpython/pull/156000	patch
https://mail.python.org/archives/list/security-an…	vendor-advisory
http://www.openwall.com/lists/oss-security/2026/0…

Impacted products

1 product

Vendor	Product	Version
Python Software Foundation	CPython	Affected: 0 , < 3.16.0 (python)

Credits

Lohinth (https://github.com/l0h1nth) Stan Ulbrych (https://github.com/StanFromIreland) Petr Viktorin (https://github.com/encukou) Ethan Furman (https://github.com/ethanfurman)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2026-08-26T01:30:52.965Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/08/25/10"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-19672",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-26T19:28:09.797384Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-22",
                "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-27T19:41:14.871Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "modules": [
            "tarfile"
          ],
          "product": "CPython",
          "repo": "https://github.com/python/cpython",
          "vendor": "Python Software Foundation",
          "versions": [
            {
              "lessThan": "3.16.0",
              "status": "affected",
              "version": "0",
              "versionType": "python"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Lohinth (https://github.com/l0h1nth)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Stan Ulbrych (https://github.com/StanFromIreland)"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "Petr Viktorin (https://github.com/encukou)"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "Ethan Furman (https://github.com/ethanfurman)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "type": "text/html",
              "value": "The \u003cspan\u003etarfile\u003c/span\u003e module\u0027s \u003cspan\u003etar\u003c/span\u003e and \u003cspan\u003edata\u003c/span\u003e\n extraction filters created directories outside the destination for \nmembers whose name leaves the destination and returns to it, such as \u003cspan\u003e../evil/../dest/sub/file\u003c/span\u003e. The containment check used the resolved path, but intermediate directories were created from the name as given.\u003cbr\u003e\u003cbr\u003eOnly\n empty directories are created outside the destination. Member contents \nare still extracted inside it. To return to the destination the member\u0027s\n name must contain the destination directory\u0027s own final component, so \nextraction into a secure randomised directory is not affected.\u003cbr\u003e\u003cbr\u003eThis affects POSIX platforms only. On Windows, \u003cspan\u003e..\u003c/span\u003e components are collapsed before the path reaches the filesystem, so the directories outside the destination are never created."
            }
          ],
          "value": "The tarfile module\u0027s tar and data\n extraction filters created directories outside the destination for \nmembers whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name as given.\n\nOnly\n empty directories are created outside the destination. Member contents \nare still extracted inside it. To return to the destination the member\u0027s\n name must contain the destination directory\u0027s own final component, so \nextraction into a secure randomised directory is not affected.\n\nThis affects POSIX platforms only. On Windows, .. components are collapsed before the path reaches the filesystem, so the directories outside the destination are never created."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "LOW",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-19T15:24:08.616Z",
        "orgId": "28c92f92-d60d-412d-b760-e73465c3df22",
        "shortName": "PSF"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/pull/156000"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://github.com/python/cpython/pull/156000"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/J2WT2ALRWEXQJOB3C7Q2HYWUXP3CINWO/"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "tarfile extraction filter bypass allows creation of directories outside the destination"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "28c92f92-d60d-412d-b760-e73465c3df22",
    "assignerShortName": "PSF",
    "cveId": "CVE-2026-19672",
    "datePublished": "2026-08-19T15:24:08.616Z",
    "dateReserved": "2026-08-12T21:17:15.148Z",
    "dateUpdated": "2026-08-27T19:41:14.871Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-82049 (GCVE-0-2026-82049)

Vulnerability from cvelistv5 – Published: 2026-09-14 19:14 – Updated: 2026-10-11 00:39

Title

tarfile extraction filters allow file modification and content disclosure via hard link to symlink

Summary

In CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link. Such archives may cause extraction to modify the permissions or modification time of a file outside the destination directory, or expose the contents of that file within the extracted tree.

Severity

8.4 (High)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-15 00:00 UTC

CWE

CWE-59

Assigner

PSF CNA under the mitre root

CNA scorecard B 80/100 over 27 records in the last 180 days details

References

12 references

URL	Tags
https://github.com/python/cpython/commit/5a57248b…	patch
https://github.com/python/cpython/issues/157190	issue-tracking
https://github.com/python/cpython/pull/157191	patch
https://mail.python.org/archives/list/security-an…	vendor-advisory
https://github.com/python/cpython/commit/b38be2e6…	patch
https://github.com/python/cpython/commit/b8f23e30…	patch
https://github.com/python/cpython/commit/197663d6…	patch
https://github.com/python/cpython/commit/28f31548…	patch
https://github.com/python/cpython/commit/c66df4e7…	patch
https://github.com/python/cpython/commit/cc168983…	patch
https://github.com/python/cpython/commit/cccc7ec3…	patch
http://www.openwall.com/lists/oss-security/2026/0…

Impacted products

1 product

Vendor	Product	Version
Python Software Foundation	CPython	Affected: 0 , < 3.10.22 (python) Affected: 3.11.0 , < 3.11.17 (python) Affected: 3.12.0 , < 3.12.15 (python) Affected: 3.13.0 , < 3.13.16 (python) Affected: 3.14.0a1 , < 3.14.0b1 (python)

Credits

Jing Qian (https://github.com/Civitasmass) Stan Ulbrych (https://github.com/StanFromIreland) Petr Viktorin (https://github.com/encukou)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-82049",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-15T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-16T03:56:12.084Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2026-09-14T20:07:50.158Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/09/14/27"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "modules": [
            "tarfile"
          ],
          "product": "CPython",
          "repo": "https://github.com/python/cpython",
          "vendor": "Python Software Foundation",
          "versions": [
            {
              "lessThan": "3.10.22",
              "status": "affected",
              "version": "0",
              "versionType": "python"
            },
            {
              "lessThan": "3.11.17",
              "status": "affected",
              "version": "3.11.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.12.15",
              "status": "affected",
              "version": "3.12.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.13.16",
              "status": "affected",
              "version": "3.13.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.14.0b1",
              "status": "affected",
              "version": "3.14.0a1",
              "versionType": "python"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Jing Qian (https://github.com/Civitasmass)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Stan Ulbrych (https://github.com/StanFromIreland)"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "Petr Viktorin (https://github.com/encukou)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "type": "text/html",
              "value": "In CPython 3.13 and earlier, the \u003cspan\u003etarfile\u003c/span\u003e\u0026nbsp;module\u0027s \u003cspan\u003edata\u003c/span\u003e\u0026nbsp;and \u003cspan\u003etar\u003c/span\u003e extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link. Such archives may cause extraction to modify the permissions or modification time of a file outside the destination directory, or expose the contents of that file within the extracted tree."
            }
          ],
          "value": "In CPython 3.13 and earlier, the tarfile\u00a0module\u0027s data\u00a0and tar extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link. Such archives may cause extraction to modify the permissions or modification time of a file outside the destination directory, or expose the contents of that file within the extracted tree."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "CWE-59",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-11T00:39:42.376Z",
        "orgId": "28c92f92-d60d-412d-b760-e73465c3df22",
        "shortName": "PSF"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/5a57248b22ad3b9aafcaaadae2c304a1923daeca"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://github.com/python/cpython/issues/157190"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/pull/157191"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/EFJWGAZJA56AKSBR2WHMHQZO7RRLZPRH/"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/b38be2e6cf9d989075ab73412c63e003ebad4ff3"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/b8f23e307097552eaea2604383a12ab280520d0d"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/197663d63afed27f66e10e23c194e8a634e60913"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/28f315486b3da0352b9a1de1c3c97f4127ba4771"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/c66df4e70435d257fd488b35ea129c6f317433a8"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/cc1689830c6b9aaddded2fb9f2fe8116867e2c0e"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/cccc7ec30212dba2abef53ce4a2bed112ddb690c"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "tarfile extraction filters allow file modification and content disclosure via hard link to symlink",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "28c92f92-d60d-412d-b760-e73465c3df22",
    "assignerShortName": "PSF",
    "cveId": "CVE-2026-82049",
    "datePublished": "2026-09-14T19:14:03.873Z",
    "dateReserved": "2026-08-27T22:23:05.514Z",
    "dateUpdated": "2026-10-11T00:39:42.376Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

SUSE-SU-2026:24325-1

CVE-2026-15310 (GCVE-0-2026-15310)

CVE-2026-15806 (GCVE-0-2026-15806)

CVE-2026-17084 (GCVE-0-2026-17084)

CVE-2026-19445 (GCVE-0-2026-19445)

CVE-2026-19553 (GCVE-0-2026-19553)

CVE-2026-19672 (GCVE-0-2026-19672)

CVE-2026-82049 (GCVE-0-2026-82049)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour