{"grype_matches":[{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"25.3.2.20"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-32433","versionConstraint":"< 25.3.2.20||>= 26.0-rc1, < 26.2.5.11||>= 27.0-rc1, < 27.3.3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-32433","fix":{"state":"fixed","versions":["25.3.2.20","26.2.5.11","27.3.3"],"available":[{"date":"2025-04-18","kind":"first-observed","version":"25.3.2.20"},{"date":"2025-04-18","kind":"first-observed","version":"26.2.5.11"},{"date":"2025-04-18","kind":"first-observed","version":"27.3.3"}]},"cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":10,"impactScore":6.1,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-32433","cwe":"CWE-306","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-32433","date":"2026-11-12","epss":0.98924,"percentile":0.99928}],"risk":99.75,"urls":["https://github.com/erlang/otp/commit/0fcd9c56524b28615e8ece65fc0c3f66ef6e4c12","https://github.com/erlang/otp/commit/6eef04130afc8b0ccb63c9a0d8650209cf54892f","https://github.com/erlang/otp/commit/b1924d37fd83c070055beb115d5d6a6a9490b891","https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2","http://www.openwall.com/lists/oss-security/2025/04/16/2","http://www.openwall.com/lists/oss-security/2025/04/18/1","http://www.openwall.com/lists/oss-security/2025/04/18/2","http://www.openwall.com/lists/oss-security/2025/04/18/6","http://www.openwall.com/lists/oss-security/2025/04/19/1","https://lists.debian.org/debian-lts-announce/2025/04/msg00028.html","https://security.netapp.com/advisory/ntap-20250425-0001/","https://github.com/ProDefense/CVE-2025-32433/blob/main/CVE-2025-32433.py","https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-erlang-otp-ssh-xyZZy","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-32433"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-32433","description":"Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.","knownExploited":[{"cve":"CVE-2025-32433","cwes":["CWE-306"],"urls":["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-erlang-otp-ssh-xyZZy","https://nvd.nist.gov/vuln/detail/CVE-2025-32433"],"notes":"This vulnerability affects a common open-source project, third-party library, or a protocol used by different products. For more information, please see: https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2","dueDate":"2025-06-30","product":"Erlang/OTP","dateAdded":"2025-06-09","vendorProject":"Erlang","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"unknown"}]},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.6"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-7592","versionConstraint":"< 3.8.20||>= 3.10.0, < 3.10.15||>= 3.11.0, < 3.11.10||>= 3.12.0, < 3.12.6||>= 3.13.0a1, < 3.13.0rc2||>= 3.9.0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.6"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-7592","versionConstraint":"< 3.8.20||>= 3.10.0, < 3.10.15||>= 3.11.0, < 3.11.10||>= 3.12.0, < 3.12.6||>= 3.13.0a1, < 3.13.0rc2||>= 3.9.0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-7592","fix":{"state":"fixed","versions":["3.8.20","3.9.20","3.10.15","3.11.10","3.12.6","3.13.0rc2"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.8.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.10"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.6"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.0rc2"},{"date":"2026-09-22","kind":"first-observed","version":"3.9.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.8.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.15"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.10"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.6"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.0rc2"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.20"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-7592","cwe":"CWE-400","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2024-7592","cwe":"CWE-1333","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-7592","date":"2026-11-12","epss":0.02303,"percentile":0.83575}],"risk":1.72725,"urls":["https://github.com/python/cpython/commit/391e5626e3ee5af267b97e37abc7475732e67621","https://github.com/python/cpython/commit/44e458357fca05ca0ae2658d62c8c595b048b5ef","https://github.com/python/cpython/commit/a77ab24427a18bff817025adb03ca920dc3f1a06","https://github.com/python/cpython/commit/b2f11ca7667e4d57c71c1c88b255115f16042d9a","https://github.com/python/cpython/commit/d4ac921a4b081f7f996a5d2b101684b67ba0ed7f","https://github.com/python/cpython/commit/d662e2db2605515a767f88ad48096b8ac623c774","https://github.com/python/cpython/commit/dcc3eaef98cd94d6cb6cb0f44bd1c903d04f33b1","https://github.com/python/cpython/issues/123067","https://github.com/python/cpython/pull/123075","https://mail.python.org/archives/list/security-announce@python.org/thread/HXJAAAALNUNGCQUS2W7WR6GFIZIHFOOK/","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html","https://security.netapp.com/advisory/ntap-20241018-0006/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-7592","description":"There is a LOW severity vulnerability affecting CPython, specifically the\n'http.cookies' standard library module.\n\n\nWhen parsing cookies that contained backslashes for quoted characters in\nthe cookie value, the parser would use an algorithm with quadratic\ncomplexity, resulting in excess CPU resources being used while parsing the\nvalue."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.6"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-6232","versionConstraint":"< 3.8.20||>= 3.10.0, < 3.10.15||>= 3.11.0, < 3.11.10||>= 3.12.0, < 3.12.6||>= 3.13.0a1, < 3.13.0rc2||>= 3.9.0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.6"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-6232","versionConstraint":"< 3.8.20||>= 3.10.0, < 3.10.15||>= 3.11.0, < 3.11.10||>= 3.12.0, < 3.12.6||>= 3.13.0a1, < 3.13.0rc2||>= 3.9.0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-6232","fix":{"state":"fixed","versions":["3.8.20","3.9.20","3.10.15","3.11.10","3.12.6","3.13.0rc2"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.8.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.10"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.6"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.0rc2"},{"date":"2026-09-22","kind":"first-observed","version":"3.9.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.8.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.15"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.10"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.6"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.0rc2"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.20"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-6232","cwe":"CWE-1333","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2024-6232","cwe":"CWE-1333","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-6232","date":"2026-11-12","epss":0.02203,"percentile":0.82802}],"risk":1.6522500000000002,"urls":["https://github.com/python/cpython/commit/34ddb64d088dd7ccc321f6103d23153256caa5d4","https://github.com/python/cpython/commit/4eaf4891c12589e3c7bdad5f5b076e4c8392dd06","https://github.com/python/cpython/commit/743acbe872485dc18df4d8ab2dc7895187f062c4","https://github.com/python/cpython/commit/7d1f50cd92ff7e10a1c15a8f591dde8a6843a64d","https://github.com/python/cpython/commit/b4225ca91547aa97ed3aca391614afbb255bc877","https://github.com/python/cpython/commit/d449caf8a179e3b954268b3a88eb9170be3c8fbf","https://github.com/python/cpython/commit/ed3a49ea734ada357ff4442996fd4ae71d253373","https://github.com/python/cpython/issues/121285","https://github.com/python/cpython/pull/121286","https://mail.python.org/archives/list/security-announce@python.org/thread/JRYFTPRHZRTLMZLWQEUHZSJXNHM4ACTY/","http://www.openwall.com/lists/oss-security/2024/09/03/5","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html","https://security.netapp.com/advisory/ntap-20241018-0007/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-6232","description":"There is a MEDIUM severity vulnerability affecting CPython.\n\n\n\n\n\nRegular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.9"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-12254","versionConstraint":">= 3.12.0, < 3.12.9||>= 3.13.0, < 3.13.2||>= 3.14.0a1, < 3.14.0a3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.9"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-12254","versionConstraint":">= 3.12.0, < 3.12.9||>= 3.13.0, < 3.13.2||>= 3.14.0a1, < 3.14.0a3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-12254","fix":{"state":"fixed","versions":["3.12.9","3.13.2","3.14.0a3"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.12.9"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.2"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.0a3"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.9"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.2"},{"date":"2025-09-04","kind":"first-observed","version":"3.14.0a3"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-12254","cwe":"CWE-400","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2024-12254","cwe":"CWE-770","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2024-12254","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-12254","date":"2026-11-12","epss":0.01868,"percentile":0.79627}],"risk":1.45704,"urls":["https://github.com/python/cpython/commit/71e8429ac8e2adc10084ab5ec29a62f4b6671a82","https://github.com/python/cpython/commit/9aa0deb2eef2655a1029ba228527b152353135b5","https://github.com/python/cpython/commit/e991ac8f2037d78140e417cc9a9486223eb3e786","https://github.com/python/cpython/issues/127655","https://github.com/python/cpython/pull/127656","https://mail.python.org/archives/list/security-announce@python.org/thread/H4O3UBAOAQQXGT4RE3E4XQYR5XLROORB/","http://www.openwall.com/lists/oss-security/2024/12/06/1","https://security.netapp.com/advisory/ntap-20250404-0010/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-12254","description":"Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines()\n method would not \"pause\" writing and signal to the Protocol to drain \nthe buffer to the wire once the write buffer reached the \"high-water \nmark\". Because of this, Protocols would not periodically drain the write\n buffer potentially leading to memory exhaustion.\n\n\n\n\n\nThis\n vulnerability likely impacts a small number of users, you must be using\n Python 3.12.0 or later, on macOS or Linux, using the asyncio module \nwith protocols, and using .writelines() method which had new \nzero-copy-on-write behavior in Python 3.12.0 and later. If not all of \nthese factors are true then your usage of Python is unaffected."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.11"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-4517","versionConstraint":"< 3.9.23||>= 3.10.0, < 3.10.18||>= 3.11.0, < 3.11.13||>= 3.12.0, < 3.12.11||>= 3.13.0, < 3.13.4||>= 3.14.0a1, < 3.14.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.11"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-4517","versionConstraint":"< 3.9.23||>= 3.10.0, < 3.10.18||>= 3.11.0, < 3.11.13||>= 3.12.0, < 3.12.11||>= 3.13.0, < 3.13.4||>= 3.14.0a1, < 3.14.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-4517","fix":{"state":"fixed","versions":["3.9.23","3.10.18","3.11.13","3.12.11","3.13.4","3.14.0b3"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.9.23"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.18"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.11"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.4"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.0b3"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.23"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.18"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.13"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.11"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.4"},{"date":"2025-09-04","kind":"first-observed","version":"3.14.0b3"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","metrics":{"baseScore":9.4,"impactScore":5.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-4517","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-4517","date":"2026-11-12","epss":0.0148,"percentile":0.74276}],"risk":1.3616000000000001,"urls":["https://gist.github.com/sethmlarson/52398e33eff261329a0180ac1d54f42f","https://github.com/python/cpython/commit/19de092debb3d7e832e5672cc2f7b788d35951da","https://github.com/python/cpython/commit/28463dba112af719df1e8b0391c46787ad756dd9","https://github.com/python/cpython/commit/3612d8f51741b11f36f8fb0494d79086bac9390a","https://github.com/python/cpython/commit/4633f3f497b1ff70e4a35b6fe2c907cbe2d4cb2e","https://github.com/python/cpython/commit/9c1110ef6652687d7c55f590f909720eddde965a","https://github.com/python/cpython/commit/9e0ac76d96cf80b49055f6d6b9a6763fb9215c2a","https://github.com/python/cpython/commit/aa9eb5f757ceff461e6e996f12c89e5d9b583b01","https://github.com/python/cpython/commit/dd8f187d0746da151e0025c51680979ac5b4cfb1","https://github.com/python/cpython/issues/135034","https://github.com/python/cpython/pull/135037","https://mail.python.org/archives/list/security-announce@python.org/thread/MAXIJJCUUMCL7ATZNDVEGGHUMQMUUKLG/"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-4517","description":"Allows arbitrary filesystem writes outside the extraction directory during extraction with filter=\"data\".\n\n\nYou are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the filter= parameter with a value of \"data\" or \"tar\". See the tarfile  extraction filters documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter  for more information.\n\nNote that for Python 3.14 or later the default value of filter= changed from \"no filtering\" to `\"data\", so if you are relying on this new default behavior then your usage is also affected.\n\nNote that none of these vulnerabilities significantly affect the installation of source distributions which are tar archives as source distributions already allow arbitrary code execution during the build process. However when evaluating source distributions it's important to avoid installing source distributions with suspicious links."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.6"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2023-27043","versionConstraint":"< 3.8.20||>= 3.10.0a0, < 3.10.15||>= 3.11.0a0, < 3.11.10||>= 3.12.0a0, < 3.12.6||>= 3.13.0a0, < 3.13.0a1||>= 3.9.0a0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.6"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2023-27043","versionConstraint":"< 3.8.20||>= 3.10.0a0, < 3.10.15||>= 3.11.0a0, < 3.11.10||>= 3.12.0a0, < 3.12.6||>= 3.13.0a0, < 3.13.0a1||>= 3.9.0a0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2023-27043","fix":{"state":"fixed","versions":["3.8.20","3.9.20","3.10.15","3.11.10","3.12.6","3.13.0a1"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.8.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.10"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.6"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.0a1"},{"date":"2026-09-22","kind":"first-observed","version":"3.9.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.8.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.15"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.10"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.6"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.0a1"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.20"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-27043","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-27043","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2023-27043","cwe":"CWE-1286","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-27043","date":"2026-11-12","epss":0.02527,"percentile":0.85122}],"risk":1.3014050000000001,"urls":["http://python.org","https://github.com/python/cpython/issues/102988","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ZAEFSFZDNBNJPNOUTLG5COISGQDLMGV/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/75DTHSTNOFFNAWHXKMDXS7EJWC6W2FUC/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ARI7VDSNTQVXRQFM6IK5GSSLEIYV4VZH/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQAKLUJMHFGVBRDPEY57BJGNCE5UUPHW/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HXYVPEZUA3465AEFX5JVFVP7KIFZMF3N/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N6M5I6OQHJABNEYY555HUMMKX3Y4P25Z/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NEUNZSZ3CVSM2QWVYH3N2XGOCDWNYUA3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORLXS5YTKN65E2Q2NWKXMFS5FWQHRNZW/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2MAICLFDDO3QVNHTZ2OCERZQ34R2PIC/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2W2BZQIHMCKRI5FNBJERFYMS5PK6TAH/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PHVGRKQAGANCSGFI3QMYOCIMS4IFOZA5/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU6Y2S5CBN5BWCBDAJFTGIBZLK3S2G3J/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QDRDDPDN3VFIYXJIYEABY6USX5EU66AG/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDDC2VOX7OQC6OHMYTVD4HLFZIV6PYBC/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SINP4OVYNB2AGDYI2GS37EMW3H3F7XPZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SOX7BCN6YL7B3RFPEEXPIU5CMTEHJOKR/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZXC32CJ7TWDPJO6GY2XIQRO7JZX5FLP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWMBD4LNHWEXRI6YVFWJMTJQUL5WOFTS/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQVY5C5REXWJIORJIL2FIL3ALOEJEF72/","https://python-security.readthedocs.io/vuln/email-parseaddr-realname.html","https://security.netapp.com/advisory/ntap-20230601-0003/","http://seclists.org/fulldisclosure/2025/Apr/8","https://lists.debian.org/debian-lts-announce/2024/11/msg00024.html","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4ZAEFSFZDNBNJPNOUTLG5COISGQDLMGV/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/75DTHSTNOFFNAWHXKMDXS7EJWC6W2FUC/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ARI7VDSNTQVXRQFM6IK5GSSLEIYV4VZH/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BQAKLUJMHFGVBRDPEY57BJGNCE5UUPHW/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HXYVPEZUA3465AEFX5JVFVP7KIFZMF3N/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N6M5I6OQHJABNEYY555HUMMKX3Y4P25Z/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NEUNZSZ3CVSM2QWVYH3N2XGOCDWNYUA3/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ORLXS5YTKN65E2Q2NWKXMFS5FWQHRNZW/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P2MAICLFDDO3QVNHTZ2OCERZQ34R2PIC/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P2W2BZQIHMCKRI5FNBJERFYMS5PK6TAH/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PHVGRKQAGANCSGFI3QMYOCIMS4IFOZA5/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PU6Y2S5CBN5BWCBDAJFTGIBZLK3S2G3J/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QDRDDPDN3VFIYXJIYEABY6USX5EU66AG/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RDDC2VOX7OQC6OHMYTVD4HLFZIV6PYBC/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SINP4OVYNB2AGDYI2GS37EMW3H3F7XPZ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VZXC32CJ7TWDPJO6GY2XIQRO7JZX5FLP/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XWMBD4LNHWEXRI6YVFWJMTJQUL5WOFTS/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YQVY5C5REXWJIORJIL2FIL3ALOEJEF72/","https://cert-portal.siemens.com/productcert/html/ssa-202008.html","https://cert-portal.siemens.com/productcert/html/ssa-577017.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-27043","description":"The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is granted only after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be used for signup). This occurs in email/_parseaddr.py in recent versions of Python."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-13836","versionConstraint":"< 3.10.20||>= 3.11.0a1, < 3.11.15||>= 3.12.0a1, < 3.12.13||>= 3.13.0a1, < 3.13.11||>= 3.14.0a1, < 3.14.1||>= 3.15.0a1, < 3.15.0a3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-13836","versionConstraint":"< 3.10.20||>= 3.11.0a1, < 3.11.15||>= 3.12.0a1, < 3.12.13||>= 3.13.0a1, < 3.13.11||>= 3.14.0a1, < 3.14.1||>= 3.15.0a1, < 3.15.0a3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-13836","fix":{"state":"fixed","versions":["3.10.20","3.11.15","3.12.13","3.13.11","3.14.1","3.15.0a3"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.11"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.1"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0a3"},{"date":"2026-05-07","kind":"first-observed","version":"3.10.20"},{"date":"2026-05-07","kind":"first-observed","version":"3.11.15"},{"date":"2026-05-07","kind":"first-observed","version":"3.12.13"},{"date":"2025-12-10","kind":"first-observed","version":"3.13.11"},{"date":"2025-12-04","kind":"first-observed","version":"3.14.1"},{"date":"2026-04-15","kind":"first-observed","version":"3.15.0a3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-13836","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-13836","date":"2026-11-12","epss":0.01748,"percentile":0.78154}],"risk":1.25856,"urls":["https://github.com/python/cpython/commit/14b1fdb0a94b96f86fc7b86671ea9582b8676628","https://github.com/python/cpython/commit/289f29b0fe38baf2d7cb5854f4bb573cc34a6a15","https://github.com/python/cpython/commit/4ce27904b597c77d74dd93f2c912676021a99155","https://github.com/python/cpython/commit/5a4c4a033a4a54481be6870aa1896fad732555b5","https://github.com/python/cpython/commit/5dc101675fd22918facbbe0fecdc821502beaaf0","https://github.com/python/cpython/commit/afc40bdd3dd71f343fd9016f6d8eebbacbd6587c","https://github.com/python/cpython/issues/119451","https://github.com/python/cpython/pull/119454","https://mail.python.org/archives/list/security-announce@python.org/thread/OQ6G7MKRQIS3OAREC3HNG3D2DPOU34XO/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-13836","description":"When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length. This allows a malicious server to cause the client to read large amounts of data into memory, potentially causing OOM or other DoS."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.11"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-4138","versionConstraint":"< 3.9.23||>= 3.10.0, < 3.10.18||>= 3.11.0, < 3.11.13||>= 3.12.0, < 3.12.11||>= 3.13.0, < 3.13.4||>= 3.14.0a1, < 3.14.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.11"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-4138","versionConstraint":"< 3.9.23||>= 3.10.0, < 3.10.18||>= 3.11.0, < 3.11.13||>= 3.12.0, < 3.12.11||>= 3.13.0, < 3.13.4||>= 3.14.0a1, < 3.14.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-4138","fix":{"state":"fixed","versions":["3.9.23","3.10.18","3.11.13","3.12.11","3.13.4","3.14.0b3"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.9.23"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.18"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.11"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.4"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.0b3"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.23"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.18"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.13"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.11"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.4"},{"date":"2025-09-04","kind":"first-observed","version":"3.14.0b3"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-4138","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-4138","date":"2026-11-12","epss":0.01487,"percentile":0.74416}],"risk":1.1152499999999999,"urls":["https://gist.github.com/sethmlarson/52398e33eff261329a0180ac1d54f42f","https://github.com/python/cpython/commit/19de092debb3d7e832e5672cc2f7b788d35951da","https://github.com/python/cpython/commit/28463dba112af719df1e8b0391c46787ad756dd9","https://github.com/python/cpython/commit/3612d8f51741b11f36f8fb0494d79086bac9390a","https://github.com/python/cpython/commit/4633f3f497b1ff70e4a35b6fe2c907cbe2d4cb2e","https://github.com/python/cpython/commit/9c1110ef6652687d7c55f590f909720eddde965a","https://github.com/python/cpython/commit/9e0ac76d96cf80b49055f6d6b9a6763fb9215c2a","https://github.com/python/cpython/commit/aa9eb5f757ceff461e6e996f12c89e5d9b583b01","https://github.com/python/cpython/commit/dd8f187d0746da151e0025c51680979ac5b4cfb1","https://github.com/python/cpython/issues/135034","https://github.com/python/cpython/pull/135037","https://mail.python.org/archives/list/security-announce@python.org/thread/MAXIJJCUUMCL7ATZNDVEGGHUMQMUUKLG/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-4138","description":"Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata.\n\n\nYou are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the filter= parameter with a value of \"data\" or \"tar\". See the tarfile  extraction filters documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter  for more information.\n\nNote that for Python 3.14 or later the default value of filter= changed from \"no filtering\" to `\"data\", so if you are relying on this new default behavior then your usage is also affected.\n\nNote that none of these vulnerabilities significantly affect the installation of source distributions which are tar archives as source distributions already allow arbitrary code execution during the build process. However when evaluating source distributions it's important to avoid installing source distributions with suspicious links."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.6"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-8088","versionConstraint":"< 3.8.20||>= 3.10.0, < 3.10.15||>= 3.11.0, < 3.11.10||>= 3.12.0, < 3.12.6||>= 3.13.0a1, < 3.13.0rc2||>= 3.9.0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.6"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-8088","versionConstraint":"< 3.8.20||>= 3.10.0, < 3.10.15||>= 3.11.0, < 3.11.10||>= 3.12.0, < 3.12.6||>= 3.13.0a1, < 3.13.0rc2||>= 3.9.0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-8088","fix":{"state":"fixed","versions":["3.8.20","3.9.20","3.10.15","3.11.10","3.12.6","3.13.0rc2"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.8.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.10"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.6"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.0rc2"},{"date":"2026-09-22","kind":"first-observed","version":"3.9.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.8.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.15"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.10"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.6"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.0rc2"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.20"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:X/RE:L/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-8088","cwe":"CWE-835","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2024-8088","date":"2026-11-12","epss":0.01275,"percentile":0.7034}],"risk":1.0327499999999998,"urls":["https://github.com/python/cpython/commit/0aa1ee22ab6e204e9d3d0e9dd63ea648ed691ef1","https://github.com/python/cpython/commit/2231286d78d328c2f575e0b05b16fe447d1656d6","https://github.com/python/cpython/commit/795f2597a4be988e2bb19b69ff9958e981cb894e","https://github.com/python/cpython/commit/7bc367e464ce50b956dd232c1dfa1cad4e7fb814","https://github.com/python/cpython/commit/7e8883a3f04d308302361aeffc73e0e9837f19d4","https://github.com/python/cpython/commit/8c7348939d8a3ecd79d630075f6be1b0c5b41f64","https://github.com/python/cpython/commit/95b073bddefa6243effa08e131e297c0383e7f6a","https://github.com/python/cpython/commit/962055268ed4f2ca1d717bfc8b6385de50a23ab7","https://github.com/python/cpython/commit/9cd03263100ddb1657826cc4a71470786cab3932","https://github.com/python/cpython/commit/dcc5182f27c1500006a1ef78e10613bb45788dea","https://github.com/python/cpython/commit/e0264a61119d551658d9445af38323ba94fc16db","https://github.com/python/cpython/commit/fc0b8259e693caa8400fa8b6ac1e494e47ea7798","https://github.com/python/cpython/issues/122905","https://github.com/python/cpython/issues/123270","https://github.com/python/cpython/pull/122906","https://mail.python.org/archives/list/security-announce@python.org/thread/GNFCKVI4TCATKQLALJ5SN4L4CSPSMILU/","http://www.openwall.com/lists/oss-security/2024/08/22/1","http://www.openwall.com/lists/oss-security/2024/08/22/4","http://www.openwall.com/lists/oss-security/2024/08/23/1","http://www.openwall.com/lists/oss-security/2024/08/23/2","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html","https://security.netapp.com/advisory/ntap-20241011-0010/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-8088","description":"There is a HIGH severity vulnerability affecting the CPython \"zipfile\"\nmodule affecting \"zipfile.Path\". Note that the more common API \"zipfile.ZipFile\" class is unaffected.\n\n\n\n\n\nWhen iterating over names of entries in a zip archive (for example, methods\nof \"zipfile.Path\" like \"namelist()\", \"iterdir()\", etc)\nthe process can be put into an infinite loop with a maliciously crafted\nzip archive. This defect applies when reading only metadata or extracting\nthe contents of the zip archive. Programs that are not handling\nuser-controlled zip archives are not affected."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.9"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-0938","versionConstraint":"< 3.9.22||>= 3.10.0, < 3.10.17||>= 3.11.0, < 3.11.12||>= 3.12.0, < 3.12.9||>= 3.13.0, < 3.13.2||>= 3.14.0a1, < 3.14.0a5 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.9"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-0938","versionConstraint":"< 3.9.22||>= 3.10.0, < 3.10.17||>= 3.11.0, < 3.11.12||>= 3.12.0, < 3.12.9||>= 3.13.0, < 3.13.2||>= 3.14.0a1, < 3.14.0a5 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-0938","fix":{"state":"fixed","versions":["3.9.22","3.10.17","3.11.12","3.12.9","3.13.2","3.14.0a5"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.9.22"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.17"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.12"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.9"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.2"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.0a5"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.22"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.17"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.12"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.9"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.2"},{"date":"2025-09-04","kind":"first-observed","version":"3.14.0a5"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-0938","cwe":"CWE-20","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-0938","date":"2026-11-12","epss":0.01545,"percentile":0.75354}],"risk":0.872925,"urls":["https://github.com/python/cpython/commit/526617ed68cde460236c973e5d0a8bad4de896ba","https://github.com/python/cpython/commit/90e526ae67b172ed7c6c56e7edad36263b0f9403","https://github.com/python/cpython/commit/a7084f6075c9595ba60119ce8c62f1496f50c568","https://github.com/python/cpython/commit/b8b4b713c5f8ec0958c7ef8d29d6711889bc94ab","https://github.com/python/cpython/commit/d89a5f6a6e65511a5f6e0618c4c30a7aa5aba56a","https://github.com/python/cpython/commit/ff4e5c25666f63544071a6b075ae8b25c98b7a32","https://github.com/python/cpython/issues/105704","https://github.com/python/cpython/pull/129418","https://mail.python.org/archives/list/security-announce@python.org/thread/K4EUG6EKV6JYFIC24BASYOZS4M5XOQIB/","https://lists.debian.org/debian-lts-announce/2025/03/msg00013.html","https://security.netapp.com/advisory/ntap-20250314-0002/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-0938","description":"The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that included square brackets which isn't valid according to RFC 3986. Square brackets are only meant to be used as delimiters for specifying IPv6 and IPvFuture hosts in URLs. This could result in differential parsing across the Python URL parser and other specification-compliant URL parsers."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.4"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-4032","versionConstraint":"< 3.8.20||>= 3.10.0, < 3.10.15||>= 3.11.0, < 3.11.10||>= 3.12.0, < 3.12.4||>= 3.13.0a1, < 3.13.0a6||>= 3.9.0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.4"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-4032","versionConstraint":"< 3.8.20||>= 3.10.0, < 3.10.15||>= 3.11.0, < 3.11.10||>= 3.12.0, < 3.12.4||>= 3.13.0a1, < 3.13.0a6||>= 3.9.0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-4032","fix":{"state":"fixed","versions":["3.8.20","3.9.20","3.10.15","3.11.10","3.12.4","3.13.0a6"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.8.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.10"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.4"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.0a6"},{"date":"2026-09-22","kind":"first-observed","version":"3.9.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.8.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.15"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.10"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.4"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.0a6"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.20"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-4032","cwe":"CWE-697","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-4032","date":"2026-11-12","epss":0.01079,"percentile":0.65542}],"risk":0.8092499999999999,"urls":["http://www.openwall.com/lists/oss-security/2024/06/17/3","https://github.com/python/cpython/commit/22adf29da8d99933ffed8647d3e0726edd16f7f8","https://github.com/python/cpython/commit/40d75c2b7f5c67e254d0a025e0f2e2c7ada7f69f","https://github.com/python/cpython/commit/895f7e2ac23eff4743143beef0f0c5ac71ea27d3","https://github.com/python/cpython/commit/ba431579efdcbaed7a96f2ac4ea0775879a332fb","https://github.com/python/cpython/commit/c62c9e518b784fe44432a3f4fc265fb95b651906","https://github.com/python/cpython/commit/f86b17ac511e68192ba71f27e752321a3252cee3","https://github.com/python/cpython/issues/113171","https://github.com/python/cpython/pull/113179","https://mail.python.org/archives/list/security-announce@python.org/thread/NRUHDUS2IV2USIZM2CVMSFL6SCKU3RZA/","https://security.netapp.com/advisory/ntap-20240726-0004/","https://www.iana.org/assignments/iana-ipv4-special-registry/iana-ipv4-special-registry.xhtml","https://www.iana.org/assignments/iana-ipv6-special-registry/iana-ipv6-special-registry.xhtml","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-4032","description":"The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private”. This affected the is_private and is_global properties of the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and ipaddress.IPv6Network classes, where values wouldn’t be returned in accordance with the latest information from the IANA Special-Purpose Address Registries.\n\nCPython 3.12.4 and 3.13.0a6 contain updated information from these registries and thus have the intended behavior."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.17"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70399","versionConstraint":">= 17.0, < 27.3.4.17||>= 28.0, < 28.5.0.6||>= 29.0, < 29.0.6||>= 5.10, < 9.3.2.7||>= 9.4, < 9.6.2.3||>= 9.7, < 9.7.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70399","fix":{"state":"fixed","versions":["9.3.2.7","9.6.2.3","9.7.2","27.3.4.17","28.5.0.6","29.0.6"],"available":[{"date":"2026-09-04","kind":"first-observed","version":"27.3.4.17"},{"date":"2026-09-04","kind":"first-observed","version":"28.5.0.6"},{"date":"2026-09-04","kind":"first-observed","version":"29.0.6"},{"date":"2026-09-04","kind":"first-observed","version":"9.3.2.7"},{"date":"2026-09-04","kind":"first-observed","version":"9.6.2.3"},{"date":"2026-09-04","kind":"first-observed","version":"9.7.2"}]},"cvss":[{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70399","cwe":"CWE-770","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-70399","date":"2026-11-12","epss":0.00949,"percentile":0.61704}],"risk":0.76869,"urls":["https://cna.erlef.org/cves/CVE-2026-70399.html","https://github.com/erlang/otp/commit/6746dc4e1df5257ad8ac91cbbd167cb8b0274ce7","https://github.com/erlang/otp/commit/d94a94c96eb4cccbd6f7d7da5975f0c035b69612","https://github.com/erlang/otp/commit/d9674f32811cd5bb02b0d6656053b5ee226bc74c","https://github.com/erlang/otp/commit/e0050fc00c500a4fa9ba1f594603c787ff6d20b2","https://github.com/erlang/otp/security/advisories/GHSA-pwvh-c689-f8q5","https://osv.dev/vulnerability/EEF-CVE-2026-70399","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70399","description":"Allocation of Resources Without Limits or Throttling vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by opening and holding open a large number of connections. The max_clients option is documented to default to 150, and the inets hardening guide presents that limit as the first layer of denial-of-service defence, but a server that does not set it explicitly accepts an unlimited number of simultaneous connections. Establishing the connections is sufficient; no valid request and no authentication are required.\n\nThe accept gate in httpd_manager:handle_new_connection/4 reads the option with httpd_util:lookup/2, which returns undefined when the key is absent, rather than the three-argument form carrying the 150 default that the neighbouring get_ustate/2 uses. Erlang term ordering places every integer before every atom, so the Count =< Max guard holds for any connection count and the server never returns {reject, busy}. Each accepted connection occupies a worker process and a socket for as long as it is held, driving the node towards process, memory and file descriptor exhaustion. Servers that set max_clients explicitly are unaffected, because a configured value is applied as intended.\n\nThis issue affects OTP from OTP 17.0 before OTP 27.3.4.17, OTP 28.5.0.6, and OTP 29.0.6, corresponding to inets from 5.10 before 9.3.2.7, 9.6.2.3, and 9.7.2."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.17"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-69664","versionConstraint":">= 18.1.4, < 27.3.4.17||>= 28.0, < 28.5.0.6||>= 29.0, < 29.0.6||>= 6.0.3, < 9.3.2.7||>= 9.4, < 9.6.2.3||>= 9.7, < 9.7.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-69664","fix":{"state":"fixed","versions":["9.3.2.7","9.6.2.3","9.7.2","27.3.4.17","28.5.0.6","29.0.6"],"available":[{"date":"2026-09-04","kind":"first-observed","version":"27.3.4.17"},{"date":"2026-09-04","kind":"first-observed","version":"28.5.0.6"},{"date":"2026-09-04","kind":"first-observed","version":"29.0.6"},{"date":"2026-09-04","kind":"first-observed","version":"9.3.2.7"},{"date":"2026-09-04","kind":"first-observed","version":"9.6.2.3"},{"date":"2026-09-04","kind":"first-observed","version":"9.7.2"}]},"cvss":[{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-69664","cwe":"CWE-772","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-69664","date":"2026-11-12","epss":0.00949,"percentile":0.61703}],"risk":0.76869,"urls":["https://cna.erlef.org/cves/CVE-2026-69664.html","https://github.com/erlang/otp/commit/77acb473d8f056f6f534395f131c6e45693797f0","https://github.com/erlang/otp/commit/a3adf63078438c86527d704e23282b7721d8ca12","https://github.com/erlang/otp/commit/bd4e74348c6be8a49f060da6fd48d43f3a960292","https://github.com/erlang/otp/commit/df1a9ca4666e2fdfc44886bfaae76de086d803f6","https://github.com/erlang/otp/security/advisories/GHSA-mr35-8h7w-w3gq","https://osv.dev/vulnerability/EEF-CVE-2026-69664","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-69664","description":"Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending a request with a chunked body whose chunk-size line is not a hexadecimal number. The worker serving the connection is never released and no timeout reclaims it, so repeating the request across connections occupies every available worker and denies service to legitimate clients. No authentication is required and the default configuration is affected.\n\nThe chunk-size line must arrive in a write separate from the headers. When the body accompanies the headers, httpd_request_handler:handle_body/3 calls http_chunk:decode/3 inside a try ... catch throw:Error, so the {error, {chunk_size, _}} thrown by http_chunk:decode_size/4 is answered with 400 Bad Request. When the chunk size arrives later, the decoder is resumed through a bare catch in httpd_request_handler:handle_info/2, which converts the throw into a return value rather than raising it; the resulting error tuple is then treated as the next decoder continuation, the socket is re-armed, and the worker waits for data that never comes. The request timeout has already been cancelled at the point the headers were accepted, and the periodic byte-rate check is only armed when minimum_bytes_per_second is configured, which it is not by default.\n\nThis issue affects OTP from OTP 18.1.4 before OTP 27.3.4.17, OTP 28.5.0.6, and OTP 29.0.6, corresponding to inets from 6.0.3 before 9.3.2.7, 9.6.2.3, and 9.7.2."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.17"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66835","versionConstraint":">= 18.0, < 27.3.4.17||>= 28.0, < 28.5.0.6||>= 29.0, < 29.0.6||>= 6.0, < 9.3.2.7||>= 9.4, < 9.6.2.3||>= 9.7, < 9.7.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66835","fix":{"state":"fixed","versions":["9.3.2.7","9.6.2.3","9.7.2","27.3.4.17","28.5.0.6","29.0.6"],"available":[{"date":"2026-09-04","kind":"first-observed","version":"27.3.4.17"},{"date":"2026-09-04","kind":"first-observed","version":"28.5.0.6"},{"date":"2026-09-04","kind":"first-observed","version":"29.0.6"},{"date":"2026-09-04","kind":"first-observed","version":"9.3.2.7"},{"date":"2026-09-04","kind":"first-observed","version":"9.6.2.3"},{"date":"2026-09-04","kind":"first-observed","version":"9.7.2"}]},"cvss":[{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66835","cwe":"CWE-50","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-66835","date":"2026-11-12","epss":0.00973,"percentile":0.62512}],"risk":0.763805,"urls":["https://cna.erlef.org/cves/CVE-2026-66835.html","https://github.com/erlang/otp/commit/9641944a2efbf55bea760f8ff7ba777fe3a0961c","https://github.com/erlang/otp/commit/bac19eb3dbd96cc49b6d8cabc1c04248bf8c79f6","https://github.com/erlang/otp/commit/d8878dec0ececc2eab18e47bb18b472f224ca633","https://github.com/erlang/otp/security/advisories/GHSA-r4vv-vc2c-2fw6","https://osv.dev/vulnerability/EEF-CVE-2026-66835","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66835","description":"Path Equivalence vulnerability in Erlang/OTP inets httpd allows a remote unauthenticated attacker to read files inside a mod_auth protected directory by prefixing the request path with an extra slash.\n\nhttpd_request:validate_uri/1 normalises the request URI with uri_string:normalize/1, which performs RFC 3986 dot-segment removal but does not collapse empty path segments, so a doubled slash survives. mod_alias:real_name/3 concatenates the document root with that URI, and mod_auth:secret_path/3 then decides whether the result lies inside a protected directory block by running the configured directory path as an unanchored regular expression against it. The doubled slash breaks the contiguous substring the regex needs, so the request is treated as unprotected and no authentication challenge is issued, while mod_get opens the same path and the operating system collapses the doubled slash and returns the protected file. The same path mismatch also evades the per-path accounting in mod_security.\n\nThis issue affects OTP from OTP 17.0 before OTP 27.3.4.17, OTP 28.5.0.6, and OTP 29.0.6, corresponding to inets from 5.10 before 9.3.2.7, 9.6.2.3, and 9.7.2. Whether OTP before OTP 17.0, corresponding to inets before 5.10, is affected is unknown."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.11"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-4330","versionConstraint":"< 3.9.23||>= 3.10.0, < 3.10.18||>= 3.11.0, < 3.11.13||>= 3.12.0, < 3.12.11||>= 3.13.0, < 3.13.4||>= 3.14.0a1, < 3.14.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.11"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-4330","versionConstraint":"< 3.9.23||>= 3.10.0, < 3.10.18||>= 3.11.0, < 3.11.13||>= 3.12.0, < 3.12.11||>= 3.13.0, < 3.13.4||>= 3.14.0a1, < 3.14.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-4330","fix":{"state":"fixed","versions":["3.9.23","3.10.18","3.11.13","3.12.11","3.13.4","3.14.0b3"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.9.23"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.18"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.11"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.4"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.0b3"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.23"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.18"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.13"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.11"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.4"},{"date":"2025-09-04","kind":"first-observed","version":"3.14.0b3"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-4330","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-4330","date":"2026-11-12","epss":0.00971,"percentile":0.62386}],"risk":0.72825,"urls":["https://gist.github.com/sethmlarson/52398e33eff261329a0180ac1d54f42f","https://github.com/python/cpython/commit/19de092debb3d7e832e5672cc2f7b788d35951da","https://github.com/python/cpython/commit/28463dba112af719df1e8b0391c46787ad756dd9","https://github.com/python/cpython/commit/3612d8f51741b11f36f8fb0494d79086bac9390a","https://github.com/python/cpython/commit/4633f3f497b1ff70e4a35b6fe2c907cbe2d4cb2e","https://github.com/python/cpython/commit/9c1110ef6652687d7c55f590f909720eddde965a","https://github.com/python/cpython/commit/9e0ac76d96cf80b49055f6d6b9a6763fb9215c2a","https://github.com/python/cpython/commit/aa9eb5f757ceff461e6e996f12c89e5d9b583b01","https://github.com/python/cpython/commit/dd8f187d0746da151e0025c51680979ac5b4cfb1","https://github.com/python/cpython/issues/135034","https://github.com/python/cpython/pull/135037","https://mail.python.org/archives/list/security-announce@python.org/thread/MAXIJJCUUMCL7ATZNDVEGGHUMQMUUKLG/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-4330","description":"Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata.\n\n\nYou are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the filter= parameter with a value of \"data\" or \"tar\". See the tarfile  extraction filters documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter  for more information.\n\nNote that for Python 3.14 or later the default value of filter= changed from \"no filtering\" to `\"data\", so if you are relying on this new default behavior then your usage is also affected.\n\nNote that none of these vulnerabilities significantly affect the installation of source distributions which are tar archives as source distributions already allow arbitrary code execution during the build process. However when evaluating source distributions it's important to avoid installing source distributions with suspicious links."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.17"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-73270","versionConstraint":">= 18.0, < 27.3.4.17||>= 28.0, < 28.5.0.6||>= 29.0, < 29.0.6||>= 6.0, < 9.3.2.7||>= 9.4, < 9.6.2.3||>= 9.7, < 9.7.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-73270","fix":{"state":"fixed","versions":["9.3.2.7","9.6.2.3","9.7.2","27.3.4.17","28.5.0.6","29.0.6"],"available":[{"date":"2026-09-04","kind":"first-observed","version":"27.3.4.17"},{"date":"2026-09-04","kind":"first-observed","version":"28.5.0.6"},{"date":"2026-09-04","kind":"first-observed","version":"29.0.6"},{"date":"2026-09-04","kind":"first-observed","version":"9.3.2.7"},{"date":"2026-09-04","kind":"first-observed","version":"9.6.2.3"},{"date":"2026-09-04","kind":"first-observed","version":"9.7.2"}]},"cvss":[{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-73270","cwe":"CWE-178","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-73270","date":"2026-11-12","epss":0.00927,"percentile":0.60985}],"risk":0.727695,"urls":["https://cna.erlef.org/cves/CVE-2026-73270.html","https://github.com/erlang/otp/commit/9641944a2efbf55bea760f8ff7ba777fe3a0961c","https://github.com/erlang/otp/commit/bac19eb3dbd96cc49b6d8cabc1c04248bf8c79f6","https://github.com/erlang/otp/commit/d8878dec0ececc2eab18e47bb18b472f224ca633","https://github.com/erlang/otp/security/advisories/GHSA-mh78-93cr-jx8f","https://osv.dev/vulnerability/EEF-CVE-2026-73270","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-73270","description":"Improper Handling of Case Sensitivity vulnerability in Erlang/OTP inets httpd allows a remote unauthenticated attacker to read files inside a mod_auth protected directory by requesting them with different casing, on deployments whose filesystem is case-insensitive.\n\nmod_auth:secret_path/3 decides whether a resolved filesystem path lies inside a protected directory block by running the configured directory path through re:run/3 without the caseless option. A request for /secret/file against a directory configured as /Secret therefore does not match, so the request is treated as unprotected and no authentication challenge is issued, while the filesystem resolves the differently cased path to the same file and mod_get serves it. Deployments on case-sensitive filesystems are unaffected, because there the filesystem itself rejects the mismatched casing.\n\nThis issue affects OTP from OTP 17.0 before OTP 27.3.4.17, OTP 28.5.0.6, and OTP 29.0.6, corresponding to inets from 5.10 before 9.3.2.7, 9.6.2.3, and 9.7.2. Whether OTP before OTP 17.0, corresponding to inets before 5.10, is affected is unknown."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.17"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-75538","versionConstraint":">= 16.0, < 16.4.0.6||>= 17.0, < 17.0.6||>= 17.0, < 27.3.4.17||>= 28.0, < 28.5.0.6||>= 29.0, < 29.0.6||>= 6.0, < 15.2.7.13 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-75538","fix":{"state":"fixed","versions":["15.2.7.13","16.4.0.6","17.0.6","27.3.4.17","28.5.0.6","29.0.6"],"available":[{"date":"2026-09-04","kind":"first-observed","version":"16.4.0.6"},{"date":"2026-09-04","kind":"first-observed","version":"17.0.6"},{"date":"2026-09-04","kind":"first-observed","version":"27.3.4.17"},{"date":"2026-09-04","kind":"first-observed","version":"28.5.0.6"},{"date":"2026-09-04","kind":"first-observed","version":"29.0.6"},{"date":"2026-09-04","kind":"first-observed","version":"15.2.7.13"}]},"cvss":[{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75538","cwe":"CWE-122","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"},{"cve":"CVE-2026-75538","cwe":"CWE-190","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-75538","date":"2026-11-12","epss":0.00854,"percentile":0.5878}],"risk":0.6703899999999999,"urls":["https://cna.erlef.org/cves/CVE-2026-75538.html","https://github.com/erlang/otp/commit/08e8efdba8500d2d6f54c6b1de1492b228017c9b","https://github.com/erlang/otp/security/advisories/GHSA-8m6r-2pj2-25pm","https://osv.dev/vulnerability/EEF-CVE-2026-75538","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-75538","description":"An attacker that connects to an open Erlang TCP port that uses the inet driver with {packet,4} mode can use a signed overflow in an incorrect packet length calculation to overflow the receive buffer into the VM allocator area and beyond up to about 2 GB.\n\nThis would easily trash the allocated block's allocator metadata footer, and the next block, if any, and most likely cause the BEAM VM to crash. Utilizing this with precision enough to achieve Remote Code Execution would be extremely unfeasible.\n\nThis issue affects OTP from OTP 17.0 before OTP 27.3.4.17, OTP 28.5.0.6, and OTP 29.0.6, corresponding to erts from 6.0 before 15.2.7.13, 16.4.0.6, and 17.0.6. Whether OTP before OTP 17.0, corresponding to erts before 6.0, is affected is unknown."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-59250","versionConstraint":">= 17, < 27.3.4.15||>= 28, < 28.5.0.4||>= 29, < 29.0.4 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-59250","fix":{"state":"fixed","versions":["27.3.4.15","28.5.0.4","29.0.4"],"available":[{"date":"2026-08-21","kind":"first-observed","version":"27.3.4.15"},{"date":"2026-08-21","kind":"first-observed","version":"28.5.0.4"},{"date":"2026-08-21","kind":"first-observed","version":"29.0.4"}]},"cvss":[{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59250","cwe":"CWE-120","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"},{"cve":"CVE-2026-59250","cwe":"CWE-787","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-59250","date":"2026-11-12","epss":0.00779,"percentile":0.56397}],"risk":0.61541,"urls":["https://cna.erlef.org/cves/CVE-2026-59250.html","https://github.com/erlang/otp/commit/8704c8f550a11ed5f825e3c011ecb03565b79c4f","https://github.com/erlang/otp/security/advisories/GHSA-7xgh-gmgf-q2g7","https://osv.dev/vulnerability/EEF-CVE-2026-59250","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-59250","description":"Classic buffer overflow in the Erlang/OTP megaco flex scanner C driver allows a remote unauthenticated attacker to corrupt the driver's memory (and potentially achieve remote code execution or a denial-of-service crash) by sending a single text-encoded H.248/Megaco message containing an oversized property parm name.\n\nWhen tokenizing a Local/Remote descriptor, mfs_load_property_groups extracts the attacker-controlled property name (bounded only by the message length) and, when no value follows, formats it into a fixed 512-byte error_msg field of the MfsErlDrvData struct using an unchecked sprintf call. Names longer than roughly 452 bytes overflow into the immediately following struct fields (text_buf, text_ptr, term_spec, term_spec_size, term_spec_index), overwriting live pointers and counters with attacker-chosen bytes. Subsequent scanner code writes and frees through the corrupted pointers, producing arbitrary write and arbitrary free primitives inside the BEAM VM process, which can be leveraged for remote code execution. On builds compiled with _FORTIFY_SOURCE the overflow is detected at runtime and terminates the process with SIGABRT, resulting in denial of service.\n\nThe overflow occurs in the flex scanner before any grammar or Megaco-level authentication processing, so exploitation requires only network reachability to the megaco transport port on a node configured with {scanner, flex}.\n\nThis vulnerability is associated with program files lib/megaco/src/flex/megaco_flex_scanner_drv.flex.src and program routines mfs_load_property_groups.\n\nThis issue affects OTP from OTP 17.0 before OTP 27.3.4.15, from OTP 28.0 before OTP 28.5.0.4, and from OTP 29.0 before OTP 29.0.4, corresponding to megaco from 3.17.1 before 4.7.2.2, from 4.8 before 4.8.3.1, and from 4.9 before 4.9.1. Whether OTP before OTP 17.0, corresponding to megaco before 3.17.1, is affected is unknown."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.8"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-50602","versionConstraint":"< 3.9.21||>= 3.10, < 3.10.16||>= 3.11, < 3.11.11||>= 3.12, < 3.12.8||>= 3.13, < 3.13.1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.8"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-50602","versionConstraint":"< 3.9.21||>= 3.10, < 3.10.16||>= 3.11, < 3.11.11||>= 3.12, < 3.12.8||>= 3.13, < 3.13.1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-50602","fix":{"state":"fixed","versions":["3.9.21","3.10.16","3.11.11","3.12.8","3.13.1"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.9.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.11"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.8"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.1"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.21"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.16"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.11"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.8"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-50602","cwe":"CWE-754","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-50602","date":"2026-11-12","epss":0.01117,"percentile":0.66549}],"risk":0.608765,"urls":["https://github.com/libexpat/libexpat/pull/915","https://lists.debian.org/debian-lts-announce/2025/04/msg00040.html","https://security.netapp.com/advisory/ntap-20250404-0008/","https://cert-portal.siemens.com/productcert/html/ssa-202008.html","https://cert-portal.siemens.com/productcert/html/ssa-355557.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://docs.python.org/release/3.10.16/whatsnew/changelog.html","https://docs.python.org/release/3.11.11/whatsnew/changelog.html#python-3-11-11","https://docs.python.org/release/3.12.8/whatsnew/changelog.html#python-3-12-8","https://docs.python.org/release/3.13.1/whatsnew/changelog.html#python-3-13-1","https://docs.python.org/release/3.9.21/whatsnew/changelog.html","https://github.com/python/cpython/issues/126623"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-50602","description":"An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.5"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-6923","versionConstraint":"< 3.8.20||>= 3.10.0, < 3.10.15||>= 3.11.0, < 3.11.10||>= 3.12.0, < 3.12.5||>= 3.13.0a1, < 3.13.0rc2||>= 3.9.0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.5"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-6923","versionConstraint":"< 3.8.20||>= 3.10.0, < 3.10.15||>= 3.11.0, < 3.11.10||>= 3.12.0, < 3.12.5||>= 3.13.0a1, < 3.13.0rc2||>= 3.9.0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-6923","fix":{"state":"fixed","versions":["3.8.20","3.9.20","3.10.15","3.11.10","3.12.5","3.13.0rc2"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.8.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.10"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.5"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.0rc2"},{"date":"2026-09-22","kind":"first-observed","version":"3.9.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.8.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.15"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.10"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.5"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.0rc2"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.20"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.5,"impactScore":3.4,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-6923","cwe":"CWE-94","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-6923","date":"2026-11-12","epss":0.011,"percentile":0.66132}],"risk":0.5775,"urls":["https://github.com/python/cpython/commit/06f28dc236708f72871c64d4bc4b4ea144c50147","https://github.com/python/cpython/commit/097633981879b3c9de9a1dd120d3aa585ecc2384","https://github.com/python/cpython/commit/4766d1200fdf8b6728137aa2927a297e224d5fa7","https://github.com/python/cpython/commit/4aaa4259b5a6e664b7316a4d60bdec7ee0f124d0","https://github.com/python/cpython/commit/b158a76ce094897c870fb6b3de62887b7ccc33f1","https://github.com/python/cpython/commit/f7be505d137a22528cb0fc004422c0081d5d90e6","https://github.com/python/cpython/commit/f7c0f09e69e950cf3c5ada9dbde93898eb975533","https://github.com/python/cpython/issues/121650","https://github.com/python/cpython/pull/122233","https://mail.python.org/archives/list/security-announce@python.org/thread/QH3BUOE2DYQBWP7NAQ7UNHPPOELKISRW/","http://www.openwall.com/lists/oss-security/2024/08/01/3","http://www.openwall.com/lists/oss-security/2024/08/02/2","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html","https://lists.debian.org/debian-lts-announce/2025/01/msg00005.html","https://security.netapp.com/advisory/ntap-20240926-0003/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-6923","description":"There is a MEDIUM severity vulnerability affecting CPython.\n\nThe \nemail module didn’t properly quote newlines for email headers when \nserializing an email message allowing for header injection when an email\n is serialized."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-11940","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.15||>= 3.14.0, < 3.14.7||>= 3.15.0a1, < 3.15.0b4 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-11940","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.15||>= 3.14.0, < 3.14.7||>= 3.15.0a1, < 3.15.0b4 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-11940","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.15","3.14.7","3.15.0b4"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.7"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0b4"},{"date":"2026-08-19","kind":"first-observed","version":"3.10.21"},{"date":"2026-08-19","kind":"first-observed","version":"3.11.16"},{"date":"2026-08-19","kind":"first-observed","version":"3.12.14"},{"date":"2026-08-12","kind":"first-observed","version":"3.13.15"},{"date":"2026-08-12","kind":"first-observed","version":"3.14.7"},{"date":"2026-07-30","kind":"first-observed","version":"3.15.0b4"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-11940","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11940","cwe":"CWE-59","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-11940","date":"2026-11-12","epss":0.0075,"percentile":0.55462}],"risk":0.57375,"urls":["https://github.com/python/cpython/commit/0f852b3f07dd8e71e40326a51c02afbf16a42cc5","https://github.com/python/cpython/commit/27dd970bf6b17ebca7c8ed486a40ab043ed7af8f","https://github.com/python/cpython/commit/672825e2f36a57e173959b0d9d409d4560dab8df","https://github.com/python/cpython/commit/771d12dda5140313db0ac550292987975651bbde","https://github.com/python/cpython/commit/79c06bd5c6afa3c440d50faf7ee1b147c8832b4c","https://github.com/python/cpython/commit/be13e86f6b9788a6f4d0419dffef72cbae5865c9","https://github.com/python/cpython/commit/e5fdbd8d5aa923bd9111b112ea73bd6ec7c47877","https://github.com/python/cpython/issues/151558","https://github.com/python/cpython/pull/151559","https://mail.python.org/archives/list/security-announce@python.org/thread/LD6QIISNQFQYOIEPJNEUIPV7S3V76FZH/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-11940","description":"tarfile.extractall() with the 'data' or 'tar'\n filter could be bypassed by a crafted archive where a hardlink \nreferences a symlink stored at a deeper name than the hardlink itself.  \nThe extraction fallback validated the symlink at it's archived location \nbut recreated it at the hardlink's shallower\npath, letting a relative\n target the filter judged contained escape the destination directory.  \nThis allowed a malicious tar archive to create a symlink pointing \noutside the destination, enabling out-of-destination file reads or \nwrites. This was an incomplete fix of CVE-2025-4330."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.12"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-8194","versionConstraint":"< 3.9.24||>= 3.10.0, < 3.10.19||>= 3.11.0, < 3.11.14||>= 3.12.0, < 3.12.12||>= 3.13.0, < 3.13.6||>= 3.14.0a1, < 3.14.0rc2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.12"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-8194","versionConstraint":"< 3.9.24||>= 3.10.0, < 3.10.19||>= 3.11.0, < 3.11.14||>= 3.12.0, < 3.12.12||>= 3.13.0, < 3.13.6||>= 3.14.0a1, < 3.14.0rc2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-8194","fix":{"state":"fixed","versions":["3.9.24","3.10.19","3.11.14","3.12.12","3.13.6","3.14.0rc2"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.9.24"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.19"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.12"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.6"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.0rc2"},{"date":"2025-10-10","kind":"first-observed","version":"3.9.24"},{"date":"2025-10-10","kind":"first-observed","version":"3.10.19"},{"date":"2025-10-10","kind":"first-observed","version":"3.11.14"},{"date":"2025-10-10","kind":"first-observed","version":"3.12.12"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.6"},{"date":"2025-09-04","kind":"first-observed","version":"3.14.0rc2"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-8194","cwe":"CWE-835","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-8194","date":"2026-11-12","epss":0.00761,"percentile":0.5581}],"risk":0.57075,"urls":["https://gist.github.com/sethmlarson/1716ac5b82b73dbcbf23ad2eff8b33e1","https://github.com/python/cpython/commit/57f5981d6260ed21266e0c26951b8564cc252bc2","https://github.com/python/cpython/commit/7040aa54f14676938970e10c5f74ea93cd56aa38","https://github.com/python/cpython/commit/73f03e4808206f71eb6b92c579505a220942ef19","https://github.com/python/cpython/commit/b4ec17488eedec36d3c05fec127df71c0071f6cb","https://github.com/python/cpython/commit/c9d9f78feb1467e73fd29356c040bde1c104f29f","https://github.com/python/cpython/commit/cdae923ffe187d6ef916c0f665a31249619193fe","https://github.com/python/cpython/commit/fbc2a0ca9ac8aff6887f8ddf79b87b4510277227","https://github.com/python/cpython/issues/130577","https://github.com/python/cpython/pull/137027","https://mail.python.org/archives/list/security-announce@python.org/thread/ZULLF3IZ726XP5EY7XJ7YIN3K5MDYR2D/","http://www.openwall.com/lists/oss-security/2025/07/28/1","http://www.openwall.com/lists/oss-security/2025/07/28/2","https://github.com/python/cpython/pull/137169","https://github.com/python/cpython/pull/137170","https://github.com/python/cpython/pull/137171","https://github.com/python/cpython/pull/137172","https://github.com/python/cpython/pull/137644","https://github.com/python/cpython/pull/137645"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-8194","description":"There is a defect in the CPython “tarfile” module affecting the “TarFile” extraction and entry enumeration APIs. The tar implementation would process tar archives with negative offsets without error, resulting in an infinite loop and deadlock during the parsing of maliciously crafted tar archives. \n\nThis vulnerability can be mitigated by including the following patch after importing the “tarfile” module:  https://gist.github.com/sethmlarson/1716ac5b82b73dbcbf23ad2eff8b33e1"},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-11972","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.15||>= 3.14.0, < 3.14.7||>= 3.15.0a1, < 3.15.0b4 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-11972","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.15||>= 3.14.0, < 3.14.7||>= 3.15.0a1, < 3.15.0b4 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-11972","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.15","3.14.7","3.15.0b4"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.7"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0b4"},{"date":"2026-08-19","kind":"first-observed","version":"3.10.21"},{"date":"2026-08-19","kind":"first-observed","version":"3.11.16"},{"date":"2026-08-19","kind":"first-observed","version":"3.12.14"},{"date":"2026-08-12","kind":"first-observed","version":"3.13.15"},{"date":"2026-08-12","kind":"first-observed","version":"3.14.7"},{"date":"2026-07-30","kind":"first-observed","version":"3.15.0b4"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-11972","cwe":"CWE-252","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11972","cwe":"CWE-606","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11972","cwe":"CWE-770","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-11972","date":"2026-11-12","epss":0.00715,"percentile":0.54233}],"risk":0.561275,"urls":["https://github.com/python/cpython/commit/3f031d431f80668e14f3bc066bbf4369cd9281b9","https://github.com/python/cpython/commit/4ce6bf7c8aa7725828a38981c306f214c1f29365","https://github.com/python/cpython/commit/7f0dc59c9a70f8f3b4da33d7c4a2ba552a7acc21","https://github.com/python/cpython/commit/e86666c9dd256d52d0fbef6feb1ea4a51768fdec","https://github.com/python/cpython/commit/eb63c0f94dfcbea7fda8eab6213818e134d67192","https://github.com/python/cpython/commit/f50bf13566189c8d0ce5a814f33eff3d89951896","https://github.com/python/cpython/commit/f5e2776ff0383a902c12acf2b703e7e951fc8438","https://github.com/python/cpython/issues/151981","https://github.com/python/cpython/pull/151982","https://mail.python.org/archives/list/security-announce@python.org/thread/AXPSKKTSRKXTTJULW3XSIC74WZNAAPPB/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-11972","description":"When using the \"tarfile\" module with a file opened in \"streaming mode\" (mode=\"r|\") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-4224","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.13||>= 3.14.0, < 3.14.4||>= 3.15.0a1, < 3.15.0a8 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-4224","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.13||>= 3.14.0, < 3.14.4||>= 3.15.0a1, < 3.15.0a8 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-4224","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.13","3.14.4","3.15.0a8"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.4"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0a8"},{"date":"2026-09-15","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-15","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-15","kind":"first-observed","version":"3.12.14"},{"date":"2026-04-10","kind":"first-observed","version":"3.13.13"},{"date":"2026-04-10","kind":"first-observed","version":"3.14.4"},{"date":"2026-04-10","kind":"first-observed","version":"3.15.0a8"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4224","cwe":"CWE-674","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-4224","date":"2026-11-12","epss":0.00767,"percentile":0.56008}],"risk":0.5464875,"urls":["https://github.com/python/cpython/commit/196edfb06a7458377d4d0f4b3cd41724c1f3bd4a","https://github.com/python/cpython/commit/24ce88b285f56ee11626cf5e472af3cd8cc7c621","https://github.com/python/cpython/commit/642865ddf4b232da1f3b1f7abcfa3254c4bfe785","https://github.com/python/cpython/commit/af856a7177326ac25d9f66cc6dd28b554d914fee","https://github.com/python/cpython/commit/e0a8a6da90597a924b300debe045cdb4628ee1f3","https://github.com/python/cpython/commit/eb0e8be3a7e11b87d198a2c3af1ed0eccf532768","https://github.com/python/cpython/issues/145986","https://github.com/python/cpython/pull/145987","https://mail.python.org/archives/list/security-announce@python.org/thread/5M7CGUW3XBRY7II4DK43KF7NQQ3TPZ6R/","http://www.openwall.com/lists/oss-security/2026/03/16/4"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4224","description":"When an Expat parser with a registered ElementDeclHandler parses an inline\ndocument type definition containing a deeply nested content model a C stack\noverflow occurs."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.17"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-71380","versionConstraint":">= 17.0, < 27.3.4.17||>= 28.0, < 28.5.0.6||>= 29.0, < 29.0.6||>= 6.0, < 9.3.2.7||>= 9.4, < 9.6.2.3||>= 9.7, < 9.7.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-71380","fix":{"state":"fixed","versions":["9.3.2.7","9.6.2.3","9.7.2","27.3.4.17","28.5.0.6","29.0.6"],"available":[{"date":"2026-09-04","kind":"first-observed","version":"27.3.4.17"},{"date":"2026-09-04","kind":"first-observed","version":"28.5.0.6"},{"date":"2026-09-04","kind":"first-observed","version":"29.0.6"},{"date":"2026-09-04","kind":"first-observed","version":"9.3.2.7"},{"date":"2026-09-04","kind":"first-observed","version":"9.6.2.3"},{"date":"2026-09-04","kind":"first-observed","version":"9.7.2"}]},"cvss":[{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-71380","cwe":"CWE-772","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-71380","date":"2026-11-12","epss":0.00673,"percentile":0.52616}],"risk":0.5451299999999999,"urls":["https://cna.erlef.org/cves/CVE-2026-71380.html","https://github.com/erlang/otp/commit/81b453aac5a006bb8d26405f2bc3cf24e9d7733c","https://github.com/erlang/otp/security/advisories/GHSA-5vp4-58hc-h8cc","https://osv.dev/vulnerability/EEF-CVE-2026-71380","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-71380","description":"Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending valid request headers with a large Content-Length and then stalling before the body is complete.\n\nhttpd_request_handler:handle_info/2 cancels the request timeout as soon as a parse step succeeds, which includes the headers, and the clause that handles a decoder asking for more data re-arms the socket with {active, once} without setting any further timer. httpd_request:whole_body/2 returns such a continuation whenever the bytes received are fewer than the announced Content-Length, so a well-formed request that stops mid-body leaves the worker waiting indefinitely. The periodic byte-rate check that would reclaim it is armed only when minimum_bytes_per_second is configured, which it is not by default. Repeating this across connections occupies every worker permitted by max_clients and denies service to legitimate clients at negligible bandwidth cost.\n\nThis issue affects OTP from OTP 17.0 before OTP 27.3.4.17, OTP 28.5.0.6, and OTP 29.0.6, corresponding to inets from 5.10 before 9.3.2.7, 9.6.2.3, and 9.7.2. Whether OTP before OTP 17.0, corresponding to inets before 5.10, is affected is unknown."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.17"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-55951","versionConstraint":">= 17.0, < 27.3.4.17||>= 28.0, < 28.5.0.6||>= 29.0, < 29.0.6||>= 6.0, < 9.3.2.7||>= 9.4, < 9.6.2.3||>= 9.7, < 9.7.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-55951","fix":{"state":"fixed","versions":["9.3.2.7","9.6.2.3","9.7.2","27.3.4.17","28.5.0.6","29.0.6"],"available":[{"date":"2026-09-04","kind":"first-observed","version":"27.3.4.17"},{"date":"2026-09-04","kind":"first-observed","version":"28.5.0.6"},{"date":"2026-09-04","kind":"first-observed","version":"29.0.6"},{"date":"2026-09-04","kind":"first-observed","version":"9.3.2.7"},{"date":"2026-09-04","kind":"first-observed","version":"9.6.2.3"},{"date":"2026-09-04","kind":"first-observed","version":"9.7.2"}]},"cvss":[{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-55951","cwe":"CWE-770","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-55951","date":"2026-11-12","epss":0.00694,"percentile":0.53441}],"risk":0.54479,"urls":["https://cna.erlef.org/cves/CVE-2026-55951.html","https://github.com/erlang/otp/commit/aba0fe8c2d700bf4ac94607cf7f00e53bbe4042d","https://github.com/erlang/otp/commit/e3be1cfe9f6cedd0cd20d9905e05601dfb31c8aa","https://github.com/erlang/otp/security/advisories/GHSA-f9fw-mg7q-4g3x","https://osv.dev/vulnerability/EEF-CVE-2026-55951","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-55951","description":"The Erlang/OTP httpc HTTP client does not enforce a limit on the total size of response headers received from a server. The max_header_size option defaults to nolimit, and httpc_response:parse_headers/6 accumulates every header into a list before the length check runs (which only fires after the terminating CRLF CRLF is received).\n\nA malicious or compromised HTTP server can send an arbitrarily large number of headers, or headers with very large values, causing the client process to allocate unbounded memory until the system runs out of memory or the BEAM VM crashes. A proof-of-concept server sending 100,000 headers of roughly 4000 bytes each caused the client VM to allocate over 13 GB of memory in under 30 seconds.\n\nAny application using httpc:request/4,5 to connect to untrusted servers is affected. No authentication is required: any server the client connects to (including via a redirect or man-in-the-middle) can trigger the exhaustion.\n\nThis issue affects OTP from OTP 17.0 before OTP 27.3.4.17, OTP 28.5.0.6, and OTP 29.0.6, corresponding to inets from 5.10 before 9.3.2.7, 9.6.2.3, and 9.7.2. Whether OTP before OTP 17.0, corresponding to inets before 5.10, is affected is unknown."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-15308","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.15||>= 3.14.0, < 3.14.7||>= 3.15.0a1, < 3.15.0b4 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-15308","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.15||>= 3.14.0, < 3.14.7||>= 3.15.0a1, < 3.15.0b4 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-15308","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.15","3.14.7","3.15.0b4"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.7"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0b4"},{"date":"2026-08-19","kind":"first-observed","version":"3.10.21"},{"date":"2026-08-19","kind":"first-observed","version":"3.11.16"},{"date":"2026-08-19","kind":"first-observed","version":"3.12.14"},{"date":"2026-08-19","kind":"first-observed","version":"3.13.15"},{"date":"2026-08-19","kind":"first-observed","version":"3.14.7"},{"date":"2026-08-19","kind":"first-observed","version":"3.15.0b4"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15308","cwe":"CWE-400","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-15308","date":"2026-11-12","epss":0.00637,"percentile":0.51034}],"risk":0.49686,"urls":["https://github.com/python/cpython/commit/07efb08123ba9367a7107325adb9d5626dca1ca9","https://github.com/python/cpython/commit/1e7956f1a722df9aabc509c30f8fbdc3a2b4fdc7","https://github.com/python/cpython/commit/785df8f743800661961528970f8598edcd291c14","https://github.com/python/cpython/commit/7933f4bf7131aa4140750f9404f5de0aa2969ced","https://github.com/python/cpython/commit/bcf98ddbc40ec9b3ee87da0124a5660b19b7e606","https://github.com/python/cpython/commit/c2390b9376e35a701ed3acc597b8fc87546c9b00","https://github.com/python/cpython/commit/e9f92ac0b298292e7ff998e52cb8ccacfb27a0bd","https://github.com/python/cpython/issues/153030","https://github.com/python/cpython/pull/153031","https://mail.python.org/archives/list/security-announce@python.org/thread/F6453LWKSHKCTWFLCOURWPLETNUIW2Z5/","http://www.openwall.com/lists/oss-security/2026/07/09/4","https://cert-portal.siemens.com/productcert/html/ssa-457936.html"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15308","description":"The incremental HTML parser (html.parser.HTMLParser) allows for CPU\ndenial-of-service through repeated unterminated markup declarations when\nprocessing uncontrolled data."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"26.2.5.19"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-28808","versionConstraint":">= 17.0, < 26.2.5.19||>= 27.0, < 27.3.4.10||>= 28.0, < 28.4.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-28808","fix":{"state":"fixed","versions":["26.2.5.19","27.3.4.10","28.4.2"],"available":[{"date":"2026-08-21","kind":"first-observed","version":"26.2.5.19"},{"date":"2026-08-21","kind":"first-observed","version":"27.3.4.10"},{"date":"2026-08-21","kind":"first-observed","version":"28.4.2"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28808","cwe":"CWE-863","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"},{"cve":"CVE-2026-28808","cwe":"CWE-551","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-28808","date":"2026-11-12","epss":0.00566,"percentile":0.47478}],"risk":0.49525,"urls":["https://cna.erlef.org/cves/CVE-2026-28808.html","https://github.com/erlang/otp/commit/07b8f441ca711f9812fad9e9115bab3c3aa92f79","https://github.com/erlang/otp/commit/8fc71ac6af4fbcc54103bec2983ef22e82942688","https://github.com/erlang/otp/commit/9dfa0c51eac97866078e808dec2183cb7871ff7c","https://github.com/erlang/otp/security/advisories/GHSA-3vhp-h532-mc3f","https://osv.dev/vulnerability/EEF-CVE-2026-28808","https://www.erlang.org/doc/system/versions.html#order-of-versions","https://access.redhat.com/security/cve/CVE-2026-28808","https://bugzilla.redhat.com/show_bug.cgi?id=2455909","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-28808.json"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-28808","description":"Incorrect Authorization vulnerability in Erlang OTP (inets modules) allows unauthenticated access to CGI scripts protected by directory rules when served via script_alias.\n\nWhen script_alias maps a URL prefix to a directory outside DocumentRoot, mod_auth evaluates directory-based access controls against the DocumentRoot-relative path while mod_cgi executes the script at the ScriptAlias-resolved path. This path mismatch allows unauthenticated access to CGI scripts that directory rules were meant to protect.\n\nThis vulnerability is associated with program files lib/inets/src/http_server/mod_alias.erl, lib/inets/src/http_server/mod_auth.erl, and lib/inets/src/http_server/mod_cgi.erl.\n\nThis issue affects OTP from OTP 17.0 before OTP 26.2.5.19, OTP 27.3.4.10, and OTP 28.4.2, corresponding to inets from 5.10 before 9.1.0.6, 9.3.2.4, and 9.6.2. Whether OTP before OTP 17.0, corresponding to inets before 5.10, is affected is unknown."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-115557","versionConstraint":"< 3.11.18||>= 3.12.0, < 3.12.16||>= 3.13.0, < 3.13.18||>= 3.14.0, < 3.14.10||>= 3.15.0, < 3.15.2||>= 3.16.0a1, < 3.16.0 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-115557","versionConstraint":"< 3.11.18||>= 3.12.0, < 3.12.16||>= 3.13.0, < 3.13.18||>= 3.14.0, < 3.14.10||>= 3.15.0, < 3.15.2||>= 3.16.0a1, < 3.16.0 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-115557","fix":{"state":"fixed","versions":["3.11.18","3.12.16","3.13.18","3.14.10","3.15.2","3.16.0"],"available":[{"date":"2026-10-29","kind":"first-observed","version":"3.11.18"},{"date":"2026-10-29","kind":"first-observed","version":"3.12.16"},{"date":"2026-10-29","kind":"first-observed","version":"3.13.18"},{"date":"2026-10-29","kind":"first-observed","version":"3.14.10"},{"date":"2026-10-29","kind":"first-observed","version":"3.15.2"},{"date":"2026-10-29","kind":"first-observed","version":"3.16.0"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":9.4},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-115557","cwe":"CWE-299","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-115557","date":"2026-11-12","epss":0.00534,"percentile":0.45597}],"risk":0.49128,"urls":["http://www.openwall.com/lists/oss-security/2026/10/20/29","https://emudhra.we-have-a-problem.com/","https://github.com/python/cpython/commit/21a50891ab4be2e9955239e625ae2b40c6b1854d","https://github.com/python/cpython/commit/36cd295f32fc9ba19399e01abee91231440a41dd","https://github.com/python/cpython/commit/48d9b2712cd52206c7a5882d0fdca4863ed65e93","https://github.com/python/cpython/commit/7dd8b4736a1419750b94a388e6d158be15836fe6","https://github.com/python/cpython/commit/98f0e4ed349f370dc8a00366da1a9797e11c9ed5","https://github.com/python/cpython/commit/a17d9ef549008133eadf20689b1f4787902efe5b","https://github.com/python/cpython/commit/af52b41afa4330fb38583db553631baa2f122f90","https://github.com/python/cpython/commit/c7fd7edf7e0d122a3973cf676fae21b6aaa650a8","https://github.com/python/cpython/commit/e2a9dd97ef9571c710ac0afaa834c8879aebce78","https://github.com/python/cpython/commit/e4500d8a437ee5b988a5410cb9b59d177aa01370","https://github.com/python/cpython/commit/e4f63e65a93cf44c14274aa987e644b8c003625e","https://github.com/python/cpython/commit/e9bf2cf84eebf838a1edaa1c648c2b36345b99d3","https://github.com/python/cpython/issues/160040","https://github.com/python/cpython/pull/160042","https://mail.python.org/archives/list/security-announce@python.org/thread/FNAJMZV6XQYLVPABNINDMF3VF66AYLW4/","http://www.openwall.com/lists/oss-security/2026/10/24/5"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-115557","description":"Python has added a denylist for known compromised certificates to the \"ssl\" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-7210","versionConstraint":"< 3.10.22||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0, < 3.14.6||>= 3.15.0a1, < 3.15.0b2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-7210","fix":{"state":"fixed","versions":["3.10.22","3.11.16","3.12.14","3.13.14","3.14.6","3.15.0b2"],"available":[{"date":"2026-10-02","kind":"first-observed","version":"3.10.22"},{"date":"2026-09-15","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-15","kind":"first-observed","version":"3.12.14"},{"date":"2026-06-18","kind":"first-observed","version":"3.13.14"},{"date":"2026-06-18","kind":"first-observed","version":"3.14.6"},{"date":"2026-06-05","kind":"first-observed","version":"3.15.0b2"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-7210","cwe":"CWE-331","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-7210","date":"2026-11-12","epss":0.00672,"percentile":0.5255}],"risk":0.48383999999999994,"urls":["https://github.com/python/cpython/commit/24b8f12544468e4cedf5bfbe25442fcd495391e4","https://github.com/python/cpython/commit/3573b3b1ecbd99030a0b18658e1bfece771b2566","https://github.com/python/cpython/commit/cbaecf9f16da611a646d507c1cbca265c588fc56","https://github.com/python/cpython/commit/e37df2a6a71d6538698e2d3188a7c345b827640b","https://github.com/python/cpython/commit/ea70712d1a8508e14e9677d44f838dab04dc0286","https://github.com/python/cpython/commit/eeea765cb9d8f1fc3d8918b272ac3c477983f27a","https://github.com/python/cpython/commit/fc9b11ff49cbc82e6f917d07a61517a2b5f3145f","https://github.com/python/cpython/issues/149018","https://github.com/python/cpython/pull/149023","https://mail.python.org/archives/list/security-announce@python.org/thread/PNY5OMBDPM2FRUZTWFFPJ6LISWKV627K/","http://www.openwall.com/lists/oss-security/2026/05/11/13","http://www.openwall.com/lists/oss-security/2026/05/11/8"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-7210","description":"`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\\r\\n\\r\\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.17"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-74835","versionConstraint":">= 17.0, < 27.3.4.17||>= 28.0, < 28.5.0.6||>= 29.0, < 29.0.6||>= 6.0, < 9.3.2.7||>= 9.4, < 9.6.2.3||>= 9.7, < 9.7.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-74835","fix":{"state":"fixed","versions":["9.3.2.7","9.6.2.3","9.7.2","27.3.4.17","28.5.0.6","29.0.6"],"available":[{"date":"2026-09-04","kind":"first-observed","version":"27.3.4.17"},{"date":"2026-09-04","kind":"first-observed","version":"28.5.0.6"},{"date":"2026-09-04","kind":"first-observed","version":"29.0.6"},{"date":"2026-09-04","kind":"first-observed","version":"9.3.2.7"},{"date":"2026-09-04","kind":"first-observed","version":"9.6.2.3"},{"date":"2026-09-04","kind":"first-observed","version":"9.7.2"}]},"cvss":[{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-74835","cwe":"CWE-770","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-74835","date":"2026-11-12","epss":0.0059,"percentile":0.487}],"risk":0.47789999999999994,"urls":["https://cna.erlef.org/cves/CVE-2026-74835.html","https://github.com/erlang/otp/commit/0bceff0c2987cae83d9d4a77c5ecacd6d01b8b86","https://github.com/erlang/otp/commit/7f9c460d1818c2afb78fbd01f8d8b81343bbb011","https://github.com/erlang/otp/commit/8e1ca42b64df6c41306affbe8dc129bdbd4042c7","https://github.com/erlang/otp/security/advisories/GHSA-8qrh-x566-5xv5","https://osv.dev/vulnerability/EEF-CVE-2026-74835","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-74835","description":"The inets application HTTP server httpd fails to enforce a configured body-size limit on chunked request.\n\nThis issue affects OTP from OTP 17.0 before OTP 27.3.4.17, OTP 28.5.0.6, and OTP 29.0.6, corresponding to inets from 5.10 before 9.3.2.7, 9.6.2.3, and 9.7.2. Whether OTP before OTP 17.0, corresponding to inets before 5.10, is affected is unknown."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.17"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-73276","versionConstraint":">= 22.2, < 27.3.4.17||>= 28.0, < 28.5.0.6||>= 29.0, < 29.0.6||>= 7.1.2, < 9.3.2.7||>= 9.4, < 9.6.2.3||>= 9.7, < 9.7.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-73276","fix":{"state":"fixed","versions":["9.3.2.7","9.6.2.3","9.7.2","27.3.4.17","28.5.0.6","29.0.6"],"available":[{"date":"2026-09-04","kind":"first-observed","version":"27.3.4.17"},{"date":"2026-09-04","kind":"first-observed","version":"28.5.0.6"},{"date":"2026-09-04","kind":"first-observed","version":"29.0.6"},{"date":"2026-09-04","kind":"first-observed","version":"9.3.2.7"},{"date":"2026-09-04","kind":"first-observed","version":"9.6.2.3"},{"date":"2026-09-04","kind":"first-observed","version":"9.7.2"}]},"cvss":[{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-73276","cwe":"CWE-444","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-73276","date":"2026-11-12","epss":0.00604,"percentile":0.49394}],"risk":0.47716,"urls":["https://cna.erlef.org/cves/CVE-2026-73276.html","https://github.com/erlang/otp/commit/60add5a19e2154560fdff3fe92dba14a68bbd683","https://github.com/erlang/otp/commit/6cd995e34d3bb3d36dd278dded2d62c25e71820c","https://github.com/erlang/otp/commit/c06db0bedf49a9b40725745e73fa82e562612815","https://github.com/erlang/otp/commit/c285240c6e4b93960c5dc4f17ba04e6fdfb27a0f","https://github.com/erlang/otp/security/advisories/GHSA-6v7q-jwgh-cx8p","https://osv.dev/vulnerability/EEF-CVE-2026-73276","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-73276","description":"Gracefulness code ignored cases that should be rejected, resulting in possible HTTP Request Smuggling opportunities.\n\nThis issue affects OTP from OTP 22.2 before OTP 27.3.4.17, OTP 28.5.0.6, and OTP 29.0.6, corresponding to inets from 7.1.2 before 9.3.2.7, 9.6.2.3, and 9.7.2."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-19445","versionConstraint":"< 3.10.22||>= 3.11.0, < 3.11.17||>= 3.12.0, < 3.12.15||>= 3.13.0, < 3.13.16||>= 3.14.0, < 3.14.8||>= 3.15.0a1, < 3.15.0rc3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-19445","fix":{"state":"fixed","versions":["3.10.22","3.11.17","3.12.15","3.13.16","3.14.8","3.15.0rc3"],"available":[{"date":"2026-10-08","kind":"first-observed","version":"3.10.22"},{"date":"2026-10-08","kind":"first-observed","version":"3.11.17"},{"date":"2026-10-08","kind":"first-observed","version":"3.12.15"},{"date":"2026-10-08","kind":"first-observed","version":"3.13.16"},{"date":"2026-10-08","kind":"first-observed","version":"3.14.8"},{"date":"2026-10-08","kind":"first-observed","version":"3.15.0rc3"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":9.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19445","cwe":"CWE-416","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-19445","date":"2026-11-12","epss":0.00524,"percentile":0.4499}],"risk":0.47683999999999993,"urls":["https://github.com/python/cpython/commit/34a53dce8174da2fceb12fe084a4def02a10053d","https://github.com/python/cpython/commit/46133cd57d309652139ada74014aca7665ac552b","https://github.com/python/cpython/commit/63fab143d94cafae71850831acfb52041ba44af7","https://github.com/python/cpython/commit/b12968cefe69ca1dcb8606c832ff73ee7dbf4ba8","https://github.com/python/cpython/commit/cd7e51e7d4563866fbaa1e2521ae69b45daf3698","https://github.com/python/cpython/commit/d8717ed01717a9641686e6e6f83f0ab8af235e2c","https://github.com/python/cpython/commit/ec44b5a3258cbda947d5e07242ee562ed05ef24b","https://github.com/python/cpython/issues/156293","https://github.com/python/cpython/pull/158504","https://mail.python.org/archives/list/security-announce@python.org/thread/QMQIUQB6WGGC3MI7I3WKQXOYOBDSPPS3/","http://www.openwall.com/lists/oss-security/2026/09/30/17","https://cert-portal.siemens.com/productcert/html/ssa-457936.html"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19445","description":"A remote, unauthenticated TLS client can make a server crash or call\nthrough a freed pointer if its sni_callback assigns a different context to\nSSLSocket.context (the documented way to select a certificate per server\nname) and nothing else keeps the original ssl.SSLContext alive. Typical\ncases are servers that create an SSLContext per connection or replace it\nwhile connections are open; servers that wrap their listening socket with\nit are not affected.\n\n\nMitigation: keep a reference to every SSLContext that sets sni_callback for\nthe lifetime of the server. TLS clients are not affected."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-6100","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0a1, < 3.14.5rc1||>= 3.15.0a1, < 3.15.0b1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-6100","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0a1, < 3.14.5rc1||>= 3.15.0a1, < 3.15.0b1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-6100","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.14","3.14.5rc1","3.15.0b1"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.5rc1"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0b1"},{"date":"2026-08-19","kind":"first-observed","version":"3.10.21"},{"date":"2026-08-19","kind":"first-observed","version":"3.11.16"},{"date":"2026-08-19","kind":"first-observed","version":"3.12.14"},{"date":"2026-07-02","kind":"first-observed","version":"3.13.14"},{"date":"2026-07-02","kind":"first-observed","version":"3.14.5rc1"},{"date":"2026-07-02","kind":"first-observed","version":"3.15.0b1"}]},"cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":9.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6100","cwe":"CWE-416","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-6100","cwe":"CWE-787","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-6100","cwe":"CWE-825","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-6100","date":"2026-11-12","epss":0.00589,"percentile":0.4866}],"risk":0.4741449999999999,"urls":["https://github.com/python/cpython/commit/47128e64f98c3a20271138a98c2922bea2a3ee0e","https://github.com/python/cpython/commit/6a5f79c8d7bbf22b083b240910c7a8781a59437d","https://github.com/python/cpython/commit/8fc66aef6d7b3ae58f43f5c66f9366cc8cbbfcd2","https://github.com/python/cpython/commit/c3cf71c3366fe49acb776a639405c0eea6169c20","https://github.com/python/cpython/commit/e20c6c9667c99ecaab96e1a2b3767082841ffc8b","https://github.com/python/cpython/commit/ea8d735eb084cf8cc021df1a30e90d10a8f052e3","https://github.com/python/cpython/issues/148395","https://github.com/python/cpython/pull/148396","https://mail.python.org/archives/list/security-announce@python.org/thread/HTWB2Z6KT5QQX4RYEZAFININDHNOSIF3/","http://www.openwall.com/lists/oss-security/2026/04/13/10","https://access.redhat.com/errata/RHSA-2026:10117","https://access.redhat.com/errata/RHSA-2026:10140","https://access.redhat.com/errata/RHSA-2026:10141","https://access.redhat.com/errata/RHSA-2026:10711","https://access.redhat.com/errata/RHSA-2026:10745","https://access.redhat.com/errata/RHSA-2026:10774","https://access.redhat.com/errata/RHSA-2026:10949","https://access.redhat.com/errata/RHSA-2026:10950","https://access.redhat.com/errata/RHSA-2026:11062","https://access.redhat.com/errata/RHSA-2026:11077","https://access.redhat.com/errata/RHSA-2026:11768","https://access.redhat.com/errata/RHSA-2026:13692","https://access.redhat.com/errata/RHSA-2026:13812","https://access.redhat.com/errata/RHSA-2026:14652","https://access.redhat.com/errata/RHSA-2026:14653","https://access.redhat.com/errata/RHSA-2026:14656","https://access.redhat.com/errata/RHSA-2026:16699","https://access.redhat.com/errata/RHSA-2026:17525","https://access.redhat.com/errata/RHSA-2026:17619","https://access.redhat.com/errata/RHSA-2026:19019","https://access.redhat.com/errata/RHSA-2026:19064","https://access.redhat.com/errata/RHSA-2026:19175","https://access.redhat.com/errata/RHSA-2026:19176","https://access.redhat.com/errata/RHSA-2026:19177","https://access.redhat.com/errata/RHSA-2026:19216","https://access.redhat.com/errata/RHSA-2026:19549","https://access.redhat.com/errata/RHSA-2026:19570","https://access.redhat.com/errata/RHSA-2026:19571","https://access.redhat.com/errata/RHSA-2026:19576","https://access.redhat.com/errata/RHSA-2026:19590","https://access.redhat.com/errata/RHSA-2026:21275","https://access.redhat.com/errata/RHSA-2026:21682","https://access.redhat.com/errata/RHSA-2026:25096","https://access.redhat.com/errata/RHSA-2026:26187","https://access.redhat.com/errata/RHSA-2026:30078","https://access.redhat.com/errata/RHSA-2026:30087","https://access.redhat.com/errata/RHSA-2026:30088","https://access.redhat.com/errata/RHSA-2026:30089","https://access.redhat.com/errata/RHSA-2026:52400","https://access.redhat.com/errata/RHSA-2026:8822","https://access.redhat.com/errata/RHSA-2026:8824","https://access.redhat.com/errata/RHSA-2026:9228","https://access.redhat.com/security/cve/CVE-2026-6100","https://bugzilla.redhat.com/show_bug.cgi?id=2457932","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6100.json"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6100","description":"Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `MemoryError` and the decompression instance is re-used. This scenario can be triggered if the process is under memory pressure. The fix cleans up the dangling pointer in this specific error condition.\n\nThe vulnerability is only present if the program re-uses decompressor instances across multiple decompression calls even after a `MemoryError` is raised during decompression. Using the helper functions to one-shot decompress data such as `lzma.decompress()`, `bz2.decompress()`, `gzip.decompress()`, and `zlib.decompress()` are not affected as a new decompressor instance is used per call. If the decompressor instance is not re-used after an error condition, this usage is similarly not vulnerable."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.17"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66357","versionConstraint":">= 17.0, < 27.3.4.17||>= 28.0, < 28.5.0.6||>= 29.0, < 29.0.6||>= 6.0, < 9.3.2.7||>= 9.4, < 9.6.2.3||>= 9.7, < 9.7.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66357","fix":{"state":"fixed","versions":["9.3.2.7","9.6.2.3","9.7.2","27.3.4.17","28.5.0.6","29.0.6"],"available":[{"date":"2026-09-04","kind":"first-observed","version":"27.3.4.17"},{"date":"2026-09-04","kind":"first-observed","version":"28.5.0.6"},{"date":"2026-09-04","kind":"first-observed","version":"29.0.6"},{"date":"2026-09-04","kind":"first-observed","version":"9.3.2.7"},{"date":"2026-09-04","kind":"first-observed","version":"9.6.2.3"},{"date":"2026-09-04","kind":"first-observed","version":"9.7.2"}]},"cvss":[{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66357","cwe":"CWE-444","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-66357","date":"2026-11-12","epss":0.0059,"percentile":0.48699}],"risk":0.4661,"urls":["https://cna.erlef.org/cves/CVE-2026-66357.html","https://github.com/erlang/otp/commit/220d618d2479a7180b4a06d0c5aacfaa4af4a85b","https://github.com/erlang/otp/commit/273d8958de38ff2a7fe0c5dcc5b6bfe6f65717f3","https://github.com/erlang/otp/commit/e640d599287d2eba919e6f13b91f042d7dbe6ff4","https://github.com/erlang/otp/security/advisories/GHSA-qh2f-33hj-37qf","https://osv.dev/vulnerability/EEF-CVE-2026-66357","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66357","description":"httpd has never implemented obs-fold (RFC 2616 §2.2 / RFC 7230 §3.2.4 header continuation lines). Every CRLF followed by a non-CRLF octet unconditionally starts a new header. This missing feature became a security concern as the understanding of HTTP request smuggling attacks evolved.\n\nThis issue affects OTP from OTP 17.0 before OTP 27.3.4.17, OTP 28.5.0.6, and OTP 29.0.6, corresponding to inets from 5.10 before 9.3.2.7, 9.6.2.3, and 9.7.2. Whether OTP before OTP 17.0, corresponding to inets before 5.10, is affected is unknown."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.13.10"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-12781","versionConstraint":"< 3.13.10||>= 3.14.0, < 3.14.1||>= 3.15.0a1, < 3.15.0a2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.13.10"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-12781","versionConstraint":"< 3.13.10||>= 3.14.0, < 3.14.1||>= 3.15.0a1, < 3.15.0a2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-12781","fix":{"state":"fixed","versions":["3.13.10","3.14.1","3.15.0a2"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.13.10"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.1"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0a2"},{"date":"2026-06-18","kind":"first-observed","version":"3.13.10"},{"date":"2026-06-18","kind":"first-observed","version":"3.14.1"},{"date":"2026-06-18","kind":"first-observed","version":"3.15.0a2"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-12781","cwe":"CWE-704","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-12781","date":"2026-11-12","epss":0.00859,"percentile":0.58959}],"risk":0.46386000000000005,"urls":["https://github.com/python/cpython/commit/13360efd385d1a7d0659beba03787ea3d063ef9b","https://github.com/python/cpython/commit/1be80bec7960f5ccd059e75f3dfbd45fca302947","https://github.com/python/cpython/commit/9060b4abbe475591b6230b23c2afefeff26fcca5","https://github.com/python/cpython/commit/e95e783dff443b68e8179fdb57737025bf02ba76","https://github.com/python/cpython/commit/fd17ee026fa9b67f6288cbafe374a3e479fe03a5","https://github.com/python/cpython/issues/125346","https://github.com/python/cpython/pull/141128","https://mail.python.org/archives/list/security-announce@python.org/thread/KRI7GC6S27YV5NJ4FPDALS2WI5ENAFJ6/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-12781","description":"When passing data to the b64decode(), standard_b64decode(), and urlsafe_b64decode() functions in the \"base64\" module the characters \"+/\" will always be accepted, regardless of the value of \"altchars\" parameter, typically used to establish an \"alternative base64 alphabet\" such as the URL safe alphabet. This behavior matches what is recommended in earlier base64 RFCs, but newer RFCs now recommend either dropping characters outside the specified base64 alphabet or raising an error. The old behavior has the possibility of causing data integrity issues.\n\n\n\n\nThis behavior can only be insecure if your application uses an alternate base64 alphabet (without \"+/\"). If your application does not use the \"altchars\" parameter or the urlsafe_b64decode() function, then your application does not use an alternative base64 alphabet.\n\n\n\n\nThe attached patches DOES NOT make the base64-decode behavior raise an error, as this would be a change in behavior and break existing programs. Instead, the patch deprecates the behavior which will be replaced with the newly recommended behavior in a future version of Python. Users are recommended to mitigate by verifying user-controlled inputs match the base64 \nalphabet they are expecting or verify that their application would not be \naffected if the b64decode() functions accepted \"+\" or \"/\" outside of altchars."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-12084","versionConstraint":"< 3.10.20||>= 3.11.0a1, < 3.11.15||>= 3.12.0a1, < 3.12.13||>= 3.13.0a1, < 3.13.11||>= 3.14.0a1, < 3.14.2||>= 3.15.0a1, < 3.15.0a3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-12084","versionConstraint":"< 3.10.20||>= 3.11.0a1, < 3.11.15||>= 3.12.0a1, < 3.12.13||>= 3.13.0a1, < 3.13.11||>= 3.14.0a1, < 3.14.2||>= 3.15.0a1, < 3.15.0a3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-12084","fix":{"state":"fixed","versions":["3.10.20","3.11.15","3.12.13","3.13.11","3.14.2","3.15.0a3"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.11"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.2"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0a3"},{"date":"2026-05-07","kind":"first-observed","version":"3.10.20"},{"date":"2026-05-07","kind":"first-observed","version":"3.11.15"},{"date":"2026-05-07","kind":"first-observed","version":"3.12.13"},{"date":"2025-12-10","kind":"first-observed","version":"3.13.11"},{"date":"2025-12-10","kind":"first-observed","version":"3.14.2"},{"date":"2026-05-07","kind":"first-observed","version":"3.15.0a3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-12084","cwe":"CWE-407","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-12084","date":"2026-11-12","epss":0.00856,"percentile":0.58874}],"risk":0.46224000000000004,"urls":["https://github.com/python/cpython/commit/027f21e417b26eed4505ac2db101a4352b7c51a0","https://github.com/python/cpython/commit/08d8e18ad81cd45bc4a27d6da478b51ea49486e4","https://github.com/python/cpython/commit/27648a1818749ef44c420afe6173af6868715437","https://github.com/python/cpython/commit/41f468786762348960486c166833a218a0a436af","https://github.com/python/cpython/commit/57937a8e5e293f0dcba5115f7b7a11b1e0c9a273","https://github.com/python/cpython/commit/8d2d7bb2e754f8649a68ce4116271a4932f76907","https://github.com/python/cpython/commit/9c9dda6625a2a90d2a06c657eee021d6be19842d","https://github.com/python/cpython/commit/a46c10ec9d4050ab67b8a932e0859a2ea60c3cb8","https://github.com/python/cpython/commit/a696ba8b4d42fd632afc9bc88ad830a2e4cceed8","https://github.com/python/cpython/commit/c97e87593063d84a2bd9fe7068b30eb44de23dc0","https://github.com/python/cpython/commit/ddcd2acd85d891a53e281c773b3093f9db953964","https://github.com/python/cpython/commit/e91c11449cad34bac3ea55ee09ca557691d92b53","https://github.com/python/cpython/issues/142145","https://github.com/python/cpython/pull/142146"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-12084","description":"When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency on _clear_id_cache() the algorithm is quadratic. Availability can be impacted when building excessively nested documents."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.11"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-4435","versionConstraint":"< 3.9.23||>= 3.10.0, < 3.10.18||>= 3.11.0, < 3.11.13||>= 3.12.0, < 3.12.11||>= 3.13.0, < 3.13.4||>= 3.14.0a1, < 3.14.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.11"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-4435","versionConstraint":"< 3.9.23||>= 3.10.0, < 3.10.18||>= 3.11.0, < 3.11.13||>= 3.12.0, < 3.12.11||>= 3.13.0, < 3.13.4||>= 3.14.0a1, < 3.14.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-4435","fix":{"state":"fixed","versions":["3.9.23","3.10.18","3.11.13","3.12.11","3.13.4","3.14.0b3"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.9.23"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.18"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.11"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.4"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.0b3"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.23"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.18"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.13"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.11"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.4"},{"date":"2025-09-04","kind":"first-observed","version":"3.14.0b3"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-4435","cwe":"CWE-682","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-4435","date":"2026-11-12","epss":0.00616,"percentile":0.50006}],"risk":0.462,"urls":["https://github.com/python/cpython/commit/19de092debb3d7e832e5672cc2f7b788d35951da","https://github.com/python/cpython/commit/28463dba112af719df1e8b0391c46787ad756dd9","https://github.com/python/cpython/commit/3612d8f51741b11f36f8fb0494d79086bac9390a","https://github.com/python/cpython/commit/4633f3f497b1ff70e4a35b6fe2c907cbe2d4cb2e","https://github.com/python/cpython/commit/9c1110ef6652687d7c55f590f909720eddde965a","https://github.com/python/cpython/commit/9e0ac76d96cf80b49055f6d6b9a6763fb9215c2a","https://github.com/python/cpython/commit/aa9eb5f757ceff461e6e996f12c89e5d9b583b01","https://github.com/python/cpython/commit/dd8f187d0746da151e0025c51680979ac5b4cfb1","https://github.com/python/cpython/issues/135034","https://github.com/python/cpython/pull/135037","https://mail.python.org/archives/list/security-announce@python.org/thread/MAXIJJCUUMCL7ATZNDVEGGHUMQMUUKLG/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-4435","description":"When using a TarFile.errorlevel = 0 and extracting with a filter the documented behavior is that any filtered members would be skipped and not extracted. However the actual behavior of TarFile.errorlevel = 0 in affected versions is that the member would still be extracted and not skipped."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.8"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-9287","versionConstraint":"< 3.9.21||>= 3.10.0, < 3.10.16||>= 3.11.0, < 3.11.11||>= 3.12.0, < 3.12.8||>= 3.13.0, < 3.13.1||>= 3.14.0a1, < 3.14.0a2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.8"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-9287","versionConstraint":"< 3.9.21||>= 3.10.0, < 3.10.16||>= 3.11.0, < 3.11.11||>= 3.12.0, < 3.12.8||>= 3.13.0, < 3.13.1||>= 3.14.0a1, < 3.14.0a2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-9287","fix":{"state":"fixed","versions":["3.9.21","3.10.16","3.11.11","3.12.8","3.13.1","3.14.0a2"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.9.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.11"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.8"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.1"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.0a2"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.21"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.16"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.11"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.8"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.1"},{"date":"2025-09-04","kind":"first-observed","version":"3.14.0a2"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Green","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-9287","cwe":"CWE-428","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2024-9287","cwe":"CWE-77","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-9287","date":"2026-11-12","epss":0.00648,"percentile":0.51564}],"risk":0.45522,"urls":["https://github.com/python/cpython/commit/633555735a023d3e4d92ba31da35b1205f9ecbd7","https://github.com/python/cpython/commit/8450b2482586857d689b6658f08de9c8179af7db","https://github.com/python/cpython/commit/9286ab3a107ea41bd3f3c3682ce2512692bdded8","https://github.com/python/cpython/commit/ae961ae94bf19c8f8c7fbea3d1c25cc55ce8ae97","https://github.com/python/cpython/commit/d48cc82ed25e26b02eb97c6263d95dcaa1e9111b","https://github.com/python/cpython/commit/e52095a0c1005a87eed2276af7a1f2f66e2b6483","https://github.com/python/cpython/issues/124651","https://github.com/python/cpython/pull/124712","https://mail.python.org/archives/list/security-announce@python.org/thread/RSPJ2B5JL22FG3TKUJ7D7DQ4N5JRRBZL/","https://lists.debian.org/debian-lts-announce/2024/11/msg00024.html","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html","https://security.netapp.com/advisory/ntap-20250425-0006/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-9287","description":"A vulnerability has been found in the CPython `venv` module and CLI where path names provided when creating a virtual environment were not quoted properly, allowing the creator to inject commands into virtual environment \"activation\" scripts (ie \"source venv/bin/activate\"). This means that attacker-controlled virtual environments are able to run commands when the virtual environment is activated. Virtual environments which are not created by an attacker or which aren't activated before being used (ie \"./venv/bin/python\") are not affected."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"26.2.5.18"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-23941","versionConstraint":">= 17.0, < 26.2.5.18||>= 27, < 27.3.4.9||>= 28, < 28.4.1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-23941","fix":{"state":"fixed","versions":["26.2.5.18","27.3.4.9","28.4.1"],"available":[{"date":"2026-08-21","kind":"first-observed","version":"26.2.5.18"},{"date":"2026-08-21","kind":"first-observed","version":"27.3.4.9"},{"date":"2026-08-21","kind":"first-observed","version":"28.4.1"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","metrics":{"baseScore":9.4,"impactScore":5.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-23941","cwe":"CWE-444","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-23941","date":"2026-11-12","epss":0.00514,"percentile":0.44313}],"risk":0.44204,"urls":["https://cna.erlef.org/cves/CVE-2026-23941.html","https://github.com/erlang/otp/commit/a4b46336fd25aa100ac602eb9a627aaead7eda18","https://github.com/erlang/otp/commit/a761d391d8d08316cbd7d4a86733ba932b73c45b","https://github.com/erlang/otp/commit/e775a332f623851385ab6ddb866d9b150612ddf6","https://github.com/erlang/otp/security/advisories/GHSA-w4jc-9wpv-pqh7","https://osv.dev/vulnerability/EEF-CVE-2026-23941","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-23941","description":"Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in Erlang OTP (inets httpd module) allows HTTP Request Smuggling.\n\nThis vulnerability is associated with program files lib/inets/src/http_server/httpd_request.erl and program routines httpd_request:parse_headers/7.\n\nThe server does not reject or normalize duplicate Content-Length headers. The earliest Content-Length in the request is used for body parsing while common reverse proxies (nginx, Apache httpd, Envoy) honor the last Content-Length value. This violates RFC 9112 Section 6.3 and allows front-end/back-end desynchronization, leaving attacker-controlled bytes queued as the start of the next request.\n\nThis issue affects OTP from OTP 17.0 before OTP 26.2.5.18, OTP 27.3.4.9, and OTP 28.4.1, corresponding to inets from 5.10 before 9.1.0.5, 9.3.2.3, and 9.6.1. Whether OTP before OTP 17.0, corresponding to inets before 5.10, is affected is unknown."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.17"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-59696","versionConstraint":">= 21.0, < 27.3.4.17||>= 28.0, < 28.5.0.6||>= 29.0, < 29.0.6||>= 3.5, < 6.2.2.5||>= 7.0, < 7.3.0.2||>= 8.0, < 8.0.4 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-59696","fix":{"state":"fixed","versions":["6.2.2.5","7.3.0.2","8.0.4","27.3.4.17","28.5.0.6","29.0.6"],"available":[{"date":"2026-09-04","kind":"first-observed","version":"27.3.4.17"},{"date":"2026-09-04","kind":"first-observed","version":"28.5.0.6"},{"date":"2026-09-04","kind":"first-observed","version":"29.0.6"},{"date":"2026-09-04","kind":"first-observed","version":"6.2.2.5"},{"date":"2026-09-04","kind":"first-observed","version":"7.3.0.2"},{"date":"2026-09-04","kind":"first-observed","version":"8.0.4"}]},"cvss":[{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59696","cwe":"CWE-1284","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-59696","date":"2026-11-12","epss":0.00726,"percentile":0.54619}],"risk":0.43197,"urls":["https://cna.erlef.org/cves/CVE-2026-59696.html","https://github.com/erlang/otp/commit/29a9dd0e17a97a3e6e46f0d08c6ba8f31db33f5e","https://github.com/erlang/otp/commit/aba0fe8c2d700bf4ac94607cf7f00e53bbe4042d","https://github.com/erlang/otp/commit/e3be1cfe9f6cedd0cd20d9905e05601dfb31c8aa","https://github.com/erlang/otp/security/advisories/GHSA-8qw4-2chm-mvj2","https://osv.dev/vulnerability/EEF-CVE-2026-59696","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-59696","description":"Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP stdlib allows a remote attacker to degrade availability by supplying a URI whose port component is a very long run of digits.\n\nuri_string:get_port/1 passes the port substring to binary_to_integer/1 with no length bound, catching only error:badarg, so a syntactically valid port of up to roughly 1.26 million digits converts successfully and costs the calling process hundreds of milliseconds of arbitrary-precision arithmetic. The conversion is reached from every authority-parsing path in uri_string:parse/1, including the host, registered-name, and IPv4 and IPv6 forms. parse/1 is the documented interface for parsing URIs, so any application that parses an attacker-supplied URI is exposed without further configuration. The conversion function is documented to accept integers of any size, so bounding the input is the caller's responsibility.\n\nThis issue affects OTP from OTP 21.0 before OTP 27.3.4.17, OTP 28.5.0.6, and OTP 29.0.6, corresponding to stdlib from 3.5 before 6.2.2.5, 7.3.0.2, and 8.0.4."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.11"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-12718","versionConstraint":"< 3.9.23||>= 3.10.0, < 3.10.18||>= 3.11.0, < 3.11.13||>= 3.12.0, < 3.12.11||>= 3.13.0, < 3.13.4||>= 3.14.0a1, < 3.14.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.11"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-12718","versionConstraint":"< 3.9.23||>= 3.10.0, < 3.10.18||>= 3.11.0, < 3.11.13||>= 3.12.0, < 3.12.11||>= 3.13.0, < 3.13.4||>= 3.14.0a1, < 3.14.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-12718","fix":{"state":"fixed","versions":["3.9.23","3.10.18","3.11.13","3.12.11","3.13.4","3.14.0b3"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.9.23"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.18"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.11"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.4"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.0b3"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.23"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.18"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.13"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.11"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.4"},{"date":"2025-09-04","kind":"first-observed","version":"3.14.0b3"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-12718","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2024-12718","date":"2026-11-12","epss":0.00825,"percentile":0.57872}],"risk":0.424875,"urls":["https://gist.github.com/sethmlarson/52398e33eff261329a0180ac1d54f42f","https://github.com/python/cpython/commit/19de092debb3d7e832e5672cc2f7b788d35951da","https://github.com/python/cpython/commit/28463dba112af719df1e8b0391c46787ad756dd9","https://github.com/python/cpython/commit/3612d8f51741b11f36f8fb0494d79086bac9390a","https://github.com/python/cpython/commit/4633f3f497b1ff70e4a35b6fe2c907cbe2d4cb2e","https://github.com/python/cpython/commit/9c1110ef6652687d7c55f590f909720eddde965a","https://github.com/python/cpython/commit/9e0ac76d96cf80b49055f6d6b9a6763fb9215c2a","https://github.com/python/cpython/commit/aa9eb5f757ceff461e6e996f12c89e5d9b583b01","https://github.com/python/cpython/commit/dd8f187d0746da151e0025c51680979ac5b4cfb1","https://github.com/python/cpython/issues/127987","https://github.com/python/cpython/issues/135034","https://github.com/python/cpython/pull/135037","https://mail.python.org/archives/list/security-announce@python.org/thread/MAXIJJCUUMCL7ATZNDVEGGHUMQMUUKLG/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-12718","description":"Allows modifying some file metadata (e.g. last modified) with filter=\"data\" or file permissions (chmod) with filter=\"tar\" of files outside the extraction directory.\nYou are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the filter= parameter with a value of \"data\" or \"tar\". See the tarfile  extraction filters documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter  for more information. Only Python versions 3.12 or later are affected by these vulnerabilities, earlier versions don't include the extraction filter feature.\n\nNote that for Python 3.14 or later the default value of filter= changed from \"no filtering\" to `\"data\", so if you are relying on this new default behavior then your usage is also affected.\n\nNote that none of these vulnerabilities significantly affect the installation of source distributions which are tar archives as source distributions already allow arbitrary code execution during the build process. However when evaluating source distributions it's important to avoid installing source distributions with suspicious links."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.18"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-89422","versionConstraint":">= 22.2, < 27.3.4.18||>= 28, < 28.5.0.7||>= 29, < 29.1.1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-89422","fix":{"state":"fixed","versions":["27.3.4.18","28.5.0.7","29.1.1"],"available":[{"date":"2026-09-30","kind":"first-observed","version":"27.3.4.18"},{"date":"2026-09-30","kind":"first-observed","version":"28.5.0.7"},{"date":"2026-09-30","kind":"first-observed","version":"29.1.1"}]},"cvss":[{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":9.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-89422","cwe":"CWE-322","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-89422","date":"2026-11-12","epss":0.0046,"percentile":0.4033}],"risk":0.4209,"urls":["https://cna.erlef.org/cves/CVE-2026-89422.html","https://github.com/erlang/otp/commit/21b8a1b0ad0adf200682b3854bc50114ab2b8c62","https://github.com/erlang/otp/commit/98c66c858113949c4262d26cd7d426c4b09d2b35","https://github.com/erlang/otp/commit/afec5156361bb50d3607c7c1a453c19b9149b324","https://github.com/erlang/otp/commit/fd1d9d07fc92ec0d59f96dfb66182195882bb7dd","https://github.com/erlang/otp/security/advisories/GHSA-rgxr-4g4w-j875","https://osv.dev/vulnerability/EEF-CVE-2026-89422","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-89422","description":"Key Exchange without Entity Authentication vulnerability in Erlang/OTP ssl allows a peer that answers a TLS 1.3 client connection to impersonate the intended server. A pre_shared_key extension in the ServerHello that the client never offered causes the client to complete the handshake without validating the server's certificate, so ssl:connect returns {ok, Socket} against a peer holding no certificate, no private key and no prior session.\n\ntls_client_connection_1_3:handle_server_hello/2 passes the received extension to tls_gen_connection_1_3:handle_resumption/2, which sets resumption = true on its mere presence without checking that the client offered a PSK. tls_handshake_1_3:get_pre_shared_key/4 meanwhile falls back to the all-zero \"no PSK\" value and keys the handshake with the ordinary non-PSK schedule, so the attacker's own ephemeral key suffices. The resumption flag then routes maybe_resumption/1 straight to wait_finished, skipping the certificate-handling states, so certificate path validation, verify_fun, hostname verification, partial_chain, CRL checking and OCSP stapling are all bypassed. The default client configuration is affected; clients restricted to TLS 1.2 are not.\n\nThis issue affects OTP from OTP 22.2 before OTP 27.3.4.18, OTP 28.5.0.7, and OTP 29.1.1, corresponding to ssl from 9.5 before 11.2.12.13, 11.6.0.6, and 11.7.7."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-17084","versionConstraint":"< 3.10.22||>= 3.11.0, < 3.11.17||>= 3.12.0, < 3.12.15||>= 3.13.0, < 3.13.16||>= 3.14.0, < 3.14.8||>= 3.15.0a1, < 3.15.0rc2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-17084","versionConstraint":"< 3.10.22||>= 3.11.0, < 3.11.17||>= 3.12.0, < 3.12.15||>= 3.13.0, < 3.13.16||>= 3.14.0, < 3.14.8||>= 3.15.0a1, < 3.15.0rc2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-17084","fix":{"state":"fixed","versions":["3.10.22","3.11.17","3.12.15","3.13.16","3.14.8","3.15.0rc2"],"available":[{"date":"2026-10-02","kind":"first-observed","version":"3.10.22"},{"date":"2026-10-02","kind":"first-observed","version":"3.11.17"},{"date":"2026-10-01","kind":"first-observed","version":"3.12.15"},{"date":"2026-10-01","kind":"first-observed","version":"3.13.16"},{"date":"2026-10-01","kind":"first-observed","version":"3.14.8"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0rc2"},{"date":"2026-09-09","kind":"first-observed","version":"3.15.0rc2"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-17084","cwe":"CWE-436","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-17084","date":"2026-11-12","epss":0.00762,"percentile":0.5585}],"risk":0.41910000000000003,"urls":["https://github.com/python/cpython/commit/1e54caa096678a38afcabecabb1ff72400dd6bae","https://github.com/python/cpython/commit/5181304bcec9cfc3c15311741c9154cdff2e3fd7","https://github.com/python/cpython/commit/69f92ebaec681e9149dfd70fd02d4ed52d2a6296","https://github.com/python/cpython/commit/7e109d084d55e7eb25837a5f3b47ef9beee547bc","https://github.com/python/cpython/commit/c016c2535b74227fddf2cf7334dbfead6c930214","https://github.com/python/cpython/commit/c28b121a4f0b975937c8b5a1b4934bb361d84296","https://github.com/python/cpython/commit/c42790b34f634051750e5da340d17c7da19e4784","https://github.com/python/cpython/commit/d397a4979cfc80a8cd6c73838aa10e9c8cf5ef72","https://github.com/python/cpython/issues/155292","https://github.com/python/cpython/pull/155293","https://mail.python.org/archives/list/security-announce@python.org/thread/EUHHTC6EV7HCLSUHP25C5VHSV4V2MUZN/","http://www.openwall.com/lists/oss-security/2026/08/18/2","https://cert-portal.siemens.com/productcert/html/ssa-457936.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-17084","description":"The \"stringprep\" module didn't process characters from RFC 3454 tables \nB.2 or B.3 correctly: the latest Unicode codepoint attributes were used \ninstead of the specified Unicode 3.2.0. This behavior would cause \nmismatches when processing domain names using IDNA 2003 (the \"idna\" \ncodec) and the in_table_b2() function of the \"stringprep\" module. This \nonly affects domain names containing characters that were not previously\n registered or had their Unicode attributes such as case-folding \nbehavior updated since Unicode 3.2.0."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-55952","versionConstraint":">= 22.2, < 27.3.4.14||>= 28.0, < 28.5.0.3||>= 29.0, < 29.0.3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-55952","fix":{"state":"fixed","versions":["27.3.4.14","28.5.0.3","29.0.3"],"available":[{"date":"2026-08-21","kind":"first-observed","version":"27.3.4.14"},{"date":"2026-08-21","kind":"first-observed","version":"28.5.0.3"},{"date":"2026-08-21","kind":"first-observed","version":"29.0.3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-55952","cwe":"CWE-1284","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-55952","date":"2026-11-12","epss":0.00545,"percentile":0.46214}],"risk":0.4182875,"urls":["https://cna.erlef.org/cves/CVE-2026-55952.html","https://github.com/erlang/otp/commit/095f744713c325acdbd18c23e397f04593c06275","https://github.com/erlang/otp/commit/2c3e599797644310e5d4aa39c7193420e59dadff","https://github.com/erlang/otp/commit/339a279f02ce38a7b23010e56000613e19abb21f","https://github.com/erlang/otp/commit/9b5437c72fa3403a75c1aba28e5c532bc191c662","https://github.com/erlang/otp/commit/e77823e6d980b2ec0b4fe4ea3f2d098ca239e3ce","https://github.com/erlang/otp/security/advisories/GHSA-8c57-44c9-pc59","https://osv.dev/vulnerability/EEF-CVE-2026-55952","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-55952","description":"The Erlang/OTP ssl application does not validate that the PSK identity list and binder list carried in a TLS 1.3 ClientHello pre-shared key extension have equal length before passing them to the session ticket handler. In tls_handshake_1_3:handle_pre_shared_key/3, an OfferedPreSharedKeys record with a mismatched number of identities and binders is forwarded directly to tls_server_session_ticket:use/4, which crashes the session ticket handler process.\n\nAn unauthenticated remote attacker can send a single crafted ClientHello to a TLS 1.3 server with session tickets enabled (stateful or stateless mode) and permanently disrupt session ticket handling on that listener. New TLS 1.3 handshakes complete but subsequently crash when the server attempts to issue a session ticket, effectively making TLS 1.3 unusable on the affected listener until the ssl application is restarted. TLS 1.2 connections are not affected.\n\nThis issue affects OTP from OTP 22.2 before OTP 27.3.4.14, OTP 28.5.0.3, and OTP 29.0.3, corresponding to ssl from 9.5 before 11.2.12.10, 11.6.0.3, and 11.7.3."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.17"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-73812","versionConstraint":">= 17.0, < 27.3.4.17||>= 28.0, < 28.5.0.6||>= 29.0, < 29.0.6||>= 6.0, < 9.3.2.7||>= 9.4, < 9.6.2.3||>= 9.7, < 9.7.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-73812","fix":{"state":"fixed","versions":["9.3.2.7","9.6.2.3","9.7.2","27.3.4.17","28.5.0.6","29.0.6"],"available":[{"date":"2026-09-04","kind":"first-observed","version":"27.3.4.17"},{"date":"2026-09-04","kind":"first-observed","version":"28.5.0.6"},{"date":"2026-09-04","kind":"first-observed","version":"29.0.6"},{"date":"2026-09-04","kind":"first-observed","version":"9.3.2.7"},{"date":"2026-09-04","kind":"first-observed","version":"9.6.2.3"},{"date":"2026-09-04","kind":"first-observed","version":"9.7.2"}]},"cvss":[{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-73812","cwe":"CWE-444","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-73812","date":"2026-11-12","epss":0.00524,"percentile":0.44929}],"risk":0.41396,"urls":["https://cna.erlef.org/cves/CVE-2026-73812.html","https://github.com/erlang/otp/commit/591dc00dc99dc2a426167a3b5257c0c94bd45e91","https://github.com/erlang/otp/security/advisories/GHSA-7j6m-4ffg-hg46","https://osv.dev/vulnerability/EEF-CVE-2026-73812","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-73812","description":"httpd function check_header/3 rejects duplicate Content-Length (per CVE-2026-23941) but never checks for the TE+CL co-presence that RFC 9112 §6.3 identifies as a probable smuggling attempt. handle_body/3 frames by chunked and silently discards Content-Length. A CL-preferring front-end paired with chunked-preferring inets creates a classic CL.TE front-end/back-end desync.\n\nThis issue affects OTP from OTP 17.0 before OTP 27.3.4.17, OTP 28.5.0.6, and OTP 29.0.6, corresponding to inets from 5.10 before 9.3.2.7, 9.6.2.3, and 9.7.2. Whether OTP before OTP 17.0, corresponding to inets before 5.10, is affected is unknown."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-19553","versionConstraint":"< 3.10.22||>= 3.11.0, < 3.11.17||>= 3.12.0, < 3.12.15||>= 3.13.0, < 3.13.16||>= 3.14.0, < 3.14.8||>= 3.15.0a1, < 3.15.0rc3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-19553","fix":{"state":"fixed","versions":["3.10.22","3.11.17","3.12.15","3.13.16","3.14.8","3.15.0rc3"],"available":[{"date":"2026-10-08","kind":"first-observed","version":"3.10.22"},{"date":"2026-10-08","kind":"first-observed","version":"3.11.17"},{"date":"2026-10-08","kind":"first-observed","version":"3.12.15"},{"date":"2026-10-08","kind":"first-observed","version":"3.13.16"},{"date":"2026-10-08","kind":"first-observed","version":"3.14.8"},{"date":"2026-10-08","kind":"first-observed","version":"3.15.0rc3"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19553","cwe":"CWE-297","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-19553","date":"2026-11-12","epss":0.00547,"percentile":0.46312}],"risk":0.412985,"urls":["https://github.com/python/cpython/commit/1697ea386c707142555d98a1263176bbbc014a96","https://github.com/python/cpython/commit/5867d4e4ae6d1062352baf6b497a4026e8578ccf","https://github.com/python/cpython/commit/641390146a16a38e6701923f4ee4f1940ae77082","https://github.com/python/cpython/commit/869069d52ce0efab2f8c38197e92cdaaa312f1ed","https://github.com/python/cpython/commit/966bf426d0b6c31c1b0a255ff14a17143a466ced","https://github.com/python/cpython/commit/bdebbf9b366ec91e9cd9daa0b3510c9e84b60b80","https://github.com/python/cpython/commit/f4e43ba525187282f2011da0e6ffc0d2b08d8062","https://github.com/python/cpython/issues/156793","https://github.com/python/cpython/pull/158503","https://mail.python.org/archives/list/security-announce@python.org/thread/QNZRG3YOAMTHDCMVCICXGY6YEFPY2VDL/","http://www.openwall.com/lists/oss-security/2026/09/30/16","https://cert-portal.siemens.com/productcert/html/ssa-457936.html"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19553","description":"ssl.SSLContext.wrap_bio() didn't require the server_hostname argument\nto not be None if ssl.SSLContext.check_hostname was set. Due to a\nmissing parameter check in SSLObject, if the server_hostname argument\nisn't supplied then hostname verification would be silently skipped.\n\n\nThis defect could lead to programs where certificate hostname verification\n*appeared* to be succeeding with SSLContext.check_hostname = True and no\nValueError being raised due to misconfiguration.\n\n\nIf the program passes a server_hostname value that isn't an empty string\nor None to any of these APIs then certificate hostname verification\nproceeds as expected and the program is not affected by this vulnerability.\n\n\nMitigating this vulnerability doesn't require updating Python or applying\nthe patch. To mitigate, pass a valid non-None and non-empty\nserver_hostname value to SSLContext.wrap_bio(),\nasyncio.create_connection(), or asyncio.loop.start_tls() and\ncertificate hostname verification will proceed as expected. Upgrading to\nthe latest version of Python or applying the patch only changes the\nbehavior from silently skipping hostname verification to raising a\nValueError, similar to SSLContext.wrap_socket(), when server_hostname\nisn't supplied."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"26.2.5.18"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-23943","versionConstraint":">= 17.0, < 26.2.5.18||>= 27, < 27.3.4.9||>= 28, < 28.4.1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-23943","fix":{"state":"fixed","versions":["26.2.5.18","27.3.4.9","28.4.1"],"available":[{"date":"2026-08-21","kind":"first-observed","version":"26.2.5.18"},{"date":"2026-08-21","kind":"first-observed","version":"27.3.4.9"},{"date":"2026-08-21","kind":"first-observed","version":"28.4.1"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-23943","cwe":"CWE-409","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-23943","date":"2026-11-12","epss":0.00743,"percentile":0.55195}],"risk":0.412365,"urls":["https://cna.erlef.org/cves/CVE-2026-23943.html","https://github.com/erlang/otp/commit/07b8f441ca711f9812fad9e9115bab3c3aa92f79","https://github.com/erlang/otp/commit/0c1c04b191f6ab940e8fcfabce39eb5a8a6440a4","https://github.com/erlang/otp/commit/43a87b949bdff12d629a8c34146711d9da93b1b1","https://github.com/erlang/otp/commit/93073c3bd338c60cd2bae715ce6a1d4ffc1a8fd3","https://github.com/erlang/otp/security/advisories/GHSA-c836-qprm-jw9r","https://osv.dev/vulnerability/EEF-CVE-2026-23943","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-23943","description":"Improper Handling of Highly Compressed Data (Compression Bomb) vulnerability in Erlang OTP ssh (ssh_transport modules) allows Denial of Service via Resource Depletion.\n\nThe SSH transport layer advertises legacy zlib compression by default and inflates attacker-controlled payloads pre-authentication without any size limit, enabling reliable memory exhaustion DoS.\n\nTwo compression algorithms are affected:\n\n* zlib: Activates immediately after key exchange, enabling unauthenticated attacks\n* zlib@openssh.com: Activates post-authentication, enabling authenticated attacks\n\nEach SSH packet can decompress ~255 MB from 256 KB of wire data (1029:1 amplification ratio). Multiple packets can rapidly exhaust available memory, causing OOM kills in memory-constrained environments.\n\nThis vulnerability is associated with program files lib/ssh/src/ssh_transport.erl and program routines ssh_transport:decompress/2, ssh_transport:handle_packet_part/4.\n\nThis issue affects OTP from OTP 17.0 before OTP 26.2.5.18, OTP 27.3.4.9, and OTP 28.4.1, corresponding to ssh from 3.0.1 before 5.1.4.14, 5.2.11.6, and 5.5.1."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.17"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70405","versionConstraint":">= 18.0, < 27.3.4.17||>= 28.0, < 28.5.0.6||>= 29.0, < 29.0.6||>= 4.25.1, < 5.18.2.1||>= 5.19, < 5.20.2.2||>= 5.20.3, < 5.20.5 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70405","fix":{"state":"fixed","versions":["5.18.2.1","5.20.2.2","5.20.5","27.3.4.17","28.5.0.6","29.0.6"],"available":[{"date":"2026-09-04","kind":"first-observed","version":"27.3.4.17"},{"date":"2026-09-04","kind":"first-observed","version":"28.5.0.6"},{"date":"2026-09-04","kind":"first-observed","version":"29.0.6"},{"date":"2026-09-04","kind":"first-observed","version":"5.18.2.1"},{"date":"2026-09-04","kind":"first-observed","version":"5.20.2.2"},{"date":"2026-09-04","kind":"first-observed","version":"5.20.5"}]},"cvss":[{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70405","cwe":"CWE-1284","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-70405","date":"2026-11-12","epss":0.0071,"percentile":0.54002}],"risk":0.40114999999999995,"urls":["https://cna.erlef.org/cves/CVE-2026-70405.html","https://github.com/erlang/otp/commit/aba0fe8c2d700bf4ac94607cf7f00e53bbe4042d","https://github.com/erlang/otp/commit/e3be1cfe9f6cedd0cd20d9905e05601dfb31c8aa","https://github.com/erlang/otp/security/advisories/GHSA-q7cq-pfgf-5hr7","https://osv.dev/vulnerability/EEF-CVE-2026-70405","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70405","description":"Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP snmp allows a remote attacker to degrade availability by sending an SNMP message containing a BER INTEGER whose length field is arbitrarily large.\n\nsnmp_pdus:dec_integer_notag/1 defaults its size limit to infinity, and do_dec_integer_notag/2 then accumulates the value across every declared byte with a recursive shift and bitwise or. Work grows superlinearly in the declared length because each operation acts on a progressively larger bignum. The size-limited variant dec_integer_notag/2 exists but is reached from only one call site, dec_snmp_version/1, which bounds the version field to ten bytes; the request identifier, error status and index, generic and specific trap fields, engine boots and time, and every varbind value decoded by dec_value/1 all use the unbounded form. The decode runs before the PDU is processed, so no valid request is required beyond what the deployment demands to accept the message at all.\n\nThis issue affects OTP from OTP 17.0 before OTP 27.3.4.17, OTP 28.5.0.6, and OTP 29.0.6, corresponding to snmp from 4.25.1 before 5.18.2.1, 5.20.2.2, and 5.20.5. Whether OTP before OTP 17.0, corresponding to snmp before 4.25.1, is affected is unknown."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-49759","versionConstraint":">= 17.0, < 27.3.4.13||>= 28.0.0, < 28.5.0.2||>= 29.0.0, < 29.0.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-49759","fix":{"state":"fixed","versions":["27.3.4.13","28.5.0.2","29.0.2"],"available":[{"date":"2026-08-21","kind":"first-observed","version":"27.3.4.13"},{"date":"2026-08-21","kind":"first-observed","version":"28.5.0.2"},{"date":"2026-08-21","kind":"first-observed","version":"29.0.2"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-49759","cwe":"CWE-121","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"},{"cve":"CVE-2026-49759","cwe":"CWE-120","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-49759","date":"2026-11-12","epss":0.00497,"percentile":0.43141}],"risk":0.39511499999999994,"urls":["https://cna.erlef.org/cves/CVE-2026-49759.html","https://github.com/erlang/otp/commit/3983d495284331c121f600a80bac9fcf4e16381e","https://github.com/erlang/otp/security/advisories/GHSA-6f4f-chj5-5g97","https://osv.dev/vulnerability/EEF-CVE-2026-49759","https://www.erlang.org/doc/system/versions.html#order-of-versions","https://access.redhat.com/security/cve/CVE-2026-49759","https://bugzilla.redhat.com/show_bug.cgi?id=2487607","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-49759.json"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-49759","description":"Stack-based Buffer Overflow vulnerability in Erlang OTP erts (inet_drv) allows an unauthenticated remote attacker to crash the BEAM VM by sending a crafted SCTP ERROR chunk.\n\nThe sctp_parse_error_chunk function in erts/emulator/drivers/common/inet_drv.c parses SCTP ERROR chunks and writes cause codes into a fixed-size stack-allocated ErlDrvTermData spec[] array without checking bounds. A remote attacker who has established an SCTP association to a listening port can send a single crafted SCTP ERROR chunk containing enough cause codes to overflow the stack buffer, crashing the VM. The attacker can only write 16-bit values interleaved with a fixed tag, so the overflow does not provide a controlled return address, limiting exploitation to Denial of Service.\n\nA crafted SCTP ERROR chunk may also leak bits and pieces of Erlang VM memory into the received error packet observed by the Erlang process. Such data is already readable by the user running the Erlang VM, so the disclosure scope is limited.\n\nThis issue affects OTP from OTP 17.0 before OTP 27.3.4.13, OTP 28.5.0.2, and OTP 29.0.2, corresponding to erts from 6.0 before 15.2.7.9, 16.4.0.2, and 17.0.2. Whether OTP before OTP 17.0, corresponding to erts before 6.0, is affected is unknown."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-3644","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.13||>= 3.14.0, < 3.14.4||>= 3.15.0a1, < 3.15.0a8 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-3644","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.13||>= 3.14.0, < 3.14.4||>= 3.15.0a1, < 3.15.0a8 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-3644","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.13","3.14.4","3.15.0a8"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.4"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0a8"},{"date":"2026-09-15","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-15","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-15","kind":"first-observed","version":"3.12.14"},{"date":"2026-04-10","kind":"first-observed","version":"3.13.13"},{"date":"2026-04-10","kind":"first-observed","version":"3.14.4"},{"date":"2026-04-10","kind":"first-observed","version":"3.15.0a8"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3644","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-3644","cwe":"CWE-116","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-3644","date":"2026-11-12","epss":0.00543,"percentile":0.46116}],"risk":0.3868875,"urls":["https://github.com/python/cpython/commit/3974092b037f9a3b000fb15b48ea61ce3b25d330","https://github.com/python/cpython/commit/556aa098e738b127c714866f819b4abe2f7593d8","https://github.com/python/cpython/commit/57e88c1cf95e1481b94ae57abe1010469d47a6b4","https://github.com/python/cpython/commit/62ceb396fcbe69da1ded3702de586f4072b590dd","https://github.com/python/cpython/commit/d16ecc6c3626f0e2cc8f08c309c83934e8a979dd","https://github.com/python/cpython/commit/dae4b1a21f8df4570e30986affd61bbe4ade4cef","https://github.com/python/cpython/issues/145599","https://github.com/python/cpython/pull/145600","https://mail.python.org/archives/list/security-announce@python.org/thread/H6CADMBCDRFGWCMOXWUIHFJNV43GABJ7/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-3644","description":"The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output()."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-58227","versionConstraint":">= 23.2, < 27.3.4.15||>= 28, < 28.5.0.4||>= 29, < 29.0.4 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-58227","fix":{"state":"fixed","versions":["27.3.4.15","28.5.0.4","29.0.4"],"available":[{"date":"2026-08-21","kind":"first-observed","version":"27.3.4.15"},{"date":"2026-08-21","kind":"first-observed","version":"28.5.0.4"},{"date":"2026-08-21","kind":"first-observed","version":"29.0.4"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-58227","cwe":"CWE-674","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-58227","date":"2026-11-12","epss":0.00478,"percentile":0.41738}],"risk":0.37284000000000006,"urls":["https://cna.erlef.org/cves/CVE-2026-58227.html","https://github.com/erlang/otp/commit/0307bff2c72b685c6bd952daaac6bd661c247d62","https://github.com/erlang/otp/commit/241d43703989fec4b6bf637beaeb366d92dcc4c2","https://github.com/erlang/otp/commit/7db64720177961e04545681480d691c4be81c54d","https://github.com/erlang/otp/commit/addc42df113f8f15fc20e9dff45490b3ce0d3d6b","https://github.com/erlang/otp/security/advisories/GHSA-r5jr-mq46-vmhw","https://osv.dev/vulnerability/EEF-CVE-2026-58227","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-58227","description":"The Erlang/OTP ssl application does not detect cycles when reconstructing an incomplete peer certificate chain during a TLS or DTLS handshake. In ssl_certificate:handle_incomplete_chain/5, the received chain is passed to ssl_certificate:build_certificate_chain/5, which walks issuer relationships via ssl_certificate:do_certificate_chain/7 with no cycle detection and no depth limit. When the peer supplies two mutually cross-signed certificates in unordered form (A issues B, B issues A), the issuer lookup alternates between the two certificates and the pair of functions recurses indefinitely, growing the call stack and chain accumulator without bound.\n\nAn unauthenticated remote attacker can send a crafted certificate chain in a TLS or DTLS Certificate handshake message to exhaust available memory and crash the BEAM node. Only a TCP connection and a partial handshake are required; no authentication or completed handshake is needed, and both TLS/DTLS servers and clients are affected when processing peer certificate messages.\n\nThis issue affects OTP from OTP 23.2 before OTP 27.3.4.15, OTP 28.5.0.4, and OTP 29.0.4, corresponding to ssl from 10.2 before 11.2.12.11, 11.6.0.4, and 11.7.4."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.19"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-94200","versionConstraint":">= 23.3, < 27.3.4.19||>= 28.0.0.0, < 28.5.0.8||>= 29.0.0, < 29.1.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-94200","fix":{"state":"fixed","versions":["27.3.4.19","28.5.0.8","29.1.2"],"available":[{"date":"2026-10-20","kind":"first-observed","version":"27.3.4.19"},{"date":"2026-10-20","kind":"first-observed","version":"28.5.0.8"},{"date":"2026-10-20","kind":"first-observed","version":"29.1.2"}]},"cvss":[{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94200","cwe":"CWE-1288","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-94200","date":"2026-11-12","epss":0.00461,"percentile":0.40453}],"risk":0.361885,"urls":["https://cna.erlef.org/cves/CVE-2026-94200.html","https://github.com/erlang/otp/commit/00a333bcf2800b69f540369b54167e897dae7219","https://github.com/erlang/otp/commit/0abe6f66db0d295cd06b0efab3bdb3caa2803930","https://github.com/erlang/otp/commit/66febc190e6dc42a5c4aedbfe250bf9a2edc2d5e","https://github.com/erlang/otp/commit/cd0334854bf3ef56dc16f9fb728efe88fb05c4ac","https://github.com/erlang/otp/security/advisories/GHSA-m5mh-q53w-67jq","https://osv.dev/vulnerability/EEF-CVE-2026-94200","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-94200","description":"Improper Validation of Consistency within Input vulnerability in Erlang OTP ssl (tls_handshake_1_3, ssl_handshake and tls_client_ticket_store modules) allows a malicious TLS 1.3 server to cause a denial of service of the ssl application on the client node.\n\nThe TLS 1.3 client decodes the extensions of a NewSessionTicket message as if they came from EncryptedExtensions. It therefore accepts a 0-length early_data extension, a form that is only valid in ClientHello and EncryptedExtensions. With {session_tickets, auto}, the client stores the ticket in the node-global tls_client_ticket_store. On the next automatic resumption, tls_handshake_1_3:get_max_early_data/1 crashes the store with a case_clause. Repeated crashes can exceed the restart intensity of the ssl supervisors, which use the rest_for_one strategy, and take down ssl for all connections on the node.\n\nThis issue affects OTP from OTP 23.3 before OTP 27.3.4.19, OTP 28.5.0.8, and OTP 29.1.2, corresponding to ssl from 10.3 before 11.2.12.14, 11.6.0.7, and 11.7.8."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"25.3.2.18"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-26618","versionConstraint":"< 25.3.2.18||>= 26.0.0.0, < 26.2.5.9||>= 27.0.0, < 27.2.4 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-26618","fix":{"state":"fixed","versions":["25.3.2.18","26.2.5.9","27.2.4"],"available":[{"date":"2025-02-22","kind":"first-observed","version":"25.3.2.18"},{"date":"2025-02-22","kind":"first-observed","version":"26.2.5.9"},{"date":"2025-02-22","kind":"first-observed","version":"27.2.4"}]},"cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-26618","cwe":"CWE-789","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-26618","date":"2026-11-12","epss":0.00498,"percentile":0.43181}],"risk":0.36105,"urls":["https://github.com/erlang/otp/commit/0ed2573cbd55c92e9125c9dc70fa1ca7fed82872","https://github.com/erlang/otp/security/advisories/GHSA-78cv-45vx-q6fr","https://lists.debian.org/debian-lts-announce/2025/04/msg00028.html","https://erlang.org/download/OTP-27.2.4.README.md"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-26618","description":"Erlang is a programming language and runtime system for building massively scalable soft real-time systems with requirements on high availability. OTP is a set of Erlang libraries, which consists of the Erlang runtime system, a number of ready-to-use components mainly written in Erlang. Packet size is not verified properly for SFTP packets. As a result when multiple SSH packets (conforming to max SSH packet size) are received by ssh, they might be combined into an SFTP packet which will exceed the max allowed packet size and potentially cause large amount of memory to be allocated. Note that situation described above can only happen for successfully authenticated users after completing the SSH handshake. This issue has been patched in OTP versions 27.2.4, 26.2.5.9, and 25.3.2.18. There are no known workarounds for this vulnerability."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.17"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-74994","versionConstraint":">= 17.0, < 27.3.4.17||>= 28.0, < 28.5.0.6||>= 29.0, < 29.0.6||>= 6.0, < 9.3.2.7||>= 9.4, < 9.6.2.3||>= 9.7, < 9.7.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-74994","fix":{"state":"fixed","versions":["9.3.2.7","9.6.2.3","9.7.2","27.3.4.17","28.5.0.6","29.0.6"],"available":[{"date":"2026-09-04","kind":"first-observed","version":"27.3.4.17"},{"date":"2026-09-04","kind":"first-observed","version":"28.5.0.6"},{"date":"2026-09-04","kind":"first-observed","version":"29.0.6"},{"date":"2026-09-04","kind":"first-observed","version":"9.3.2.7"},{"date":"2026-09-04","kind":"first-observed","version":"9.6.2.3"},{"date":"2026-09-04","kind":"first-observed","version":"9.7.2"}]},"cvss":[{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-74994","cwe":"CWE-863","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"},{"cve":"CVE-2026-74994","cwe":"CWE-1289","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-74994","date":"2026-11-12","epss":0.00648,"percentile":0.51561}],"risk":0.3564,"urls":["https://cna.erlef.org/cves/CVE-2026-74994.html","https://github.com/erlang/otp/commit/6101cb74ff2870718c622ba7af0c100f7f2524e3","https://github.com/erlang/otp/commit/6982e381137ede21a4e1faf5fa2dd82321691176","https://github.com/erlang/otp/commit/c5ccec8ed25c70ec6557fd81277e4b2f52285c19","https://github.com/erlang/otp/security/advisories/GHSA-c3cq-q8x6-547g","https://osv.dev/vulnerability/EEF-CVE-2026-74994","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-74994","description":"The mod_auth module in OTP's inets httpd server, when configured with dets or mnesia authentication backends and multiple directory configuration blocks, collapses all directory blocks into a single shared user/group namespace. A user added to one protected directory is accepted as valid for all other protected directories on the same server instance.\n\nThis issue affects OTP from OTP 17.0 before OTP 27.3.4.17, OTP 28.5.0.6, and OTP 29.0.6, corresponding to inets from 5.10 before 9.3.2.7, 9.6.2.3, and 9.7.2. Whether OTP before OTP 17.0, corresponding to inets before 5.10, is affected is unknown."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-7774","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0, < 3.14.6||>= 3.15.0a1, < 3.15.0b2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-7774","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0, < 3.14.6||>= 3.15.0a1, < 3.15.0b2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-7774","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.14","3.14.6","3.15.0b2"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.6"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0b2"},{"date":"2026-08-19","kind":"first-observed","version":"3.10.21"},{"date":"2026-08-19","kind":"first-observed","version":"3.11.16"},{"date":"2026-08-19","kind":"first-observed","version":"3.12.14"},{"date":"2026-06-18","kind":"first-observed","version":"3.13.14"},{"date":"2026-06-18","kind":"first-observed","version":"3.14.6"},{"date":"2026-06-05","kind":"first-observed","version":"3.15.0b2"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-7774","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-7774","date":"2026-11-12","epss":0.00598,"percentile":0.4915}],"risk":0.35580999999999996,"urls":["https://github.com/python/cpython/commit/0478bd83d82b255e0f29f613367a59d261e7eaa2","https://github.com/python/cpython/commit/0d28f5e46e151718972dfabd91205444d0037b6d","https://github.com/python/cpython/commit/10a13bee3c24f9c62b602e696334ff2272a40efc","https://github.com/python/cpython/commit/578411982c16f753f4893532510099ef665117da","https://github.com/python/cpython/commit/5cf47a248c35c375d610b87b2f72fd1ed454b558","https://github.com/python/cpython/commit/74cca9a92fb7d653e404843a56b8bdc7b0afdbbf","https://github.com/python/cpython/commit/c063191cb7f9170f9565e305f8aa2b79ab2bf609","https://github.com/python/cpython/issues/149486","https://github.com/python/cpython/pull/149487","https://mail.python.org/archives/list/security-announce@python.org/thread/4FU62L2M6RMMHT2QPGQNPEHHUND7CEX5/","http://www.openwall.com/lists/oss-security/2026/06/04/9"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-7774","description":"tarfile.data_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extractall() to write files outside the destination directory, subject to the permissions of the extracting process."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"26.2.5.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-48041","versionConstraint":">= 17.0, < 26.2.5.15||>= 27, < 27.3.4.3||>= 28, < 28.0.3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-48041","fix":{"state":"fixed","versions":["26.2.5.15","27.3.4.3","28.0.3"],"available":[{"date":"2026-08-21","kind":"first-observed","version":"26.2.5.15"},{"date":"2026-08-21","kind":"first-observed","version":"27.3.4.3"},{"date":"2026-08-21","kind":"first-observed","version":"28.0.3"}]},"cvss":[{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48041","cwe":"CWE-400","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"},{"cve":"CVE-2025-48041","cwe":"CWE-770","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2025-48041","date":"2026-11-12","epss":0.00487,"percentile":0.42434}],"risk":0.35551000000000005,"urls":["https://cna.erlef.org/cves/CVE-2025-48041.html","https://github.com/erlang/otp/commit/07b8f441ca711f9812fad9e9115bab3c3aa92f79","https://github.com/erlang/otp/commit/5f9af63eec4657a37663828d206517828cb9f288","https://github.com/erlang/otp/commit/d49efa2d4fa9e6f7ee658719cd76ffe7a33c2401","https://github.com/erlang/otp/pull/10157","https://github.com/erlang/otp/security/advisories/GHSA-79c4-cvv7-4qm3","https://osv.dev/vulnerability/EEF-CVE-2025-48041","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-48041","description":"Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Flooding.\n\nThis vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl.\n\nThis issue affects OTP from OTP 17.0 before OTP 26.2.5.15, OTP 27.3.4.3, and OTP 28.0.3, corresponding to ssh from 3.0.1 before 5.1.4.12, 5.2.11.3, and 5.3.3."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"25.3.2.19"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-30211","versionConstraint":"< 25.3.2.19||>= 26, < 26.2.5.10||>= 27, < 27.3.1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-30211","fix":{"state":"fixed","versions":["25.3.2.19","26.2.5.10","27.3.1"],"available":[{"date":"2025-04-01","kind":"first-observed","version":"25.3.2.19"},{"date":"2025-04-01","kind":"first-observed","version":"26.2.5.10"},{"date":"2025-04-01","kind":"first-observed","version":"27.3.1"}]},"cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-30211","cwe":"CWE-789","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-30211","date":"2026-11-12","epss":0.00472,"percentile":0.41279}],"risk":0.35400000000000004,"urls":["https://github.com/erlang/otp/security/advisories/GHSA-vvr3-fjhh-cfwc","https://lists.debian.org/debian-lts-announce/2025/04/msg00028.html"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-30211","description":"Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.1, 26.2.5.10, and 25.3.2.19, a maliciously formed KEX init message can result with high memory usage. Implementation does not verify RFC specified limits on algorithm names (64 characters) provided in KEX init message. Big KEX init packet may lead to inefficient processing of the error data. As a result, large amount of memory will be allocated for processing malicious data. Versions OTP-27.3.1, OTP-26.2.5.10, and OTP-25.3.2.19 fix the issue. Some workarounds are available. One may set option `parallel_login` to `false` and/or reduce the `max_sessions` option."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-9669","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0, < 3.14.6||>= 3.15.0a1, < 3.15.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-9669","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0, < 3.14.6||>= 3.15.0a1, < 3.15.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-9669","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.14","3.14.6","3.15.0b3"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.6"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0b3"},{"date":"2026-08-19","kind":"first-observed","version":"3.10.21"},{"date":"2026-08-19","kind":"first-observed","version":"3.11.16"},{"date":"2026-08-19","kind":"first-observed","version":"3.12.14"},{"date":"2026-06-25","kind":"first-observed","version":"3.13.14"},{"date":"2026-06-25","kind":"first-observed","version":"3.14.6"},{"date":"2026-06-25","kind":"first-observed","version":"3.15.0b3"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-9669","cwe":"CWE-121","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-9669","date":"2026-11-12","epss":0.00428,"percentile":0.37485}],"risk":0.33597999999999995,"urls":["https://github.com/python/cpython/commit/157a5df8cb5d82b33f918a7489e72ce95ceb12b6","https://github.com/python/cpython/commit/1ba6135eae75ad8413413caeeedb56ae72320636","https://github.com/python/cpython/commit/5755d0f083949ff3c5bf3a37e673e24e306b036e","https://github.com/python/cpython/commit/619a12b2e545391dc436b3af79dda22337382a6f","https://github.com/python/cpython/commit/938ec030e90c5e53f1faac6fab1643f14e4f4a79","https://github.com/python/cpython/commit/991e6cf86496718c4ef00b362d640e00cb5c85b2","https://github.com/python/cpython/commit/d3ca26983dfbccdf609f24ff5877dc3118e4702d","https://github.com/python/cpython/issues/150599","https://github.com/python/cpython/pull/150600","https://mail.python.org/archives/list/security-announce@python.org/thread/DBJZETMGUIFK7DVUWMOXHD3Z6IX2QPSX/","http://www.openwall.com/lists/oss-security/2026/06/08/17","https://cert-portal.siemens.com/productcert/html/ssa-457936.html"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-9669","description":"bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash the process when processing untrusted data."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.17"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70409","versionConstraint":">= 1.0.3, < 1.2.14.2||>= 1.2.15, < 1.2.16.1||>= 1.3, < 1.3.1||>= 17.0, < 27.3.4.17||>= 28.0, < 28.5.0.6||>= 29.0, < 29.0.6 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70409","fix":{"state":"fixed","versions":["1.2.14.2","1.2.16.1","1.3.1","27.3.4.17","28.5.0.6","29.0.6"],"available":[{"date":"2026-09-04","kind":"first-observed","version":"1.2.14.2"},{"date":"2026-09-04","kind":"first-observed","version":"1.2.16.1"},{"date":"2026-09-04","kind":"first-observed","version":"1.3.1"},{"date":"2026-09-04","kind":"first-observed","version":"27.3.4.17"},{"date":"2026-09-04","kind":"first-observed","version":"28.5.0.6"},{"date":"2026-09-04","kind":"first-observed","version":"29.0.6"}]},"cvss":[{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70409","cwe":"CWE-1284","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-70409","date":"2026-11-12","epss":0.0059,"percentile":0.48699}],"risk":0.33335,"urls":["https://cna.erlef.org/cves/CVE-2026-70409.html","https://github.com/erlang/otp/commit/aba0fe8c2d700bf4ac94607cf7f00e53bbe4042d","https://github.com/erlang/otp/commit/d8dbf15de4fa1a08b9a05e7d8e08fdb025fe1dc3","https://github.com/erlang/otp/commit/e3be1cfe9f6cedd0cd20d9905e05601dfb31c8aa","https://github.com/erlang/otp/security/advisories/GHSA-9vgh-c8cm-m9p4","https://osv.dev/vulnerability/EEF-CVE-2026-70409","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70409","description":"Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP eldap allows a malicious or compromised LDAP server to degrade availability by returning a referral URL whose port component is a very long run of digits.\n\neldap:parse_port/2 passes the port substring straight to list_to_integer/1 with no length bound. The surrounding try ... catch only rejects a value that fails to parse, so a syntactically valid port of up to roughly 1.26 million digits converts successfully and costs the caller hundreds of milliseconds of arbitrary-precision arithmetic per referral. The conversion function itself is documented to accept integers of any size, so bounding the input is the caller's responsibility. Reaching the flaw requires the application to pass a server-supplied referral to eldap:parse_ldap_url/1, which eldap never calls itself: referral strings are returned to the caller unparsed.\n\nThis issue affects OTP from OTP 17.0 before OTP 27.3.4.17, OTP 28.5.0.6, and OTP 29.0.6, corresponding to eldap from 1.0.3 before 1.2.14.2, 1.2.16.1, and 1.3.1."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"26.2.5.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-48040","versionConstraint":">= 17.0, < 26.2.5.15||>= 27, < 27.3.4.3||>= 28, < 28.0.3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-48040","fix":{"state":"fixed","versions":["26.2.5.15","27.3.4.3","28.0.3"],"available":[{"date":"2026-08-21","kind":"first-observed","version":"26.2.5.15"},{"date":"2026-08-21","kind":"first-observed","version":"27.3.4.3"},{"date":"2026-08-21","kind":"first-observed","version":"28.0.3"}]},"cvss":[{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48040","cwe":"CWE-400","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"},{"cve":"CVE-2025-48040","cwe":"CWE-770","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2025-48040","date":"2026-11-12","epss":0.00559,"percentile":0.4704}],"risk":0.332605,"urls":["https://cna.erlef.org/cves/CVE-2025-48040.html","https://github.com/erlang/otp/commit/07b8f441ca711f9812fad9e9115bab3c3aa92f79","https://github.com/erlang/otp/commit/548f1295d86d0803da884db8685cc16d461d0d5a","https://github.com/erlang/otp/commit/7cd7abb7e19e16b027eaee6a54e1f6fbbe21181a","https://github.com/erlang/otp/pull/10162","https://github.com/erlang/otp/security/advisories/GHSA-h7rg-6rjg-4cph","https://osv.dev/vulnerability/EEF-CVE-2025-48040","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-48040","description":"Uncontrolled Resource Consumption vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Flooding.\n\nThis vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl.\n\nThis issue affects OTP from OTP 17.0 before OTP 26.2.5.15, OTP 27.3.4.3, and OTP 28.0.3, corresponding to ssh from 3.0.1 before 5.1.4.12, 5.2.11.3, and 5.3.3."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-42792","versionConstraint":">= 17.0, < 27.3.4.15||>= 28, < 28.5.0.4||>= 29, < 29.0.4 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-42792","fix":{"state":"fixed","versions":["27.3.4.15","28.5.0.4","29.0.4"],"available":[{"date":"2026-08-21","kind":"first-observed","version":"27.3.4.15"},{"date":"2026-08-21","kind":"first-observed","version":"28.5.0.4"},{"date":"2026-08-21","kind":"first-observed","version":"29.0.4"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42792","cwe":"CWE-755","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"},{"cve":"CVE-2026-42792","cwe":"CWE-770","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-42792","date":"2026-11-12","epss":0.0046,"percentile":0.40377}],"risk":0.3312,"urls":["https://cna.erlef.org/cves/CVE-2026-42792.html","https://github.com/erlang/otp/commit/07b8f441ca711f9812fad9e9115bab3c3aa92f79","https://github.com/erlang/otp/commit/865d203e4a6a8f44179eced9e1428f9259e4a3bb","https://github.com/erlang/otp/security/advisories/GHSA-h6f3-hx58-xhj6","https://osv.dev/vulnerability/EEF-CVE-2026-42792","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42792","description":"Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts (epmd) allows an unauthenticated remote attacker to permanently terminate the Erlang Port Mapper Daemon (epmd) via connection slot exhaustion.\n\nThe do_accept function in erts/epmd/src/epmd_srv.c calls epmd_cleanup_exit() when accept(2) returns EMFILE (per-process file descriptor limit reached) or ENFILE (system-wide file descriptor limit reached), rather than treating these as recoverable conditions. An attacker can exhaust epmd's file descriptor slots by holding many TCP connections open while periodically sending a single byte to reset the idle timeout, then causing accept(2) to return EMFILE, which kills the daemon. epmd has no per-source-IP connection cap, making the attack feasible from a single source.\n\nOn Debian/Ubuntu default packaging the impact is amplified: the systemd unit inherits a low file descriptor soft limit, and repeated daemon deaths trigger systemd's start-rate-limit, permanently failing both epmd.service and epmd.socket and requiring manual operator intervention to recover.\n\nThis issue affects OTP from OTP 17.0 before OTP 27.3.4.15, OTP 28.5.0.4, and OTP 29.0.4, corresponding to erts from 6.0 before 15.2.7.11, 16.4.0.4, and 17.0.4."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-11468","versionConstraint":"< 3.10.20||>= 3.11.0, < 3.11.15||>= 3.12.0, < 3.12.13||>= 3.13.0, < 3.13.12||>= 3.14.0, < 3.14.3||>= 3.15.0a1, < 3.15.0a6 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-11468","versionConstraint":"< 3.10.20||>= 3.11.0, < 3.11.15||>= 3.12.0, < 3.12.13||>= 3.13.0, < 3.13.12||>= 3.14.0, < 3.14.3||>= 3.15.0a1, < 3.15.0a6 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-11468","fix":{"state":"fixed","versions":["3.10.20","3.11.15","3.12.13","3.13.12","3.14.3","3.15.0a6"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.12"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.3"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0a6"},{"date":"2026-04-10","kind":"first-observed","version":"3.10.20"},{"date":"2026-04-10","kind":"first-observed","version":"3.11.15"},{"date":"2026-04-10","kind":"first-observed","version":"3.12.13"},{"date":"2026-03-03","kind":"first-observed","version":"3.13.12"},{"date":"2026-03-03","kind":"first-observed","version":"3.14.3"},{"date":"2026-03-03","kind":"first-observed","version":"3.15.0a6"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-11468","cwe":"CWE-93","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-11468","date":"2026-11-12","epss":0.00616,"percentile":0.5}],"risk":0.32956,"urls":["https://github.com/python/cpython/commit/003b8315669b9f08b1010a49071f73f15f818094","https://github.com/python/cpython/commit/17d1490aa97bd6b98a42b1a9b324ead84e7fd8a2","https://github.com/python/cpython/commit/61614a5e5056e4f61ced65008d4576f3df34acb6","https://github.com/python/cpython/commit/a76e4cd62dd68e7cbe86e37e6ed988495a646b66","https://github.com/python/cpython/commit/e9970f077240c7c670e8a6fc6662f2b30d3b6ad0","https://github.com/python/cpython/commit/f738386838021c762efea6c9802c82de65e87796","https://github.com/python/cpython/issues/143935","https://github.com/python/cpython/pull/143936","https://mail.python.org/archives/list/security-announce@python.org/thread/FELSEOLBI2QR6YLG6Q7VYF7FWSGQTKLI/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-11468","description":"When folding a long comment in an email header containing exclusively unfoldable characters, the parenthesis would not be preserved. This could be used for injecting headers into email messages where addresses are user-controlled and not sanitized."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.17"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-71562","versionConstraint":">= 17.0, < 27.3.4.17||>= 28.0, < 28.5.0.6||>= 29.0, < 29.0.6||>= 6.0, < 9.3.2.7||>= 9.4, < 9.6.2.3||>= 9.7, < 9.7.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-71562","fix":{"state":"fixed","versions":["9.3.2.7","9.6.2.3","9.7.2","27.3.4.17","28.5.0.6","29.0.6"],"available":[{"date":"2026-09-04","kind":"first-observed","version":"27.3.4.17"},{"date":"2026-09-04","kind":"first-observed","version":"28.5.0.6"},{"date":"2026-09-04","kind":"first-observed","version":"29.0.6"},{"date":"2026-09-04","kind":"first-observed","version":"9.3.2.7"},{"date":"2026-09-04","kind":"first-observed","version":"9.6.2.3"},{"date":"2026-09-04","kind":"first-observed","version":"9.7.2"}]},"cvss":[{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-71562","cwe":"CWE-1284","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-71562","date":"2026-11-12","epss":0.00577,"percentile":0.48032}],"risk":0.32600499999999993,"urls":["https://cna.erlef.org/cves/CVE-2026-71562.html","https://github.com/erlang/otp/commit/aba0fe8c2d700bf4ac94607cf7f00e53bbe4042d","https://github.com/erlang/otp/commit/e3be1cfe9f6cedd0cd20d9905e05601dfb31c8aa","https://github.com/erlang/otp/security/advisories/GHSA-cqx9-9hq6-m8wf","https://osv.dev/vulnerability/EEF-CVE-2026-71562","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-71562","description":"Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP inets httpc allows a malicious or compromised HTTP server to degrade availability by returning a numeric header whose value is a very long run of digits.\n\nhttpc_handler.erl converts the server-supplied Content-Length with list_to_integer/1 before comparing it against max_body_size, so the size check cannot protect the conversion, and the option defaults to nolimit in any case. The same unbounded conversion appears in httpc_response:format_response/1 for Content-Length and in httpc_response:get_ms_from_retry_after/1 for Retry-After, which is guarded only by a check that the first character is a digit. A value of up to roughly 1.26 million digits converts successfully and costs the requesting process hundreds of milliseconds of arbitrary-precision arithmetic per response. The conversion function is documented to accept integers of any size, so bounding the input is the caller's responsibility.\n\nThis issue affects OTP from OTP 17.0 before OTP 27.3.4.17, OTP 28.5.0.6, and OTP 29.0.6, corresponding to inets from 5.10 before 9.3.2.7, 9.6.2.3, and 9.7.2. Whether OTP before OTP 17.0, corresponding to inets before 5.10, is affected is unknown."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87910","versionConstraint":"< 3.10.22||>= 3.11.0, < 3.11.17||>= 3.12.0, < 3.12.15||>= 3.13.0, < 3.13.16||>= 3.14.0, < 3.14.9||>= 3.15.0a1, < 3.15.0rc3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87910","versionConstraint":"< 3.10.22||>= 3.11.0, < 3.11.17||>= 3.12.0, < 3.12.15||>= 3.13.0, < 3.13.16||>= 3.14.0, < 3.14.9||>= 3.15.0a1, < 3.15.0rc3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87910","fix":{"state":"fixed","versions":["3.10.22","3.11.17","3.12.15","3.13.16","3.14.9","3.15.0rc3"],"available":[{"date":"2026-10-02","kind":"first-observed","version":"3.10.22"},{"date":"2026-10-02","kind":"first-observed","version":"3.11.17"},{"date":"2026-10-01","kind":"first-observed","version":"3.12.15"},{"date":"2026-10-01","kind":"first-observed","version":"3.13.16"},{"date":"2026-10-31","kind":"first-observed","version":"3.14.9"},{"date":"2026-10-08","kind":"first-observed","version":"3.15.0rc3"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87910","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-87910","cwe":"CWE-59","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-87910","date":"2026-11-12","epss":0.00609,"percentile":0.49694}],"risk":0.325815,"urls":["https://github.com/python/cpython/commit/2eb0c2f1dc71847731b6ab30aebefd058d482a7f","https://github.com/python/cpython/commit/3105a3498aaf681ce128cf5baf83c2e5574267c5","https://github.com/python/cpython/commit/764fd0af8d9e19d3684a58d2e58bf770f0605036","https://github.com/python/cpython/commit/9c17bace90f88dfba6d0e2fe23c8e7ae35f83955","https://github.com/python/cpython/commit/a4919937a4e1e69a0d178909c6f20557eca5d1d0","https://github.com/python/cpython/commit/c1f106d240c4ffcb3608ed0a20e8aba6c865f6d3","https://github.com/python/cpython/commit/d9565e54b1fc6d63c5be9afd58114499128fa57b","https://github.com/python/cpython/commit/fb2f0bbc3b35264f09cc2cb2934b7987527a6bc2","https://github.com/python/cpython/issues/157265","https://github.com/python/cpython/pull/157266","https://mail.python.org/archives/list/security-announce@python.org/thread/57TBTLL2W6APMZR3A25B2YV7GL3EPTDJ/","http://www.openwall.com/lists/oss-security/2026/09/11/8"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87910","description":"When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was ignored. Instead, the member should be skipped if either call returns None."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-1299","versionConstraint":"< 3.10.20||>= 3.11.0, < 3.11.15||>= 3.12.0, < 3.12.13||>= 3.13.0, < 3.13.12||>= 3.14.0, < 3.14.3||>= 3.15.0a1, < 3.15.0a6 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-1299","versionConstraint":"< 3.10.20||>= 3.11.0, < 3.11.15||>= 3.12.0, < 3.12.13||>= 3.13.0, < 3.13.12||>= 3.14.0, < 3.14.3||>= 3.15.0a1, < 3.15.0a6 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-1299","fix":{"state":"fixed","versions":["3.10.20","3.11.15","3.12.13","3.13.12","3.14.3","3.15.0a6"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.12"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.3"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0a6"},{"date":"2026-04-10","kind":"first-observed","version":"3.10.20"},{"date":"2026-04-10","kind":"first-observed","version":"3.11.15"},{"date":"2026-04-10","kind":"first-observed","version":"3.12.13"},{"date":"2026-03-03","kind":"first-observed","version":"3.13.12"},{"date":"2026-03-03","kind":"first-observed","version":"3.14.3"},{"date":"2026-03-03","kind":"first-observed","version":"3.15.0a6"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-1299","cwe":"CWE-93","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-1299","date":"2026-11-12","epss":0.00573,"percentile":0.47858}],"risk":0.31515000000000004,"urls":["https://cve.org/CVERecord?id=CVE-2024-6923","https://github.com/python/cpython/commit/052e55e7d44718fe46cbba0ca995cb8fcc359413","https://github.com/python/cpython/commit/0a925ab591c45d6638f37b5e57796f36fa0e56d8","https://github.com/python/cpython/commit/7877fe424415bc4a13045e62a90a7277413d8cb9","https://github.com/python/cpython/commit/842ce19a0c0b58d61591e8f6a708c38db1fb94e4","https://github.com/python/cpython/commit/8cdf6204f4ae821f32993f8fc6bad0d318f95f36","https://github.com/python/cpython/commit/e417f05ad77a4c30ddc07f99e90fc0cef43e831a","https://github.com/python/cpython/issues/144125","https://github.com/python/cpython/pull/144126","https://mail.python.org/archives/list/security-announce@python.org/thread/6ZZULGALJTITEAGEXLDJE2C6FORDXPBT/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-1299","description":"The \nemail module, specifically the \"BytesGenerator\" class, didn’t properly quote newlines for email headers when \nserializing an email message allowing for header injection when an email\n is serialized. This is only applicable if using \"LiteralHeader\" writing headers that don't respect email folding rules, the new behavior will reject the incorrectly folded headers in \"BytesGenerator\"."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-0865","versionConstraint":"< 3.10.20||>= 3.11.0, < 3.11.15||>= 3.12.0, < 3.12.13||>= 3.13.0, < 3.13.12||>= 3.14.0, < 3.14.3||>= 3.15.0a1, < 3.15.0a6 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-0865","versionConstraint":"< 3.10.20||>= 3.11.0, < 3.11.15||>= 3.12.0, < 3.12.13||>= 3.13.0, < 3.13.12||>= 3.14.0, < 3.14.3||>= 3.15.0a1, < 3.15.0a6 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-0865","fix":{"state":"fixed","versions":["3.10.20","3.11.15","3.12.13","3.13.12","3.14.3","3.15.0a6"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.12"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.3"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0a6"},{"date":"2026-04-10","kind":"first-observed","version":"3.10.20"},{"date":"2026-04-10","kind":"first-observed","version":"3.11.15"},{"date":"2026-04-10","kind":"first-observed","version":"3.12.13"},{"date":"2026-03-03","kind":"first-observed","version":"3.13.12"},{"date":"2026-03-03","kind":"first-observed","version":"3.14.3"},{"date":"2026-03-03","kind":"first-observed","version":"3.15.0a6"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-0865","cwe":"CWE-74","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-0865","date":"2026-11-12","epss":0.00554,"percentile":0.46774}],"risk":0.30193,"urls":["https://github.com/python/cpython/commit/22e4d55285cee52bc4dbe061324e5f30bd4dee58","https://github.com/python/cpython/commit/23e3c0ae867cca0130e441e776c9955b9027c510","https://github.com/python/cpython/commit/286e3ac39984fe85a17f4ab39c64d382137aae5f","https://github.com/python/cpython/commit/2f840249550e082dc351743f474ba56da10478d2","https://github.com/python/cpython/commit/4802b96a2cde58570c24c13ef3289490980961c5","https://github.com/python/cpython/commit/66da7bf6fe7b81e3ecc9c0a25bd47d4616c8d1a6","https://github.com/python/cpython/commit/83ecd18779f286d872f68bfce175651e407d9fff","https://github.com/python/cpython/commit/8bb044d29310bb05d15086cdaa8bf64867d61a97","https://github.com/python/cpython/commit/bfba660085767f8c2d582134e9d511a85eda04cf","https://github.com/python/cpython/commit/c592227ffb48679af9845a45dbb0875d975bb219","https://github.com/python/cpython/commit/e4846a93ac07a8ae9aa18203af0dd13d6e7a6995","https://github.com/python/cpython/commit/f7fceed79ca1bceae8dbe5ba5bc8928564da7211","https://github.com/python/cpython/issues/143916","https://github.com/python/cpython/pull/143917","https://mail.python.org/archives/list/security-announce@python.org/thread/BJ6QPHNSHJTS3A7CFV6IBMCAP2DWRVNT/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-0865","description":"User-controlled header names and values containing newlines can allow injecting HTTP headers."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-15282","versionConstraint":"< 3.10.20||>= 3.11.0, < 3.11.15||>= 3.12.0, < 3.12.13||>= 3.13.0, < 3.13.12||>= 3.14.0, < 3.14.3||>= 3.15.0a1, < 3.15.0a6 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-15282","versionConstraint":"< 3.10.20||>= 3.11.0, < 3.11.15||>= 3.12.0, < 3.12.13||>= 3.13.0, < 3.13.12||>= 3.14.0, < 3.14.3||>= 3.15.0a1, < 3.15.0a6 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-15282","fix":{"state":"fixed","versions":["3.10.20","3.11.15","3.12.13","3.13.12","3.14.3","3.15.0a6"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.12"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.3"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0a6"},{"date":"2026-04-10","kind":"first-observed","version":"3.10.20"},{"date":"2026-04-10","kind":"first-observed","version":"3.11.15"},{"date":"2026-04-10","kind":"first-observed","version":"3.12.13"},{"date":"2026-03-03","kind":"first-observed","version":"3.13.12"},{"date":"2026-03-03","kind":"first-observed","version":"3.14.3"},{"date":"2026-03-03","kind":"first-observed","version":"3.15.0a6"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-15282","cwe":"CWE-93","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-15282","date":"2026-11-12","epss":0.00537,"percentile":0.45765}],"risk":0.29535,"urls":["https://github.com/python/cpython/commit/05356b1cc153108aaf27f3b72ce438af4aa218c0","https://github.com/python/cpython/commit/34d76b00dabde81a793bd06dd8ecb057838c4b38","https://github.com/python/cpython/commit/3f396ca9d7bbe2a50ea6b8c9b27c0082884d9f80","https://github.com/python/cpython/commit/4ed11d3cd288e6b90196a15c5a825a45d318fe47","https://github.com/python/cpython/commit/a35ca3be5842505dab74dc0b90b89cde0405017a","https://github.com/python/cpython/commit/f25509e78e8be6ea73c811ac2b8c928c28841b9f","https://github.com/python/cpython/issues/143925","https://github.com/python/cpython/pull/143926","https://mail.python.org/archives/list/security-announce@python.org/thread/X66HL7SISGJT33J53OHXMZT4DFLMHVKF/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-15282","description":"User-controlled data URLs parsed by urllib.request.DataHandler allow injecting headers through newlines in the data URL mediatype."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-15806","versionConstraint":"< 3.10.22||>= 3.11.0, < 3.11.17||>= 3.12.0, < 3.12.15||>= 3.13.0, < 3.13.16||>= 3.14.0, < 3.14.8||>= 3.15.0a1, < 3.15.0rc2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-15806","versionConstraint":"< 3.10.22||>= 3.11.0, < 3.11.17||>= 3.12.0, < 3.12.15||>= 3.13.0, < 3.13.16||>= 3.14.0, < 3.14.8||>= 3.15.0a1, < 3.15.0rc2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-15806","fix":{"state":"fixed","versions":["3.10.22","3.11.17","3.12.15","3.13.16","3.14.8","3.15.0rc2"],"available":[{"date":"2026-10-02","kind":"first-observed","version":"3.10.22"},{"date":"2026-10-02","kind":"first-observed","version":"3.11.17"},{"date":"2026-10-01","kind":"first-observed","version":"3.12.15"},{"date":"2026-10-01","kind":"first-observed","version":"3.13.16"},{"date":"2026-10-01","kind":"first-observed","version":"3.14.8"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0rc2"},{"date":"2026-09-09","kind":"first-observed","version":"3.15.0rc2"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15806","cwe":"CWE-319","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-15806","cwe":"CWE-522","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-15806","date":"2026-11-12","epss":0.00528,"percentile":0.45228}],"risk":0.29040000000000005,"urls":["https://github.com/python/cpython/commit/641be42bb07921ba0f8bffe228b1dc706b092ef6","https://github.com/python/cpython/commit/851cf9a7142ecbdd39f831055533f58284ad2bcc","https://github.com/python/cpython/commit/95355ee3a8e1d3c3d4858d1973aa42a9b91a2801","https://github.com/python/cpython/commit/a0d023fbd23773e24b35d8368789470e22cda5d8","https://github.com/python/cpython/commit/a2773a34183b7d94a243bb98fd658926cc5348ce","https://github.com/python/cpython/commit/a7bb524fef61f77ede01f660ffbd591e1d5837ce","https://github.com/python/cpython/commit/dac88d8615078c55f1304ea4c7a2d822700d4e5a","https://github.com/python/cpython/issues/155694","https://github.com/python/cpython/pull/155696","https://mail.python.org/archives/list/security-announce@python.org/thread/3OKPE5S75KDNA7FY7AI3PL2MXM2X5RB3/","http://www.openwall.com/lists/oss-security/2026/08/18/3","https://cert-portal.siemens.com/productcert/html/ssa-457936.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15806","description":"The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme into account when matching stored credentials against a requested URL. Credentials added for an https:// URL were also used for requests to the same host over http://, so an attacker able to redirect or downgrade a client to plain HTTP (for example, via an HTTPS-to-HTTP redirect or an on-path position) could capture credentials in cleartext. Credentials added for http:// URLs could likewise be sent over https://.\n\nCredential matching is now scoped by URL scheme. Credentials registered with a URL that includes a scheme are only used for requests with the same scheme. Credentials registered with a bare authority (such as example.com or example.com:8080) continue to match any scheme, preserving compatibility with existing code, including proxy authentication.\n\nUsers who cannot upgrade immediately can mitigate by ensuring that applications never make plain http:// requests to hosts for which credentials are registered, for example by not following redirects to http:// URLs."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-1502","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0a1, < 3.14.5rc1||>= 3.15.0a1, < 3.15.0b1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-1502","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0a1, < 3.14.5rc1||>= 3.15.0a1, < 3.15.0b1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-1502","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.14","3.14.5rc1","3.15.0b1"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.5rc1"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0b1"},{"date":"2026-08-19","kind":"first-observed","version":"3.10.21"},{"date":"2026-08-19","kind":"first-observed","version":"3.11.16"},{"date":"2026-08-19","kind":"first-observed","version":"3.12.14"},{"date":"2026-07-02","kind":"first-observed","version":"3.13.14"},{"date":"2026-07-02","kind":"first-observed","version":"3.14.5rc1"},{"date":"2026-07-02","kind":"first-observed","version":"3.15.0b1"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-1502","cwe":"CWE-93","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-1502","date":"2026-11-12","epss":0.00535,"percentile":0.45619}],"risk":0.286225,"urls":["https://github.com/python/cpython/commit/05ed7ce7ae9e17c23a04085b2539fe6d6d3cef69","https://github.com/python/cpython/commit/56b7100b04e44ea27989242b176beb8f016b2c53","https://github.com/python/cpython/commit/58703ec1bdd1eb075e8b01a0c427683ce594dd3e","https://github.com/python/cpython/commit/9e071c9b28c17f347f81b388a003d4eeb3c7a8dd","https://github.com/python/cpython/commit/b1cf9016335cb637c5a425032e8274a224f4b2ed","https://github.com/python/cpython/commit/c00c386faa579ad71196d33408644478488e43ec","https://github.com/python/cpython/issues/146211","https://github.com/python/cpython/pull/146212","https://mail.python.org/archives/list/security-announce@python.org/thread/2IVPAEQWUJBCTQZEJEVTYCIKSMQPGRZ3/","http://www.openwall.com/lists/oss-security/2026/04/11/4","https://cert-portal.siemens.com/productcert/html/ssa-457936.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-1502","description":"CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-3276","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0, < 3.14.6||>= 3.15.0a1, < 3.15.0b2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-3276","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0, < 3.14.6||>= 3.15.0a1, < 3.15.0b2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-3276","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.14","3.14.6","3.15.0b2"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.6"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0b2"},{"date":"2026-08-19","kind":"first-observed","version":"3.10.21"},{"date":"2026-08-19","kind":"first-observed","version":"3.11.16"},{"date":"2026-08-19","kind":"first-observed","version":"3.12.14"},{"date":"2026-06-18","kind":"first-observed","version":"3.13.14"},{"date":"2026-06-18","kind":"first-observed","version":"3.14.6"},{"date":"2026-06-05","kind":"first-observed","version":"3.15.0b2"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3276","cwe":"CWE-407","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-3276","date":"2026-11-12","epss":0.00505,"percentile":0.43649}],"risk":0.28532499999999994,"urls":["https://github.com/python/cpython/commit/6b505d1f41f8f3ea0fe5a4786d3a8fff1875cfc0","https://github.com/python/cpython/commit/90748760d38ca3ac5fc6788a69becab905c95598","https://github.com/python/cpython/commit/991224b1e8311c85f198f6dd8208bf8cff7fc26f","https://github.com/python/cpython/commit/ba785b88add96acbf403d65cb157fb2743a33a32","https://github.com/python/cpython/commit/c5512bd7c1dc28055660565275012766941d3066","https://github.com/python/cpython/commit/d3ab945af25b28dfe13ac6cb40c124a01b33ce1f","https://github.com/python/cpython/commit/db744c0776c1d5dd11aaa70eff2a6993c408bacc","https://github.com/python/cpython/commit/e322a1857084d521f79f45181b776f62e6acfc2c","https://github.com/python/cpython/issues/149079","https://github.com/python/cpython/pull/149080","https://mail.python.org/archives/list/security-announce@python.org/thread/PP5HB4K7727OBBM76KA2ILID76K3OZGZ/","http://www.openwall.com/lists/oss-security/2026/06/03/15","https://cert-portal.siemens.com/productcert/html/ssa-457936.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-3276","description":"unicodedata.normalize() can take excessive CPU time when processing\nspecially crafted Unicode input containing long runs of combining characters\nwith alternating Canonical Combining Class values.\nThis affects all normalization forms."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.12"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-6069","versionConstraint":"< 3.9.24||>= 3.10.0, < 3.10.19||>= 3.11.0, < 3.11.14||>= 3.12.0, < 3.12.12||>= 3.13.0, < 3.13.6||>= 3.14.0a1, < 3.14.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.12"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-6069","versionConstraint":"< 3.9.24||>= 3.10.0, < 3.10.19||>= 3.11.0, < 3.11.14||>= 3.12.0, < 3.12.12||>= 3.13.0, < 3.13.6||>= 3.14.0a1, < 3.14.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-6069","fix":{"state":"fixed","versions":["3.9.24","3.10.19","3.11.14","3.12.12","3.13.6","3.14.0b3"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.9.24"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.19"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.12"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.6"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.0b3"},{"date":"2025-10-10","kind":"first-observed","version":"3.9.24"},{"date":"2025-10-10","kind":"first-observed","version":"3.10.19"},{"date":"2025-10-10","kind":"first-observed","version":"3.11.14"},{"date":"2025-10-10","kind":"first-observed","version":"3.12.12"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.6"},{"date":"2025-09-04","kind":"first-observed","version":"3.14.0b3"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-6069","cwe":"CWE-1333","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-6069","date":"2026-11-12","epss":0.00603,"percentile":0.4937}],"risk":0.28039499999999995,"urls":["https://github.com/python/cpython/commit/4455cbabf991e202185a25a631af206f60bbc949","https://github.com/python/cpython/commit/6eb6c5dbfb528bd07d77b60fd71fd05d81d45c41","https://github.com/python/cpython/commit/8d1b3dfa09135affbbf27fb8babcf3c11415df49","https://github.com/python/cpython/commit/ab0893fd5c579d9cea30841680e6d35fc478afb5","https://github.com/python/cpython/commit/d851f8e258c7328814943e923a7df81bca15df4b","https://github.com/python/cpython/commit/f3c6f882cddc8dc30320d2e73edf019e201394fc","https://github.com/python/cpython/commit/fdc9d214c01cb4588f540cfa03726bbf2a33fc15","https://github.com/python/cpython/issues/135462","https://github.com/python/cpython/pull/135464","https://mail.python.org/archives/list/security-announce@python.org/thread/K5PIYLR6EP3WR7ZOKKYQUWEDNQVUXOYM/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-6069","description":"The html.parser.HTMLParser class had worse-case quadratic complexity when processing certain crafted malformed inputs potentially leading to amplified denial-of-service."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.18"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-68956","versionConstraint":">= 18.1.2, < 27.3.4.18||>= 28, < 28.5.0.7||>= 29, < 29.1.1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-68956","fix":{"state":"fixed","versions":["27.3.4.18","28.5.0.7","29.1.1"],"available":[{"date":"2026-09-30","kind":"first-observed","version":"27.3.4.18"},{"date":"2026-09-30","kind":"first-observed","version":"28.5.0.7"},{"date":"2026-09-30","kind":"first-observed","version":"29.1.1"}]},"cvss":[{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-68956","cwe":"CWE-770","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-68956","date":"2026-11-12","epss":0.00378,"percentile":0.32216}],"risk":0.27594,"urls":["https://cna.erlef.org/cves/CVE-2026-68956.html","https://github.com/erlang/otp/commit/79c2d2be17d902c5f53969b5806b725efda831be","https://github.com/erlang/otp/commit/84df3d4d0278e21a36a453bfee94799f0df67c2a","https://github.com/erlang/otp/commit/e18100975f0e5a8d59d02de00df12247a91b443b","https://github.com/erlang/otp/commit/e2bbad0107bba41491a4d549686fd023db8740da","https://github.com/erlang/otp/security/advisories/GHSA-qhcm-px9c-rvfh","https://osv.dev/vulnerability/EEF-CVE-2026-68956","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-68956","description":"Allocation of Resources Without Limits or Throttling vulnerability in Erlang/OTP ssh allows an authenticated remote attacker to exhaust node memory by repeatedly opening session channels that are never assigned a handler.\n\nThe \"session\" clause of ssh_connection:handle_msg/4 checks only minimal_remote_max_packet_size before calling setup_session/5, which unconditionally builds a #channel{} record and stores it in the ETS channel cache. The max_channels daemon option is consulted only by ssh_channel_sup:max_num_channels_not_exceeded/2, which counts supervisor children, so a channel that never gets a shell, exec, or subsystem handler is invisible to the limit and setting the option to a finite value does not mitigate the attack. RFC 4254 section 5.1 permits many session channels per connection, and each record costs only a few hundred bytes, so a single authenticated connection can accumulate channels until the node runs out of memory and the emulator terminates, affecting every application on it. No file contents, credentials, or write access are obtainable.\n\nThis issue affects OTP from OTP 18.1.2 before OTP 27.3.4.18, OTP 28.5.0.7, and OTP 29.1.1, corresponding to ssh from 4.1.1 before 5.2.11.13, 5.5.2.6, and 6.0.6. Whether OTP before OTP 18.1.2, corresponding to ssh before 4.1.1, is affected is unknown."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"26.2.5.21"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-42790","versionConstraint":">= 19.3, < 26.2.5.21||>= 27.0, < 27.3.4.12||>= 28.0, < 28.5.0.1||>= 29.0, < 29.0.1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-42790","fix":{"state":"fixed","versions":["26.2.5.21","27.3.4.12","28.5.0.1","29.0.1"],"available":[{"date":"2026-08-21","kind":"first-observed","version":"26.2.5.21"},{"date":"2026-08-21","kind":"first-observed","version":"27.3.4.12"},{"date":"2026-08-21","kind":"first-observed","version":"28.5.0.1"},{"date":"2026-08-21","kind":"first-observed","version":"29.0.1"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42790","cwe":"CWE-295","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"},{"cve":"CVE-2026-42790","cwe":"CWE-297","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"},{"cve":"CVE-2026-42790","cwe":"CWE-295","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-42790","date":"2026-11-12","epss":0.00359,"percentile":0.3005}],"risk":0.27283999999999997,"urls":["https://cna.erlef.org/cves/CVE-2026-42790.html","https://github.com/erlang/otp/commit/0769050c69d73762672b0db1347b6993a5b31759","https://github.com/erlang/otp/commit/21abed64eb2026b5f82f432709e4e932f9be389a","https://github.com/erlang/otp/commit/b0c245e8132bb13171e277b1af59c0cec00c9459","https://github.com/erlang/otp/commit/fb67c6d1836f51105a96d8b769e71e4215a79457","https://github.com/erlang/otp/security/advisories/GHSA-22cw-4ph4-6447","https://osv.dev/vulnerability/EEF-CVE-2026-42790","https://www.erlang.org/doc/system/versions.html#order-of-versions","https://access.redhat.com/errata/RHSA-2026:39809","https://access.redhat.com/errata/RHSA-2026:54757","https://access.redhat.com/security/cve/CVE-2026-42790","https://bugzilla.redhat.com/show_bug.cgi?id=2482286","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42790.json"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42790","description":"Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_cert and public_key modules) allows a DNS nameConstraints bypass via subject CommonName fallback in TLS hostname verification.\n\nTwo flaws combine to allow a subordinate CA whose DNS nameConstraints are restricted (e.g. permitted;DNS:allowed.example.com) to issue a leaf certificate that an OTP TLS client accepts as a valid identity for an out-of-scope hostname (e.g. victim.example.com):\n\nFirst, pubkey_cert:validate_names/6 in lib/public_key/src/pubkey_cert.erl only checks SAN DNS entries against nameConstraints. Per RFC 5280, a permitted DNS subtree only restricts certificates that contain a DNS-typed name. A leaf with no subjectAltName therefore trivially satisfies any permitted;DNS:... constraint regardless of its subject commonName.\n\nSecond, public_key:pkix_verify_hostname/3 in lib/public_key/src/public_key.erl falls back to the subject commonName when no subjectAltName is present, extracting id-at-commonName attributes as presented IDs and matching them against the reference hostname. The strict pkix_verify_hostname_match_fun(https) matcher does not suppress this fallback.\n\nThe result is that path validation accepts a CN-only leaf under a DNS-constrained intermediate (no SAN means the nameConstraints are not triggered), and hostname verification then accepts it via the CN fallback. The bypass is reachable from stock ssl:connect with verify_peer, a trusted CA, SNI, and the canonical strict https hostname matcher.\n\nThis issue affects OTP from OTP 19.3 before OTP 26.2.5.21, OTP 27.3.4.12, OTP 28.5.0.1, and OTP 29.0.1, corresponding to public_key from 1.4 before 1.15.1.7, 1.17.1.3, 1.20.3.1, and 1.21.1."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-19672","versionConstraint":"< 3.10.22||>= 3.11.0, < 3.11.17||>= 3.12.0, < 3.12.15||>= 3.13.0, < 3.13.16||>= 3.14.0, < 3.14.8||>= 3.15.0a1, < 3.15.0rc2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-19672","versionConstraint":"< 3.10.22||>= 3.11.0, < 3.11.17||>= 3.12.0, < 3.12.15||>= 3.13.0, < 3.13.16||>= 3.14.0, < 3.14.8||>= 3.15.0a1, < 3.15.0rc2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-19672","fix":{"state":"fixed","versions":["3.10.22","3.11.17","3.12.15","3.13.16","3.14.8","3.15.0rc2"],"available":[{"date":"2026-10-02","kind":"first-observed","version":"3.10.22"},{"date":"2026-10-02","kind":"first-observed","version":"3.11.17"},{"date":"2026-10-02","kind":"first-observed","version":"3.12.15"},{"date":"2026-10-02","kind":"first-observed","version":"3.13.16"},{"date":"2026-10-02","kind":"first-observed","version":"3.14.8"},{"date":"2026-10-02","kind":"first-observed","version":"3.15.0rc2"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19672","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-19672","date":"2026-11-12","epss":0.00472,"percentile":0.4127}],"risk":0.26668,"urls":["https://github.com/python/cpython/pull/156000","https://mail.python.org/archives/list/security-announce@python.org/thread/J2WT2ALRWEXQJOB3C7Q2HYWUXP3CINWO/","http://www.openwall.com/lists/oss-security/2026/08/25/10"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19672","description":"The tarfile module's tar and data\n extraction filters created directories outside the destination for \nmembers whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name as given.\n\nOnly\n empty directories are created outside the destination. Member contents \nare still extracted inside it. To return to the destination the member's\n name must contain the destination directory's own final component, so \nextraction into a secure randomised directory is not affected.\n\nThis affects POSIX platforms only. On Windows, .. components are collapsed before the path reaches the filesystem, so the directories outside the destination are never created."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-0672","versionConstraint":"< 3.10.20||>= 3.11.0, < 3.11.15||>= 3.12.0, < 3.12.13||>= 3.13.0, < 3.13.12||>= 3.14.0, < 3.14.3||>= 3.15.0a1, < 3.15.0a6 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-0672","versionConstraint":"< 3.10.20||>= 3.11.0, < 3.11.15||>= 3.12.0, < 3.12.13||>= 3.13.0, < 3.13.12||>= 3.14.0, < 3.14.3||>= 3.15.0a1, < 3.15.0a6 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-0672","fix":{"state":"fixed","versions":["3.10.20","3.11.15","3.12.13","3.13.12","3.14.3","3.15.0a6"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.12"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.3"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0a6"},{"date":"2026-04-10","kind":"first-observed","version":"3.10.20"},{"date":"2026-04-10","kind":"first-observed","version":"3.11.15"},{"date":"2026-04-10","kind":"first-observed","version":"3.12.13"},{"date":"2026-03-03","kind":"first-observed","version":"3.13.12"},{"date":"2026-03-03","kind":"first-observed","version":"3.14.3"},{"date":"2026-03-03","kind":"first-observed","version":"3.15.0a6"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-0672","cwe":"CWE-93","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-0672","date":"2026-11-12","epss":0.0048,"percentile":0.41924}],"risk":0.264,"urls":["https://github.com/python/cpython/commit/62700107418eb2cca3fc88da036a243ea975f172","https://github.com/python/cpython/commit/712452e6f1d4b9f7f8c4c92ebfcaac1705faa440","https://github.com/python/cpython/commit/7852d72b653fea0199acf5fc2a84f6f8b84eba8d","https://github.com/python/cpython/commit/918387e4912d12ffc166c8f2a38df92b6ec756ca","https://github.com/python/cpython/commit/95746b3a13a985787ef53b977129041971ed7f70","https://github.com/python/cpython/commit/b1869ff648bbee0717221d09e6deff46617f3e85","https://github.com/python/cpython/issues/143919","https://github.com/python/cpython/pull/143920","https://mail.python.org/archives/list/security-announce@python.org/thread/6VFLQQEIX673KXKFUZXCUNE5AZOGZ45M/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-0672","description":"When using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch rejects all control characters within cookie names, values, and parameters."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"26.2.5.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-48038","versionConstraint":">= 17.0, < 26.2.5.15||>= 27, < 27.3.4.3||>= 28, < 28.0.3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-48038","fix":{"state":"fixed","versions":["26.2.5.15","27.3.4.3","28.0.3"],"available":[{"date":"2026-08-21","kind":"first-observed","version":"26.2.5.15"},{"date":"2026-08-21","kind":"first-observed","version":"27.3.4.3"},{"date":"2026-08-21","kind":"first-observed","version":"28.0.3"}]},"cvss":[{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48038","cwe":"CWE-400","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"},{"cve":"CVE-2025-48038","cwe":"CWE-770","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2025-48038","date":"2026-11-12","epss":0.00487,"percentile":0.42434}],"risk":0.250805,"urls":["https://cna.erlef.org/cves/CVE-2025-48038.html","https://github.com/erlang/otp/commit/07b8f441ca711f9812fad9e9115bab3c3aa92f79","https://github.com/erlang/otp/commit/4e3bf86777ab3db7220c11d8ddabf15970ddd10a","https://github.com/erlang/otp/commit/f09e0201ff701993dc24a08f15e524daf72db42f","https://github.com/erlang/otp/pull/10156","https://github.com/erlang/otp/security/advisories/GHSA-pvj7-9652-7h9r","https://osv.dev/vulnerability/EEF-CVE-2025-48038","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-48038","description":"Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Resource Leak Exposure.\n\nThis vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl.\n\nThis issue affects OTP from OTP 17.0 before OTP 26.2.5.15, OTP 27.3.4.3, and OTP 28.0.3, corresponding to ssh from 3.0.1 before 5.1.4.12, 5.2.11.3, and 5.3.3."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"26.2.5.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-48039","versionConstraint":">= 17.0, < 26.2.5.15||>= 27, < 27.3.4.3||>= 28, < 28.0.3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-48039","fix":{"state":"fixed","versions":["26.2.5.15","27.3.4.3","28.0.3"],"available":[{"date":"2026-08-21","kind":"first-observed","version":"26.2.5.15"},{"date":"2026-08-21","kind":"first-observed","version":"27.3.4.3"},{"date":"2026-08-21","kind":"first-observed","version":"28.0.3"}]},"cvss":[{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48039","cwe":"CWE-400","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"},{"cve":"CVE-2025-48039","cwe":"CWE-770","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2025-48039","date":"2026-11-12","epss":0.00487,"percentile":0.42434}],"risk":0.250805,"urls":["https://cna.erlef.org/cves/CVE-2025-48039.html","https://github.com/erlang/otp/commit/043ee3c943e2977c1acdd740ad13992fd60b6bf0","https://github.com/erlang/otp/commit/07b8f441ca711f9812fad9e9115bab3c3aa92f79","https://github.com/erlang/otp/commit/c242e6458967e9514bea351814151695807a54ac","https://github.com/erlang/otp/pull/10155","https://github.com/erlang/otp/security/advisories/GHSA-rr5p-6856-j7h8","https://osv.dev/vulnerability/EEF-CVE-2025-48039","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-48039","description":"Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Resource Leak Exposure.\n\nThis vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl.\n\nThis issue affects OTP from OTP 17.0 before OTP 26.2.5.15, OTP 27.3.4.3, and OTP 28.0.3, corresponding to ssh from 3.0.1 before 5.1.4.12, 5.2.11.3, and 5.3.3."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-8328","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0, < 3.14.6||>= 3.15.0a1, < 3.15.0b2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-8328","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0, < 3.14.6||>= 3.15.0a1, < 3.15.0b2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-8328","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.14","3.14.6","3.15.0b2"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.6"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0b2"},{"date":"2026-08-19","kind":"first-observed","version":"3.10.21"},{"date":"2026-08-19","kind":"first-observed","version":"3.11.16"},{"date":"2026-08-19","kind":"first-observed","version":"3.12.14"},{"date":"2026-06-18","kind":"first-observed","version":"3.13.14"},{"date":"2026-06-18","kind":"first-observed","version":"3.14.6"},{"date":"2026-06-05","kind":"first-observed","version":"3.15.0b2"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8328","cwe":"CWE-918","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-8328","date":"2026-11-12","epss":0.00457,"percentile":0.40149}],"risk":0.24906500000000004,"urls":["https://github.com/python/cpython/commit/2bbcf3fb7a420a05605576c0f9468d4675381b5f","https://github.com/python/cpython/commit/5dadc64673ce875ebfb24163907777dae0f6ca06","https://github.com/python/cpython/commit/7d95a1dc7382b55cba7fdd6a110336077584a4f0","https://github.com/python/cpython/commit/bb3446dda6c49b32e67c11dbbbf221b40be00763","https://github.com/python/cpython/commit/c88704431ea3248ca769384c13856330976fac1d","https://github.com/python/cpython/commit/eac4fe3b2c77693790a5ef7dfab127c1fee81bf9","https://github.com/python/cpython/commit/ef12d0dc824baccf737bba1458e5eed3d1e0fceb","https://github.com/python/cpython/issues/87451","https://github.com/python/cpython/pull/149648","https://mail.python.org/archives/list/security-announce@python.org/thread/ITF2BAPBQEPYK3LDMPRSY435JGNHYNDP/","https://cert-portal.siemens.com/productcert/html/ssa-457936.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-8328","description":"The ftpcp() function in Lib/ftplib.py was not updated when \nCVE-2021-4189 was fixed. While makepasv() was patched to replace \nserver-supplied PASV host addresses with the actual peer address \n(getpeername()[0]), ftpcp() still calls parse227() directly and passes \nthe raw attacker-controllable IP address and port to target.sendport(). This patch is related to CVE-2021-4189."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-55950","versionConstraint":">= 25.3, < 27.3.4.14||>= 28.0, < 28.5.0.3||>= 29.0, < 29.0.3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-55950","fix":{"state":"fixed","versions":["27.3.4.14","28.5.0.3","29.0.3"],"available":[{"date":"2026-08-21","kind":"first-observed","version":"27.3.4.14"},{"date":"2026-08-21","kind":"first-observed","version":"28.5.0.3"},{"date":"2026-08-21","kind":"first-observed","version":"29.0.3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-55950","cwe":"CWE-367","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-55950","date":"2026-11-12","epss":0.00401,"percentile":0.34826}],"risk":0.24661499999999997,"urls":["https://cna.erlef.org/cves/CVE-2026-55950.html","https://github.com/erlang/otp/commit/44dcb4c3d900777493ce2a6129f451aa475811f9","https://github.com/erlang/otp/commit/e44d2bf01c4473ef2ea7f09e3523cf96de6e4a04","https://github.com/erlang/otp/security/advisories/GHSA-hwfc-5hf4-gvr3","https://osv.dev/vulnerability/EEF-CVE-2026-55950","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-55950","description":"Time-of-check Time-of-use (TOCTOU) race condition vulnerability in Erlang/OTP ssl (dtls_packet_demux module) allows an unauthenticated remote attacker to crash all active DTLS sessions on a listener.\n\nA DTLS server listener uses a single shared dtls_packet_demux gen_server process to route incoming UDP datagrams to the correct connection handler. When a DTLS client reconnects rapidly from the same source address and port (sending multiple ClientHello messages in quick succession), a race condition in the demux's internal gb_trees key-value store causes a {key_exists, {old, Client}} crash, terminating the demux process. Because the demux is shared across all DTLS associations on that listener, its crash immediately kills every active DTLS session, not just the attacker's.\n\nThe attack is pre-authentication: the attacker only needs to send UDP datagrams containing valid ClientHello messages from the same source IP and port before the intermediate DOWN monitor message is processed by the gen_server. No credentials, no completed handshake, and no special configuration are required, and the crash can be repeated indefinitely to create a persistent denial of service for all clients of that listener.\n\nThis vulnerability is associated with program file lib/ssl/src/dtls_packet_demux.erl.\n\nThis issue affects OTP from OTP 25.3 before OTP 27.3.4.14, OTP 28.5.0.3, and OTP 29.0.3, corresponding to ssl from 10.9 before 11.2.12.10, 11.6.0.3, and 11.7.3."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.13.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-15366","versionConstraint":"< 3.13.15||>= 3.14.0, < 3.14.7||>= 3.15.0a1, < 3.15.0a6 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.13.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-15366","versionConstraint":"< 3.13.15||>= 3.14.0, < 3.14.7||>= 3.15.0a1, < 3.15.0a6 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-15366","fix":{"state":"fixed","versions":["3.13.15","3.14.7","3.15.0a6"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.13.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.7"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0a6"},{"date":"2026-08-12","kind":"first-observed","version":"3.13.15"},{"date":"2026-08-12","kind":"first-observed","version":"3.14.7"},{"date":"2026-03-03","kind":"first-observed","version":"3.15.0a6"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-15366","cwe":"CWE-77","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-15366","date":"2026-11-12","epss":0.00431,"percentile":0.37851}],"risk":0.234895,"urls":["https://github.com/python/cpython/commit/298182272a740ce2016aee2f54acbd0bba1944c1","https://github.com/python/cpython/commit/6262704b134db2a4ba12e85ecfbd968534f28b45","https://github.com/python/cpython/commit/71926d943c05bde79bd2a866933103541d91b6a2","https://github.com/python/cpython/commit/d0921efb665aff26b378f495e5ff84f7e3fe649d","https://github.com/python/cpython/commit/f2cd7ef89aa8a0dcbc7283bbd39548b76f2a736a","https://github.com/python/cpython/issues/143921","https://github.com/python/cpython/pull/143922","https://mail.python.org/archives/list/security-announce@python.org/thread/DD7C7JZJYTBXMDOWKCEIEBJLBRU64OMR/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-15366","description":"The imaplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"26.2.5.21"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-42789","versionConstraint":">= 17.0, < 26.2.5.21||>= 27.0, < 27.3.4.12||>= 28.0, < 28.5.0.1||>= 29.0, < 29.0.1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-42789","fix":{"state":"fixed","versions":["26.2.5.21","27.3.4.12","28.5.0.1","29.0.1"],"available":[{"date":"2026-08-21","kind":"first-observed","version":"26.2.5.21"},{"date":"2026-08-21","kind":"first-observed","version":"27.3.4.12"},{"date":"2026-08-21","kind":"first-observed","version":"28.5.0.1"},{"date":"2026-08-21","kind":"first-observed","version":"29.0.1"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N","metrics":{"baseScore":8,"impactScore":5.8,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42789","cwe":"CWE-295","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"},{"cve":"CVE-2026-42789","cwe":"CWE-296","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"},{"cve":"CVE-2026-42789","cwe":"CWE-295","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-42789","date":"2026-11-12","epss":0.00383,"percentile":0.32776}],"risk":0.22214,"urls":["https://cna.erlef.org/cves/CVE-2026-42789.html","https://github.com/erlang/otp/commit/0a05b7ca33fb0b3f0a6cb9ae34252bb3a74032b8","https://github.com/erlang/otp/commit/75ca4c0dc2bbdb286ac3c3fe89cb4b4d2b4dc333","https://github.com/erlang/otp/commit/82af606b5437c4de1276dbcc8855a47e88231226","https://github.com/erlang/otp/security/advisories/GHSA-c99q-jmpx-v8qq","https://osv.dev/vulnerability/EEF-CVE-2026-42789","https://www.erlang.org/doc/system/versions.html#order-of-versions","https://access.redhat.com/errata/RHSA-2026:39809","https://access.redhat.com/errata/RHSA-2026:54757","https://access.redhat.com/security/cve/CVE-2026-42789","https://bugzilla.redhat.com/show_bug.cgi?id=2482093","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42789.json"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42789","description":"Improper Following of a Certificate's Chain of Trust vulnerability in Erlang OTP public_key (pubkey_cert module) allows a non-CA certificate to be accepted as an intermediate issuer, enabling certificate chain forgery.\n\nIn lib/public_key/src/pubkey_cert.erl, pubkey_cert:validate_extensions/7 contains two flaws that together allow a certificate with basicConstraints cA:false and no keyUsage extension to be used as an intermediate issuer in a chain passed to public_key:pkix_path_validation/3: the cA:false clause recurses into the remaining extensions without rejecting the certificate when it is in issuer position, and the keyUsage check only fires when the extension is present, so a certificate lacking keyUsage entirely bypasses the keyCertSign enforcement.\n\nAny party holding an end-entity certificate with basicConstraints cA:false and no keyUsage extension, issued by any CA in the victim's trust store, can use that certificate's private key to sign forged leaf certificates for arbitrary identities. public_key:pkix_path_validation/3 accepts the resulting chain, and by extension every TLS or mTLS endpoint built on the OTP ssl application that relies on the default verifier is affected, including server identity verification on the client side and client certificate verification on mTLS servers.\n\nThis issue affects OTP from OTP 17.0 before OTP 27.3.4.19, OTP 28.5.0.8, and OTP 29.1.2, corresponding to public_key from 0.22 before 1.17.1.7, 1.20.3.6, and 1.21.8. Whether OTP before OTP 17.0, corresponding to public_key before 0.22, is affected is unknown."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.12"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-8291","versionConstraint":"< 3.9.24||>= 3.10.0, < 3.10.19||>= 3.11.0, < 3.11.14||>= 3.12.0, < 3.12.12||>= 3.13.0, < 3.13.10||>= 3.14.0, < 3.14.1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.12"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-8291","versionConstraint":"< 3.9.24||>= 3.10.0, < 3.10.19||>= 3.11.0, < 3.11.14||>= 3.12.0, < 3.12.12||>= 3.13.0, < 3.13.10||>= 3.14.0, < 3.14.1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-8291","fix":{"state":"fixed","versions":["3.9.24","3.10.19","3.11.14","3.12.12","3.13.10","3.14.1"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.9.24"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.19"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.12"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.10"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.1"},{"date":"2025-10-10","kind":"first-observed","version":"3.9.24"},{"date":"2025-10-10","kind":"first-observed","version":"3.10.19"},{"date":"2025-10-10","kind":"first-observed","version":"3.11.14"},{"date":"2025-10-10","kind":"first-observed","version":"3.12.12"},{"date":"2025-12-04","kind":"first-observed","version":"3.13.10"},{"date":"2025-10-10","kind":"first-observed","version":"3.14.1"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-8291","cwe":"CWE-1285","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-8291","date":"2026-11-12","epss":0.00466,"percentile":0.40851}],"risk":0.21669,"urls":["https://github.com/python/cpython/commit/162997bb70e067668c039700141770687bc8f267","https://github.com/python/cpython/commit/1d29afb0d6218aa8fb5e1e4a6133a4778d89bb46","https://github.com/python/cpython/commit/333d4a6f4967d3ace91492a39ededbcf3faa76a6","https://github.com/python/cpython/commit/76437ac248ad8ca44e9bf697b02b1e2241df2196","https://github.com/python/cpython/commit/8392b2f0d35678407d9ce7d95655a5b77de161b4","https://github.com/python/cpython/commit/bca11ae7d575d87ed93f5dd6a313be6246e3e388","https://github.com/python/cpython/commit/d11e69d6203080e3ec450446bfed0516727b85c3","https://github.com/python/cpython/issues/139700","https://github.com/python/cpython/pull/139702","https://mail.python.org/archives/list/security-announce@python.org/thread/QECOPWMTH4VPPJAXAH2BGTA4XADOP62G/","https://github.com/google/security-research/security/advisories/GHSA-hhv7-p4pg-wm6p","https://github.com/psf/advisory-database/blob/main/advisories/python/PSF-2025-12.json"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-8291","description":"The 'zipfile' module would not check the validity of the ZIP64 End of\nCentral Directory (EOCD) Locator record offset value would not be used to\nlocate the ZIP64 EOCD record, instead the ZIP64 EOCD record would be\nassumed to be the previous record in the ZIP archive. This could be abused\nto create ZIP archives that are handled differently by the 'zipfile' module\ncompared to other ZIP implementations.\n\n\nRemediation maintains this behavior, but checks that the offset specified\nin the ZIP64 EOCD Locator record matches the expected value."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-4786","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0a1, < 3.14.5rc1||>= 3.15.0a1, < 3.15.0b1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-4786","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0a1, < 3.14.5rc1||>= 3.15.0a1, < 3.15.0b1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-4786","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.14","3.14.5rc1","3.15.0b1"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.5rc1"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0b1"},{"date":"2026-08-19","kind":"first-observed","version":"3.10.21"},{"date":"2026-08-19","kind":"first-observed","version":"3.11.16"},{"date":"2026-08-19","kind":"first-observed","version":"3.12.14"},{"date":"2026-07-02","kind":"first-observed","version":"3.13.14"},{"date":"2026-07-02","kind":"first-observed","version":"3.14.5rc1"},{"date":"2026-07-02","kind":"first-observed","version":"3.15.0b1"}]},"cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L","metrics":{"baseScore":7.1,"impactScore":5.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4786","cwe":"CWE-77","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-4786","cwe":"CWE-88","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-4786","date":"2026-11-12","epss":0.00295,"percentile":0.22432}],"risk":0.2146125,"urls":["https://github.com/python/cpython/commit/28b4ad38067bbdad34edfcd03ad2de5f06387e53","https://github.com/python/cpython/commit/a4d3edf3a6ecfde504d02126410d2a65a859b744","https://github.com/python/cpython/commit/c5767a72838a8dda9d6dc5d3558075b055c56bca","https://github.com/python/cpython/commit/d22922c8a7958353689dc4763dd72da2dea03fff","https://github.com/python/cpython/commit/d6d68494be70bdbda20f89f83801ba52ec37daa4","https://github.com/python/cpython/commit/f4654824ae0850ac87227fb270f9057477946769","https://github.com/python/cpython/issues/148169","https://github.com/python/cpython/pull/148170","https://mail.python.org/archives/list/security-announce@python.org/thread/JQDUNJVB4AQNTJECSUKOBDU3XCJIPSE5/","https://access.redhat.com/errata/RHSA-2026:10117","https://access.redhat.com/errata/RHSA-2026:10140","https://access.redhat.com/errata/RHSA-2026:10141","https://access.redhat.com/errata/RHSA-2026:10711","https://access.redhat.com/errata/RHSA-2026:10745","https://access.redhat.com/errata/RHSA-2026:10774","https://access.redhat.com/errata/RHSA-2026:10949","https://access.redhat.com/errata/RHSA-2026:10950","https://access.redhat.com/errata/RHSA-2026:11062","https://access.redhat.com/errata/RHSA-2026:11077","https://access.redhat.com/errata/RHSA-2026:11768","https://access.redhat.com/errata/RHSA-2026:13692","https://access.redhat.com/errata/RHSA-2026:13812","https://access.redhat.com/errata/RHSA-2026:14652","https://access.redhat.com/errata/RHSA-2026:14653","https://access.redhat.com/errata/RHSA-2026:14656","https://access.redhat.com/errata/RHSA-2026:16699","https://access.redhat.com/errata/RHSA-2026:17525","https://access.redhat.com/errata/RHSA-2026:17619","https://access.redhat.com/errata/RHSA-2026:19019","https://access.redhat.com/errata/RHSA-2026:19064","https://access.redhat.com/errata/RHSA-2026:19175","https://access.redhat.com/errata/RHSA-2026:19176","https://access.redhat.com/errata/RHSA-2026:19177","https://access.redhat.com/errata/RHSA-2026:19216","https://access.redhat.com/errata/RHSA-2026:19549","https://access.redhat.com/errata/RHSA-2026:19570","https://access.redhat.com/errata/RHSA-2026:19571","https://access.redhat.com/errata/RHSA-2026:19576","https://access.redhat.com/errata/RHSA-2026:19589","https://access.redhat.com/errata/RHSA-2026:19590","https://access.redhat.com/errata/RHSA-2026:21275","https://access.redhat.com/errata/RHSA-2026:21682","https://access.redhat.com/errata/RHSA-2026:22144","https://access.redhat.com/errata/RHSA-2026:25096","https://access.redhat.com/errata/RHSA-2026:26187","https://access.redhat.com/errata/RHSA-2026:28247","https://access.redhat.com/errata/RHSA-2026:28581","https://access.redhat.com/errata/RHSA-2026:30078","https://access.redhat.com/errata/RHSA-2026:30087","https://access.redhat.com/errata/RHSA-2026:30088","https://access.redhat.com/errata/RHSA-2026:30089","https://access.redhat.com/errata/RHSA-2026:35838","https://access.redhat.com/errata/RHSA-2026:8822","https://access.redhat.com/errata/RHSA-2026:8824","https://access.redhat.com/errata/RHSA-2026:9228","https://access.redhat.com/security/cve/CVE-2026-4786","https://bugzilla.redhat.com/show_bug.cgi?id=2458049","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4786.json"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4786","description":"Mitgation of CVE-2026-4519 was incomplete. If the URL contained \"%action\" the mitigation could be bypassed for certain browser types the \"webbrowser.open()\" API could have commands injected into the underlying shell. See CVE-2026-4519 for details."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-55737","versionConstraint":">= 25.0, < 27.3.4.15||>= 28, < 28.5.0.4||>= 29, < 29.0.4 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-55737","fix":{"state":"fixed","versions":["27.3.4.15","28.5.0.4","29.0.4"],"available":[{"date":"2026-08-21","kind":"first-observed","version":"27.3.4.15"},{"date":"2026-08-21","kind":"first-observed","version":"28.5.0.4"},{"date":"2026-08-21","kind":"first-observed","version":"29.0.4"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-55737","cwe":"CWE-195","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"},{"cve":"CVE-2026-55737","cwe":"CWE-787","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-55737","date":"2026-11-12","epss":0.00306,"percentile":0.23725}],"risk":0.21114,"urls":["https://cna.erlef.org/cves/CVE-2026-55737.html","https://github.com/erlang/otp/commit/c5210b42a9d3d96f3d25601942ce8122be0f3761","https://github.com/erlang/otp/commit/ebcbb97b4ec223464cac3d94375739a248ddef6e","https://github.com/erlang/otp/security/advisories/GHSA-446w-268v-9462","https://osv.dev/vulnerability/EEF-CVE-2026-55737","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-55737","description":"Signed to Unsigned Conversion Error and Out-of-bounds Write vulnerability in Erlang OTP erts allows an attacker who can supply a crafted Erlang external term format (ETF) binary to binary_to_term/1 to corrupt the BEAM heap pointer and crash the virtual machine.\n\nWhen decoding a LARGE_TUPLE_EXT term, the validation pass decoded_size() in erts/emulator/beam/external.c reads the 32-bit arity field as unsigned (get_uint32()), while the decode pass dec_term() reads the same field as a signed 32-bit integer (get_int32()) into an int. An arity wire value of 0x80000000 passes validation as 2147483648 but decodes as -2147483648, so the subsequent hp += n moves the heap allocation pointer backward. Neither pass enforces the runtime tuple-arity limit MAX_ARITYVAL. The result is an out-of-bounds heap write; in practice the VM detects an impossible heap size and aborts, denying service. The required padding is large when uncompressed but the compressed-ETF envelope shrinks it to a small payload on the wire.\n\nThis issue affects OTP from OTP 25.0 before OTP 27.3.4.15, OTP 28.5.0.4, and OTP 29.0.4, corresponding to erts from 13.0 before 15.2.7.11, 16.4.0.4, and 17.0.4."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"26.2.5.18"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-23942","versionConstraint":">= 17.0, < 26.2.5.18||>= 27, < 27.3.4.9||>= 28, < 28.4.1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-23942","fix":{"state":"fixed","versions":["26.2.5.18","27.3.4.9","28.4.1"],"available":[{"date":"2026-08-21","kind":"first-observed","version":"26.2.5.18"},{"date":"2026-08-21","kind":"first-observed","version":"27.3.4.9"},{"date":"2026-08-21","kind":"first-observed","version":"28.4.1"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-23942","cwe":"CWE-22","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-23942","date":"2026-11-12","epss":0.00408,"percentile":0.3561}],"risk":0.21114,"urls":["https://cna.erlef.org/cves/CVE-2026-23942.html","https://github.com/erlang/otp/commit/27688a824f753d4c16371dc70e88753fb410590b","https://github.com/erlang/otp/commit/5ed603a1211b83b8be2d1fc06d3f3bf30c3c9759","https://github.com/erlang/otp/commit/9e0ac85d3485e7898e0da88a14be0ee2310a3b28","https://github.com/erlang/otp/security/advisories/GHSA-4749-w85x-hw9h","https://osv.dev/vulnerability/EEF-CVE-2026-23942","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-23942","description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Erlang OTP (ssh_sftpd module) allows Path Traversal.\n\nThis vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl and program routines ssh_sftpd:is_within_root/2.\n\nThe SFTP server uses string prefix matching via lists:prefix/2 rather than proper path component validation when checking if a path is within the configured root directory. This allows authenticated users to access sibling directories that share a common name prefix with the configured root directory. For example, if root is set to /home/user1, paths like /home/user10 or /home/user1_backup would incorrectly be considered within the root.\n\nThis issue affects OTP from OTP 17.0 before OTP 26.2.5.18, OTP 27.3.4.9, and OTP 28.4.1, corresponding to ssh from 3.0.1 before 5.1.4.14, 5.2.11.6, and 5.5.1. Whether OTP before OTP 17.0, corresponding to ssh before 3.0.1, is affected is unknown."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.18"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65634","versionConstraint":">= 17.0, < 27.3.4.18||>= 28, < 28.5.0.7||>= 29, < 29.1.1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65634","fix":{"state":"fixed","versions":["27.3.4.18","28.5.0.7","29.1.1"],"available":[{"date":"2026-09-30","kind":"first-observed","version":"27.3.4.18"},{"date":"2026-09-30","kind":"first-observed","version":"28.5.0.7"},{"date":"2026-09-30","kind":"first-observed","version":"29.1.1"}]},"cvss":[{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65634","cwe":"CWE-407","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-65634","date":"2026-11-12","epss":0.00266,"percentile":0.18702}],"risk":0.20881,"urls":["https://cna.erlef.org/cves/CVE-2026-65634.html","https://github.com/erlang/otp/commit/0fe2c02fdc06fab1c63be9db1a7456993d20f838","https://github.com/erlang/otp/security/advisories/GHSA-qghx-23m5-r55m","https://osv.dev/vulnerability/EEF-CVE-2026-65634","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65634","description":"Inefficient algorithmic complexity in the Erlang/OTP asn1 OBJECT IDENTIFIER decoder allows a remote unauthenticated attacker to cause denial of service by sending a crafted OID during the TLS handshake.\n\nThe BER OID decoder asn1rtt_ber:dec_subidentifiers/3 in lib/asn1/src/asn1rtt_ber.erl and the equivalent PER helper asn1rtt_per_common:dec_subidentifiers/3 in lib/asn1/src/asn1rtt_per_common.erl accumulate a base-128 subidentifier into an unbounded integer using (Av bsl 7) + H per continuation byte. Each shift and addition on the growing accumulator is linear in the number of bits already accumulated, giving quadratic total work in the size of a single subidentifier. The JER helper asn1rtt_jer:json2oid/1 in lib/asn1/src/asn1rtt_jer.erl exhibits the same class of unbounded-integer parsing when decoding a dot-separated OID from JSON. A DER-encoded OBJECT IDENTIFIER with one very large arc (approximately 262 KB of continuation bytes) consumes roughly 13 seconds of CPU on typical hardware.\n\nThe vulnerable decoder is generated into every ASN.1 module that contains an OBJECT IDENTIFIER, including OTP-PUB-KEY which is reached during X.509 certificate parsing via public_key:pkix_decode_cert/2. This decoder runs before any signature or trust chain verification, so any Erlang service that parses peer TLS certificates is exposed: the default for TLS clients (which always parse the server certificate) and for mutual-TLS servers (which parse client certificates).\n\nThis vulnerability is associated with program files lib/asn1/src/asn1rtt_ber.erl, lib/asn1/src/asn1rtt_per_common.erl and lib/asn1/src/asn1rtt_jer.erl and program routines asn1rtt_ber:dec_subidentifiers/3, asn1rtt_per_common:dec_subidentifiers/3 and asn1rtt_jer:json2oid/1.\n\nThis issue affects OTP from OTP 17.0 before OTP 27.3.4.18, OTP 28.5.0.7, and OTP 29.1.1, corresponding to asn1 from 3.0 before 5.3.4.3, 5.4.3.1, and 5.5.2. Whether OTP before OTP 17.0, corresponding to asn1 before 3.0, is affected is unknown."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-4360","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.15||>= 3.14.0, < 3.14.7||>= 3.15.0a1, < 3.15.0b4 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-4360","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.15||>= 3.14.0, < 3.14.7||>= 3.15.0a1, < 3.15.0b4 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-4360","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.15","3.14.7","3.15.0b4"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.7"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0b4"},{"date":"2026-09-15","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-15","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-15","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-15","kind":"first-observed","version":"3.13.15"},{"date":"2026-09-15","kind":"first-observed","version":"3.14.7"},{"date":"2026-09-15","kind":"first-observed","version":"3.15.0b4"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4360","cwe":"CWE-281","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-4360","date":"2026-11-12","epss":0.00481,"percentile":0.41969}],"risk":0.2080325,"urls":["https://github.com/python/cpython/commit/0367912be336348b30572f8029cec4a282782d92","https://github.com/python/cpython/commit/5e0ef3f1afe892e4f64eb83368db57ac4c40cba0","https://github.com/python/cpython/commit/7b57e8d51446297b8c7c482d224bc5f1938e4301","https://github.com/python/cpython/commit/7ccdbaba2c54250a70d7f25632152df7655a5e0a","https://github.com/python/cpython/commit/cf23b9153181062150d061468b6d24af33fe214f","https://github.com/python/cpython/commit/d2b2f5eacab4dd48446b63340613b05dcbbf0b44","https://github.com/python/cpython/commit/eee3ddf0ca10283cc7fea724aae9cd8665f8d15e","https://github.com/python/cpython/issues/151987","https://github.com/python/cpython/pull/151988","https://mail.python.org/archives/list/security-announce@python.org/thread/TWZW2PC2AZOV6FENIHFSRC63OM7MBGSB/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4360","description":"In the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts content from untrusted tar files could end up writing files with an unexpected uid/gid despite the user passing filter='data' to the extract() function."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.15.0a6"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-15367","versionConstraint":"< 3.15.0a6 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.15.0a6"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-15367","versionConstraint":"< 3.15.0a6 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-15367","fix":{"state":"fixed","versions":["3.15.0a6"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.15.0a6"},{"date":"2026-03-03","kind":"first-observed","version":"3.15.0a6"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-15367","cwe":"CWE-77","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-15367","date":"2026-11-12","epss":0.00377,"percentile":0.32138}],"risk":0.20546500000000004,"urls":["https://github.com/python/cpython/commit/b234a2b67539f787e191d2ef19a7cbdce32874e7","https://github.com/python/cpython/issues/143923","https://github.com/python/cpython/pull/143924","https://mail.python.org/archives/list/security-announce@python.org/thread/CBFBOWVGGUJFSGITQCCBZS4GEYYZ7ZNE/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-15367","description":"The poplib module, when passed a user-controlled command, can have\nadditional commands injected using newlines. Mitigation rejects commands\ncontaining control characters."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.19"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-105236","versionConstraint":">= 18.0, < 27.3.4.19||>= 28.0.0.0, < 28.5.0.8||>= 29.0.0, < 29.1.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-105236","fix":{"state":"fixed","versions":["27.3.4.19","28.5.0.8","29.1.2"],"available":[{"date":"2026-10-20","kind":"first-observed","version":"27.3.4.19"},{"date":"2026-10-20","kind":"first-observed","version":"28.5.0.8"},{"date":"2026-10-20","kind":"first-observed","version":"29.1.2"}]},"cvss":[{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-105236","cwe":"CWE-295","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-105236","date":"2026-11-12","epss":0.00357,"percentile":0.29886}],"risk":0.201705,"urls":["https://cna.erlef.org/cves/CVE-2026-105236.html","https://github.com/erlang/otp/commit/0c20f3683b3c81fd30b46047195be9b3d2c69d76","https://github.com/erlang/otp/commit/10ee925d0fee8413f1170cc21bfcf123c8d22454","https://github.com/erlang/otp/commit/4d76adbf39d547a931048544df09c3c087e56618","https://github.com/erlang/otp/commit/4fe38c4b8b2c8024afb60990e598ff823743fd54","https://github.com/erlang/otp/security/advisories/GHSA-2g23-cgjh-34gq","https://osv.dev/vulnerability/EEF-CVE-2026-105236","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-105236","description":"Improper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client that holds a certificate trusted by one SNI virtual host to authenticate to a second SNI virtual host on the same listener by resuming its TLS 1.2 session there.\n\nA server that serves several SNI names from one listen socket through sni_fun or sni_hosts keeps one pre-TLS 1.3 session cache per listener and does not bind a cached session to the SNI name or client trust policy that established it. When an SNI option set switches to verify_peer without naming reuse_sessions, ssl_config:update_options/3 inherits the base listener's reuse_sessions value of true, so the default that disables reuse for client-authenticating servers does not apply. On an abbreviated handshake ssl_session:is_resumable/4 checks only that the cached session uses one of the current server certificates and carries some peer certificate, and never revalidates that certificate against the CA selected for the requested name. The names must share a server certificate, which is common with wildcard or multi-SAN certificates. TLS 1.3 does not use this cache and is not affected.\n\nThis issue affects OTP from OTP 18.0 before OTP 27.3.4.19, OTP 28.5.0.8, and OTP 29.1.2, corresponding to ssl from 7.0 before 11.2.12.14, 11.6.0.7, and 11.7.8."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-48856","versionConstraint":">= 17.0, < 27.3.4.13||>= 28.0.0, < 28.5.0.2||>= 29.0.0, < 29.0.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-48856","fix":{"state":"fixed","versions":["27.3.4.13","28.5.0.2","29.0.2"],"available":[{"date":"2026-08-21","kind":"first-observed","version":"27.3.4.13"},{"date":"2026-08-21","kind":"first-observed","version":"28.5.0.2"},{"date":"2026-08-21","kind":"first-observed","version":"29.0.2"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-48856","cwe":"CWE-601","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-48856","date":"2026-11-12","epss":0.00335,"percentile":0.27291}],"risk":0.19765,"urls":["https://cna.erlef.org/cves/CVE-2026-48856.html","https://github.com/erlang/otp/commit/f78fae9294886f95545a2212671282eda230def1","https://github.com/erlang/otp/security/advisories/GHSA-m75x-4vwg-ggjh","https://osv.dev/vulnerability/EEF-CVE-2026-48856","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-48856","description":"Sensitive Data Exposure vulnerability in Erlang OTP inets (httpc_response module) allows Retrieve Embedded Sensitive Data.\n\nThe httpc client forwards the Authorization and Proxy-Authorization request headers to redirect targets without checking whether the redirect crosses an origin boundary. httpc_response:redirect/2 constructs the redirected request by updating only the host field of the header record; all other fields (including authorization and proxy_authorization) are copied verbatim. The redirect target host is never compared against the original host.\n\nautoredirect defaults to true, so this affects all httpc callers that do not explicitly disable automatic redirects.\n\nAn attacker who controls a server that the victim contacts via httpc can issue a cross-origin 3xx redirect to a server they also control. The Authorization header (including Basic credentials derived from URL userinfo via httpc_request:handle_user_info/2) is forwarded to the redirect target, allowing credential theft. The same applies to the Proxy-Authorization header.\n\nThis vulnerability is associated with program files lib/inets/src/http_client/httpc_response.erl.\n\nThis issue affects OTP from OTP 17.0 before OTP 27.3.4.19, OTP 28.5.0.8, and OTP 29.1.2, corresponding to inets from 5.10 before 9.3.2.8, 9.6.2.4, and 9.8.1. Whether OTP before OTP 17.0, corresponding to inets before 5.10, is affected is unknown."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-12345","versionConstraint":"< 3.12.15||>= 3.13.0, < 3.13.18||>= 3.14.0, < 3.14.9||>= 3.15.0a1, < 3.15.0rc3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-12345","versionConstraint":"< 3.12.15||>= 3.13.0, < 3.13.18||>= 3.14.0, < 3.14.9||>= 3.15.0a1, < 3.15.0rc3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-12345","fix":{"state":"fixed","versions":["3.12.15","3.13.18","3.14.9","3.15.0rc3"],"available":[{"date":"2026-10-31","kind":"first-observed","version":"3.12.15"},{"date":"2026-10-31","kind":"first-observed","version":"3.13.18"},{"date":"2026-10-31","kind":"first-observed","version":"3.14.9"},{"date":"2026-10-08","kind":"first-observed","version":"3.15.0rc3"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-12345","cwe":"CWE-59","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-12345","date":"2026-11-12","epss":0.00344,"percentile":0.28323}],"risk":0.18748,"urls":["https://github.com/python/cpython/commit/0478b52788117db4b831b3efd648f56b777628aa","https://github.com/python/cpython/commit/06ef3d43fdaf4da97af12fa694b4886092c4b970","https://github.com/python/cpython/commit/458e7134a5af7f86aee9d21b51cf499b41aa4420","https://github.com/python/cpython/commit/58ed0259cae509a19138795df302fe60b544dc74","https://github.com/python/cpython/commit/5c20517a4fc56683efe63a7751020db9573f538d","https://github.com/python/cpython/commit/c39b52d00b42200aaadff679e2fe3f1006d57c58","https://github.com/python/cpython/commit/e1f3590f155c6d66007e958c98c9d69316551993","https://github.com/python/cpython/issues/157579","https://github.com/python/cpython/pull/157580","http://www.openwall.com/lists/oss-security/2026/09/29/40"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-12345","description":"The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of the temporary directory to be deleted or have their permissions and file flags reset, with the privileges of the process performing the cleanup. Note that platforms where shutil.rmtree.avoids_symlink_attacks is false, remain affected, and file flags may still be reset outside of the tree on all platforms."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"25.3.2.21"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-46712","versionConstraint":"< 25.3.2.21||>= 26.2.1, < 26.2.5.12||>= 27.0, < 27.3.4 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-46712","fix":{"state":"fixed","versions":["25.3.2.21","26.2.5.12","27.3.4"],"available":[{"date":"2025-05-10","kind":"first-observed","version":"25.3.2.21"},{"date":"2025-05-10","kind":"first-observed","version":"26.2.5.12"},{"date":"2025-05-10","kind":"first-observed","version":"27.3.4"}]},"cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-46712","cwe":"CWE-440","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-46712","date":"2026-11-12","epss":0.00552,"percentile":0.4664}],"risk":0.18491999999999997,"urls":["https://github.com/erlang/otp/commit/e4b56a9f4a511aa9990dd86c16c61439c828df83","https://github.com/erlang/otp/releases/tag/OTP-25.3.2.21","https://github.com/erlang/otp/releases/tag/OTP-26.2.5.12","https://github.com/erlang/otp/releases/tag/OTP-27.3.4","https://github.com/erlang/otp/security/advisories/GHSA-934x-xq38-hhqf"],"severity":"Low","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-46712","description":"Erlang/OTP is a set of libraries for the Erlang programming language. In versions prior to OTP-27.3.4 (for OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2.21 (for OTP-25), Erlang/OTP SSH fails to enforce strict KEX handshake hardening measures by allowing optional messages to be exchanged. This allows a Man-in-the-Middle attacker to inject these messages in a connection during the handshake. This issue has been patched in versions OTP-27.3.4 (for OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2.21 (for OTP-25)."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-55953","versionConstraint":">= 17.0, < 27.3.4.15||>= 28, < 28.5.0.4||>= 29, < 29.0.4 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-55953","fix":{"state":"fixed","versions":["27.3.4.15","28.5.0.4","29.0.4"],"available":[{"date":"2026-08-21","kind":"first-observed","version":"27.3.4.15"},{"date":"2026-08-21","kind":"first-observed","version":"28.5.0.4"},{"date":"2026-08-21","kind":"first-observed","version":"29.0.4"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":9.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-55953","cwe":"CWE-757","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-55953","date":"2026-11-12","epss":0.00234,"percentile":0.14391}],"risk":0.184275,"urls":["https://cna.erlef.org/cves/CVE-2026-55953.html","https://github.com/erlang/otp/commit/064e236414614f9085cbbbd6eacf0e43c02d1b4b","https://github.com/erlang/otp/commit/0a82596d425abe43dc2e0b3d74aa1557ef74051c","https://github.com/erlang/otp/commit/e6ff938116b2872bccc478af7fefb56627285b77","https://github.com/erlang/otp/security/advisories/GHSA-c6cw-pr89-w882","https://osv.dev/vulnerability/EEF-CVE-2026-55953","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-55953","description":"The Erlang/OTP ssl TLS 1.2 (and earlier) and DTLS client does not verify that the cipher suite selected by the server in ServerHello was among the suites offered by the client in ClientHello. The client-side tls_handshake:hello/5 handler validates the negotiated protocol version and the downgrade sentinel but hands the server-chosen suite directly to ssl_handshake:handle_server_hello_extensions/9, which installs it without a membership check. The TLS 1.3 client path performs this check (per RFC 8446), so it is not affected.\n\nAn on-path attacker between the client and the intended server can respond with a ServerHello selecting an anonymous key exchange suite such as TLS_DH_anon_* or TLS_ECDH_anon_* that the client never offered. Anonymous suites do not require the server to present a certificate, so the entire verify_peer and cacerts configuration is bypassed: the attacker completes the handshake with its own ephemeral parameters, no certificate is validated, no hostname is checked, and ssl:connect returns {ok, Socket}. All subsequent application traffic is readable and modifiable by the attacker.\n\nThis issue affects OTP from OTP 17.0 before OTP 27.3.4.15, from OTP 28.0 before OTP 28.5.0.4, and from OTP 29.0 before OTP 29.0.4, corresponding to ssl from 5.3.4 before 11.2.12.11, from 11.3 before 11.6.0.4, and from 11.7 before 11.7.4. Whether OTP before OTP 17.0, corresponding to ssl before 5.3.4, is affected is unknown."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"26.2.5.20"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-32147","versionConstraint":">= 17.0, < 26.2.5.20||>= 27, < 27.3.4.11||>= 28, < 28.4.3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-32147","fix":{"state":"fixed","versions":["26.2.5.20","27.3.4.11","28.4.3"],"available":[{"date":"2026-08-21","kind":"first-observed","version":"26.2.5.20"},{"date":"2026-08-21","kind":"first-observed","version":"27.3.4.11"},{"date":"2026-08-21","kind":"first-observed","version":"28.4.3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-32147","cwe":"CWE-22","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-32147","date":"2026-11-12","epss":0.00368,"percentile":0.31078}],"risk":0.18032,"urls":["https://cna.erlef.org/cves/CVE-2026-32147.html","https://github.com/erlang/otp/commit/07b8f441ca711f9812fad9e9115bab3c3aa92f79","https://github.com/erlang/otp/commit/28c5d5a6c5f873dc701b597276271763e7d1c004","https://github.com/erlang/otp/security/advisories/GHSA-28jg-mw9x-hpm5","https://osv.dev/vulnerability/EEF-CVE-2026-32147","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-32147","description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Erlang OTP ssh (ssh_sftpd module) allows an authenticated SFTP user to modify file attributes outside the configured chroot directory.\n\nThe SFTP daemon (ssh_sftpd) stores the raw, user-supplied path in file handles instead of the chroot-resolved path. When SSH_FXP_FSETSTAT is issued on such a handle, file attributes (permissions, ownership, timestamps) are modified on the real filesystem path, bypassing the root directory boundary entirely.\n\nAny authenticated SFTP user on a server configured with the root option can modify file attributes of files outside the intended chroot boundary. The prerequisite is that a target file must exist on the real filesystem at the same relative path. Note that this vulnerability only allows modification of file attributes; file contents cannot be read or altered through this attack vector.\n\nIf the SSH daemon runs as root, this enables direct privilege escalation: an attacker can set the setuid bit on any binary, change ownership of sensitive files, or make system configuration world-writable.\n\nThis vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl and program routines ssh_sftpd:do_open/4 and ssh_sftpd:handle_op/4.\n\nThis issue affects OTP from OTP 17.0 before OTP 26.2.5.20, OTP 27.3.4.11, and OTP 28.4.3, corresponding to ssh from 3.0.1 before 5.1.4.15, 5.2.11.7, and 5.5.2. Whether OTP before OTP 17.0, corresponding to ssh before 3.0.1, is affected is unknown."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-54886","versionConstraint":">= 17.0, < 27.3.4.14||>= 28.0, < 28.5.0.3||>= 29.0, < 29.0.3||>= 3.0.1, < 5.2.11.9||>= 5.3, < 5.5.2.2||>= 6.0, < 6.0.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-54886","fix":{"state":"fixed","versions":["5.2.11.9","5.5.2.2","6.0.2","27.3.4.14","28.5.0.3","29.0.3"],"available":[{"date":"2026-08-21","kind":"first-observed","version":"27.3.4.14"},{"date":"2026-08-21","kind":"first-observed","version":"28.5.0.3"},{"date":"2026-08-21","kind":"first-observed","version":"29.0.3"},{"date":"2026-08-21","kind":"first-observed","version":"5.2.11.9"},{"date":"2026-08-21","kind":"first-observed","version":"5.5.2.2"},{"date":"2026-08-21","kind":"first-observed","version":"6.0.2"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54886","cwe":"CWE-400","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"},{"cve":"CVE-2026-54886","cwe":"CWE-835","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-54886","date":"2026-11-12","epss":0.00331,"percentile":0.26605}],"risk":0.16219,"urls":["https://cna.erlef.org/cves/CVE-2026-54886.html","https://github.com/erlang/otp/commit/eaf9550b8ad4738b81149d3f617102d980c6dd18","https://github.com/erlang/otp/security/advisories/GHSA-7wp4-pc27-2vj9","https://osv.dev/vulnerability/EEF-CVE-2026-54886","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54886","description":"Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP ssh (ssh_sftpd module) allows an authenticated SFTP user to render an SFTP channel permanently unresponsive.\n\nThe handle_data/4 function in ssh_sftpd contains a catch-all clause that accepts channel data of any type. When channel data with a non-zero type code (SSH_MSG_CHANNEL_EXTENDED_DATA) arrives with an empty pending buffer and a payload at or below the SFTP packet size limit, the clause tail-calls itself with identical arguments, creating an infinite loop.\n\nThe SFTP protocol operates exclusively on normal channel data (type 0). Extended data (non-zero type) is meaningless for SFTP and is never sent by conforming clients. However, the SSH protocol permits any channel participant to send extended data on an open channel, so an authenticated SFTP client can trigger the loop by sending SSH_MSG_CHANNEL_EXTENDED_DATA with any data_type_code and any non-empty payload at or below the size limit.\n\nThe targeted ssh_sftpd process enters an infinite tail-recursive loop. It never processes another message, its message queue grows without bound, and it can only be stopped by killing the process. BEAM's reduction-based scheduler preemption continues to function, so other processes on the node are not starved, but each stuck channel process consumes its full CPU time share continuously and accumulates unbounded message queue memory. Opening many channels amplifies the CPU and memory impact.\n\nErlang/OTP SSH configurations using the default max_channels setting (infinity) allow an authenticated user to open unlimited channels per connection, amplifying the attack without requiring multiple TCP connections or authentications.\n\nNo file contents, credentials, or write access are obtainable through this issue. The impact is limited to denial of service on targeted SFTP channels, with secondary CPU degradation and memory growth.\n\nThis vulnerability is associated with program file lib/ssh/src/ssh_sftpd.erl and program routine ssh_sftpd:handle_data/4.\n\nThis issue affects OTP from OTP 17.0 before OTP 27.3.4.14, OTP 28.5.0.3, and OTP 29.0.3, corresponding to ssh from 3.0.1 before 5.2.11.9, 5.5.2.2, and 6.0.2. Whether OTP before OTP 17.0, corresponding to ssh before 3.0.1, is affected is unknown."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"26.2.5.17"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-21620","versionConstraint":">= 17.0, < 26.2.5.17||>= 27, < 27.3.4.8||>= 28, < 28.3.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-21620","fix":{"state":"fixed","versions":["26.2.5.17","27.3.4.8","28.3.2"],"available":[{"date":"2026-08-21","kind":"first-observed","version":"26.2.5.17"},{"date":"2026-08-21","kind":"first-observed","version":"27.3.4.8"},{"date":"2026-08-21","kind":"first-observed","version":"28.3.2"}]},"cvss":[{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-21620","cwe":"CWE-23","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-21620","date":"2026-11-12","epss":0.00593,"percentile":0.48841}],"risk":0.15714500000000003,"urls":["https://cna.erlef.org/cves/CVE-2026-21620.html","https://github.com/erlang/otp/commit/07b8f441ca711f9812fad9e9115bab3c3aa92f79","https://github.com/erlang/otp/commit/3970738f687325138eb75f798054fa8960ac354e","https://github.com/erlang/otp/commit/655fb95725ba2fb811740b57e106873833824344","https://github.com/erlang/otp/commit/696fdec922661d4a3cc528fc34bc24fae8d4ad8a","https://github.com/erlang/otp/pull/10706","https://github.com/erlang/otp/security/advisories/GHSA-hmrc-prh3-rpvp","https://osv.dev/vulnerability/EEF-CVE-2026-21620","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"Low","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-21620","description":"Relative Path Traversal, Improper Isolation or Compartmentalization vulnerability in erlang otp erlang/otp (tftp_file modules), erlang otp inets (tftp_file modules), erlang otp tftp (tftp_file modules) allows Relative Path Traversal.\n\nThis vulnerability is associated with program files lib/tftp/src/tftp_file.erl, src/tftp_file.erl.\n\nThis issue affects OTP from OTP 17.0 before OTP 26.2.5.17, OTP 27.3.4.8, and OTP 28.3.2, corresponding to inets from 5.10 before 7.0, and tftp from 1.0 before 1.1.1.1, 1.2.2.1, and 1.2.4."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-114583","versionConstraint":"< 3.11.18||>= 3.12.0, < 3.12.16||>= 3.13.0, < 3.13.18||>= 3.14.0, < 3.14.10||>= 3.15.0, < 3.15.2||>= 3.16.0a1, < 3.16.0 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-114583","versionConstraint":"< 3.11.18||>= 3.12.0, < 3.12.16||>= 3.13.0, < 3.13.18||>= 3.14.0, < 3.14.10||>= 3.15.0, < 3.15.2||>= 3.16.0a1, < 3.16.0 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-114583","fix":{"state":"fixed","versions":["3.11.18","3.12.16","3.13.18","3.14.10","3.15.2","3.16.0"],"available":[{"date":"2026-10-28","kind":"first-observed","version":"3.11.18"},{"date":"2026-10-28","kind":"first-observed","version":"3.12.16"},{"date":"2026-10-28","kind":"first-observed","version":"3.13.18"},{"date":"2026-10-28","kind":"first-observed","version":"3.14.10"},{"date":"2026-10-28","kind":"first-observed","version":"3.15.2"},{"date":"2026-10-28","kind":"first-observed","version":"3.16.0"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114583","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114583","date":"2026-11-12","epss":0.00261,"percentile":0.18097}],"risk":0.155295,"urls":["https://github.com/python/cpython/commit/04d8fca7da2cf3ebc0881fec8a53a1330c3b665d","https://github.com/python/cpython/commit/0901ad4ffb22605f12b705d1c1197f0a01f0ba0b","https://github.com/python/cpython/commit/bc93f8ad4c4a0f92d184ec8fccc8ff8a651dcec2","https://github.com/python/cpython/commit/c6ada40177436e4e2533a7b252082b5f0c043477","https://github.com/python/cpython/commit/e7e0b3523ad6ba8472873dda594cf4021a16f8b5","https://github.com/python/cpython/commit/f4401da82e2baec5dab06cf070fbca77d53220f0","https://github.com/python/cpython/issues/160097","https://github.com/python/cpython/pull/160098","https://mail.python.org/archives/list/security-announce@python.org/thread/43JOWPRAV5DI3VZ4FUEUAZOHCATXXOCK/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114583","description":"tarfile.tar_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extractall() with filter=\"tar\" to write files outside the destination directory, subject to the permissions of the extracting process.\n\nThis is the tarfile.tar_filter counterpart of CVE-2026-7774, which covered tarfile.data_filter."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"26.2.5.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-4748","versionConstraint":">= 17, < 26.2.5.13||>= 27, < 27.3.4.1||>= 28, < 28.0.1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-4748","fix":{"state":"fixed","versions":["26.2.5.13","27.3.4.1","28.0.1"],"available":[{"date":"2025-07-03","kind":"first-observed","version":"26.2.5.13"},{"date":"2025-07-03","kind":"first-observed","version":"27.3.4.1"},{"date":"2025-07-03","kind":"first-observed","version":"28.0.1"}]},"cvss":[{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-4748","cwe":"CWE-22","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2025-4748","date":"2026-11-12","epss":0.00313,"percentile":0.24529}],"risk":0.15337,"urls":["https://cna.erlef.org/cves/CVE-2025-4748.html","https://github.com/erlang/otp/commit/07b8f441ca711f9812fad9e9115bab3c3aa92f79","https://github.com/erlang/otp/commit/578d4001575aa7647ea1efd4b2b7e3afadcc99a5","https://github.com/erlang/otp/commit/5a55feec10c9b69189d56723d8f237afa58d5d4f","https://github.com/erlang/otp/commit/ba2f2bc5f45fcfd2d6201ba07990a678bbf4cc8f","https://github.com/erlang/otp/pull/9941","https://github.com/erlang/otp/security/advisories/GHSA-9g37-pgj9-wrhc","https://osv.dev/vulnerability/EEF-CVE-2025-4748","https://www.erlang.org/doc/system/versions.html#order-of-versions","http://www.openwall.com/lists/oss-security/2025/06/16/5"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-4748","description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Erlang OTP (stdlib modules) allows Absolute Path Traversal, File Manipulation.\n\nThis vulnerability is associated with program files lib/stdlib/src/zip.erl and program routines zip:unzip/1, zip:unzip/2, zip:extract/1, zip:extract/2 unless the memory option is passed.\n\nThis issue affects OTP from OTP 17.0 before OTP 26.2.5.13, OTP 27.3.4.1, and OTP 28.0.1, corresponding to stdlib from 2.0 before 5.2.3.4, 6.2.2.1, and 7.0.1."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-82049","versionConstraint":"< 3.10.22||>= 3.11.0, < 3.11.17||>= 3.12.0, < 3.12.15||>= 3.13.0, < 3.13.16||>= 3.14.0a1, < 3.14.0b1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-82049","versionConstraint":"< 3.10.22||>= 3.11.0, < 3.11.17||>= 3.12.0, < 3.12.15||>= 3.13.0, < 3.13.16||>= 3.14.0a1, < 3.14.0b1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-82049","fix":{"state":"fixed","versions":["3.10.22","3.11.17","3.12.15","3.13.16","3.14.0b1"],"available":[{"date":"2026-10-02","kind":"first-observed","version":"3.10.22"},{"date":"2026-10-02","kind":"first-observed","version":"3.11.17"},{"date":"2026-10-01","kind":"first-observed","version":"3.12.15"},{"date":"2026-10-01","kind":"first-observed","version":"3.13.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.0b1"},{"date":"2026-09-18","kind":"first-observed","version":"3.14.0b1"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.4},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-82049","cwe":"CWE-59","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-82049","date":"2026-11-12","epss":0.00188,"percentile":0.08467}],"risk":0.14946,"urls":["https://github.com/python/cpython/commit/197663d63afed27f66e10e23c194e8a634e60913","https://github.com/python/cpython/commit/28f315486b3da0352b9a1de1c3c97f4127ba4771","https://github.com/python/cpython/commit/5a57248b22ad3b9aafcaaadae2c304a1923daeca","https://github.com/python/cpython/commit/b38be2e6cf9d989075ab73412c63e003ebad4ff3","https://github.com/python/cpython/commit/b8f23e307097552eaea2604383a12ab280520d0d","https://github.com/python/cpython/commit/c66df4e70435d257fd488b35ea129c6f317433a8","https://github.com/python/cpython/commit/cc1689830c6b9aaddded2fb9f2fe8116867e2c0e","https://github.com/python/cpython/commit/cccc7ec30212dba2abef53ce4a2bed112ddb690c","https://github.com/python/cpython/issues/157190","https://github.com/python/cpython/pull/157191","https://mail.python.org/archives/list/security-announce@python.org/thread/EFJWGAZJA56AKSBR2WHMHQZO7RRLZPRH/","http://www.openwall.com/lists/oss-security/2026/09/14/27"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-82049","description":"In CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link. Such archives may cause extraction to modify the permissions or modification time of a file outside the destination directory, or expose the contents of that file within the extracted tree."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-4519","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.13||>= 3.14.0, < 3.14.4||>= 3.15.0a1, < 3.15.0a8 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-4519","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.13||>= 3.14.0, < 3.14.4||>= 3.15.0a1, < 3.15.0a8 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-4519","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.13","3.14.4","3.15.0a8"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.4"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0a8"},{"date":"2026-09-15","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-15","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-15","kind":"first-observed","version":"3.12.14"},{"date":"2026-04-10","kind":"first-observed","version":"3.13.13"},{"date":"2026-04-10","kind":"first-observed","version":"3.14.4"},{"date":"2026-04-10","kind":"first-observed","version":"3.15.0a8"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L","metrics":{"baseScore":7.1,"impactScore":5.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4519","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-4519","cwe":"CWE-88","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-4519","date":"2026-11-12","epss":0.0032,"percentile":0.25394}],"risk":0.1408,"urls":["https://github.com/python/cpython/commit/3681d47a440865aead912a054d4599087b4270dd","https://github.com/python/cpython/commit/43fe06b96f6a6cf5cfd5bdab20b8649374956866","https://github.com/python/cpython/commit/591ed890270c5697b013bf637029fb3e6cd2d73e","https://github.com/python/cpython/commit/594b5a05dc9913880ac92eded440defbf32a28d1","https://github.com/python/cpython/commit/82a24a4442312bdcfc4c799885e8b3e00990f02b","https://github.com/python/cpython/commit/89bfb8e5ed3c7caa241028f1a4eac5f6275a46a4","https://github.com/python/cpython/commit/9669a912a0e329c094e992204d6bdb8787024d76","https://github.com/python/cpython/commit/96fc5048605863c7b6fd6289643feb0e97edd96c","https://github.com/python/cpython/commit/ad4d5ba32af4d80b0dfa2ba9d8203bfb219e60a5","https://github.com/python/cpython/commit/cbba6119391112aba9c5aebf7b94aea447922c48","https://github.com/python/cpython/commit/cc023511238ad93ecc8796157c6f9139a2bb2932","https://github.com/python/cpython/commit/ceac1efc66516ac387eef2c9a0ce671895b44f03","https://github.com/python/cpython/issues/143930","https://github.com/python/cpython/pull/143931","https://mail.python.org/archives/list/security-announce@python.org/thread/AY5NDSS433JK56Q7Q5IS7B37QFZVVOUS/","http://www.openwall.com/lists/oss-security/2026/03/20/1","https://access.redhat.com/errata/RHSA-2026:10065","https://access.redhat.com/errata/RHSA-2026:10101","https://access.redhat.com/errata/RHSA-2026:10102","https://access.redhat.com/errata/RHSA-2026:10111","https://access.redhat.com/errata/RHSA-2026:10140","https://access.redhat.com/errata/RHSA-2026:10141","https://access.redhat.com/errata/RHSA-2026:13812","https://access.redhat.com/errata/RHSA-2026:16008","https://access.redhat.com/errata/RHSA-2026:16009","https://access.redhat.com/errata/RHSA-2026:16030","https://access.redhat.com/errata/RHSA-2026:16174","https://access.redhat.com/errata/RHSA-2026:19019","https://access.redhat.com/errata/RHSA-2026:19064","https://access.redhat.com/errata/RHSA-2026:19175","https://access.redhat.com/errata/RHSA-2026:19176","https://access.redhat.com/errata/RHSA-2026:19177","https://access.redhat.com/errata/RHSA-2026:19216","https://access.redhat.com/errata/RHSA-2026:19724","https://access.redhat.com/errata/RHSA-2026:19725","https://access.redhat.com/errata/RHSA-2026:21275","https://access.redhat.com/errata/RHSA-2026:25096","https://access.redhat.com/errata/RHSA-2026:6016","https://access.redhat.com/errata/RHSA-2026:6035","https://access.redhat.com/errata/RHSA-2026:6256","https://access.redhat.com/errata/RHSA-2026:6281","https://access.redhat.com/errata/RHSA-2026:6283","https://access.redhat.com/errata/RHSA-2026:6285","https://access.redhat.com/errata/RHSA-2026:6286","https://access.redhat.com/errata/RHSA-2026:6473","https://access.redhat.com/errata/RHSA-2026:6766","https://access.redhat.com/errata/RHSA-2026:7010","https://access.redhat.com/errata/RHSA-2026:7244","https://access.redhat.com/errata/RHSA-2026:7329","https://access.redhat.com/errata/RHSA-2026:7335","https://access.redhat.com/errata/RHSA-2026:7443","https://access.redhat.com/errata/RHSA-2026:7661","https://access.redhat.com/errata/RHSA-2026:8746","https://access.redhat.com/errata/RHSA-2026:8747","https://access.redhat.com/errata/RHSA-2026:8748","https://access.redhat.com/errata/RHSA-2026:9042","https://access.redhat.com/errata/RHSA-2026:9260","https://access.redhat.com/errata/RHSA-2026:9261","https://access.redhat.com/errata/RHSA-2026:9262","https://access.redhat.com/errata/RHSA-2026:9289","https://access.redhat.com/errata/RHSA-2026:9354","https://access.redhat.com/errata/RHSA-2026:9386","https://access.redhat.com/errata/RHSA-2026:9387","https://access.redhat.com/errata/RHSA-2026:9591","https://access.redhat.com/errata/RHSA-2026:9614","https://access.redhat.com/errata/RHSA-2026:9621","https://access.redhat.com/errata/RHSA-2026:9705","https://access.redhat.com/errata/RHSA-2026:9745","https://access.redhat.com/security/cve/CVE-2026-4519","https://bugzilla.redhat.com/show_bug.cgi?id=2449649","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4519.json"],"severity":"Low","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4519","description":"The webbrowser.open() API would accept leading dashes in the URL which \ncould be handled as command line options for certain web browsers. New \nbehavior rejects leading dashes. Users are recommended to sanitize URLs \nprior to passing to webbrowser.open()."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-48855","versionConstraint":">= 17.0, < 27.3.4.13||>= 28.0.0, < 28.5.0.2||>= 29.0.0, < 29.0.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-48855","fix":{"state":"fixed","versions":["27.3.4.13","28.5.0.2","29.0.2"],"available":[{"date":"2026-08-21","kind":"first-observed","version":"27.3.4.13"},{"date":"2026-08-21","kind":"first-observed","version":"28.5.0.2"},{"date":"2026-08-21","kind":"first-observed","version":"29.0.2"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-48855","cwe":"CWE-200","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-48855","date":"2026-11-12","epss":0.00299,"percentile":0.22863}],"risk":0.14053000000000002,"urls":["https://cna.erlef.org/cves/CVE-2026-48855.html","https://github.com/erlang/otp/commit/08225797f7ef943d0c82a1d9dd6650d94ca2580d","https://github.com/erlang/otp/commit/8f4224a0d2676b0653d2c71a889a956e8c2c62d6","https://github.com/erlang/otp/security/advisories/GHSA-pv7g-pjrq-x2fh","https://osv.dev/vulnerability/EEF-CVE-2026-48855","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-48855","description":"Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Erlang OTP ssh (ssh_sftpd module) allows File Discovery.\n\nThe SSH_FXP_READLINK handler in ssh_sftpd sends the raw result of file:read_link/2 to the client without calling chroot_filename/2 to strip the backend root prefix. An authenticated SFTP client can create a symlink inside the chroot pointing to /; ssh_sftpd resolves the target to the absolute backend root and stores it on disk. Reading the symlink back via SSH_FXP_READLINK returns that absolute path, for example /data/sftp, instead of the chrooted value /.\n\nThe information disclosed is the absolute filesystem path of the SFTP root directory and of any symlink targets within it. No file contents, credentials, or access to paths outside the root directory are obtainable through this issue alone.\n\nThis vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl.\n\nThis issue affects OTP from OTP 17.0 before OTP 27.3.4.13, OTP 28.5.0.2, and OTP 29.0.2, corresponding to ssh from 3.0.1 before 5.2.11.8, 5.5.2.1, and 6.0.1. Whether OTP before OTP 17.0, corresponding to ssh before 3.0.1, is affected is unknown."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"25.3.2.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-53846","versionConstraint":">= 25.3.2.8, < 25.3.2.16||>= 26.2, < 26.2.5.6||>= 27.0, < 27.1.3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-53846","fix":{"state":"fixed","versions":["25.3.2.16","26.2.5.6","27.1.3"],"available":[{"date":"2024-12-07","kind":"first-observed","version":"25.3.2.16"},{"date":"2024-12-07","kind":"first-observed","version":"26.2.5.6"},{"date":"2024-12-07","kind":"first-observed","version":"27.1.3"}]},"cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","metrics":{"baseScore":5.5,"impactScore":3.8,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-53846","cwe":"CWE-295","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-53846","date":"2026-11-12","epss":0.00263,"percentile":0.18352}],"risk":0.138075,"urls":["https://github.com/erlang/otp/security/advisories/GHSA-qw6r-qh9v-638v"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-53846","description":"OTP is a set of Erlang libraries, which consists of the Erlang runtime system, a number of ready-to-use components mainly written in Erlang, and a set of design principles for Erlang programs. A regression was introduced into the ssl application of OTP starting at OTP-25.3.2.8, OTP-26.2, and OTP-27.0, resulting in a server or client verifying the peer when incorrect extended key usage is presented (i.e., a server will verify a client if they have server auth ext key usage and vice versa)."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-15310","versionConstraint":"< 3.10.22||>= 3.11.0, < 3.11.17||>= 3.12.0, < 3.12.15||>= 3.13.0, < 3.13.16||>= 3.14.0, < 3.14.8||>= 3.15.0a1, < 3.15.0rc2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-15310","versionConstraint":"< 3.10.22||>= 3.11.0, < 3.11.17||>= 3.12.0, < 3.12.15||>= 3.13.0, < 3.13.16||>= 3.14.0, < 3.14.8||>= 3.15.0a1, < 3.15.0rc2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-15310","fix":{"state":"fixed","versions":["3.10.22","3.11.17","3.12.15","3.13.16","3.14.8","3.15.0rc2"],"available":[{"date":"2026-10-02","kind":"first-observed","version":"3.10.22"},{"date":"2026-10-02","kind":"first-observed","version":"3.11.17"},{"date":"2026-10-01","kind":"first-observed","version":"3.12.15"},{"date":"2026-10-01","kind":"first-observed","version":"3.13.16"},{"date":"2026-10-01","kind":"first-observed","version":"3.14.8"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0rc2"},{"date":"2026-09-09","kind":"first-observed","version":"3.15.0rc2"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15310","cwe":"CWE-400","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-15310","date":"2026-11-12","epss":0.00526,"percentile":0.45063}],"risk":0.13413,"urls":["https://github.com/python/cpython/commit/09a2e7e6678b4f65449e7ad8f112c48f944591e2","https://github.com/python/cpython/commit/1b424c0178a01e155fd0267dc28a8fc1159b33a8","https://github.com/python/cpython/commit/31980e84b9a708424a0a1dfecde3fc991e313f89","https://github.com/python/cpython/commit/6257029de42ef89b67f3d20137de87d43e197530","https://github.com/python/cpython/commit/9d167992b59cf5e23c66b9ed742b13f5925f7d70","https://github.com/python/cpython/commit/c2bfbcdd1a11690507a10bc0998f95b8dc6b6fac","https://github.com/python/cpython/commit/dcdd406ddbfc4cb29b24c3df17cbabe21d316ce1","https://github.com/python/cpython/commit/e2311cfb3dd518f008f312fe0631f4f7490d237a","https://github.com/python/cpython/commit/f507e6946a3194e83e1d7b8ee6e14567175e46de","https://github.com/python/cpython/commit/f897dbf2f36a5935700b7c2d94d4681d2136b7d4","https://github.com/python/cpython/issues/156002","https://github.com/python/cpython/pull/156003","https://mail.python.org/archives/list/security-announce@python.org/thread/YUHXURX2WZGKGNA4ANYBQS2VZRYQ5JNK/","https://cert-portal.siemens.com/productcert/html/ssa-457936.html"],"severity":"Low","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15310","description":"When decompressing crafted zip files using the bzip/LZMA/Zstandard \n\ncompressions, Python could use an attacker-controlled size to \n\npre-allocate memory, possibly resulting in memory exhaustion."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.16.0"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-116566","versionConstraint":"< 3.16.0 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.16.0"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-116566","versionConstraint":"< 3.16.0 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-116566","fix":{"state":"fixed","versions":["3.16.0"],"available":[{"date":"2026-11-05","kind":"first-observed","version":"3.16.0"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116566","cwe":"CWE-158","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-116566","date":"2026-11-12","epss":0.00259,"percentile":0.17806}],"risk":0.133385,"urls":["https://github.com/python/cpython/commit/131a3a66c5f400b588f9fd2732a5ed4e89623ee3","https://github.com/python/cpython/issues/160898","https://github.com/python/cpython/pull/160899","https://mail.python.org/archives/list/security-announce@python.org/thread/HCHE62VYTPYI6WOPJQDWUBR4CINBPSM7/","http://www.openwall.com/lists/oss-security/2026/10/29/4"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116566","description":"socket.getaddrinfo() previously accepted null bytes within *host* and *port* parameters which can cause the values to be silently truncated."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-48858","versionConstraint":">= 17.4, < 27.3.4.13||>= 28.0.0, < 28.5.0.2||>= 29.0.0, < 29.0.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-48858","fix":{"state":"fixed","versions":["27.3.4.13","28.5.0.2","29.0.2"],"available":[{"date":"2026-08-21","kind":"first-observed","version":"27.3.4.13"},{"date":"2026-08-21","kind":"first-observed","version":"28.5.0.2"},{"date":"2026-08-21","kind":"first-observed","version":"29.0.2"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-48858","cwe":"CWE-918","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-48858","date":"2026-11-12","epss":0.00234,"percentile":0.14504}],"risk":0.13338000000000003,"urls":["https://cna.erlef.org/cves/CVE-2026-48858.html","https://github.com/erlang/otp/commit/2691a806231ffd0490a8a9e20500dec0c7e73727","https://github.com/erlang/otp/commit/521bcfa24407ee8cb5614823cf905c37ea3aa605","https://github.com/erlang/otp/commit/be95772ee1fcfe71045ef070130bea7a910b81e3","https://github.com/erlang/otp/security/advisories/GHSA-24cv-hwgr-37fq","https://osv.dev/vulnerability/EEF-CVE-2026-48858","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-48858","description":"Server-Side Request Forgery (SSRF) vulnerability in Erlang/OTP ftp (ftp_internal module) allows FTP bounce attacks and SSRF via an unvalidated PASV response IP address.\n\nThe ftp_internal:handle_ctrl_result/2 PASV handler (mode=passive, ipfamily=inet, ftp_extension=false) extracts the IP address from the server's 227 response and passes it directly to gen_tcp:connect/4 without validating it against the control connection peer address. The adjacent EPSV handlers correctly call peername(CSock) to derive the IP from the control connection, but the PASV handler does not. A malicious or compromised FTP server can redirect the client's data connection to an arbitrary internal host and port. On read operations (ftp:ls/1,2, ftp:nlist/1,2, ftp:recv/2,3), data from the redirected target is returned to the caller. On write operations (ftp:send/2,3, ftp:append/2,3), file content is sent to the redirected target. This enables SSRF against internal hosts, cloud metadata endpoints, and FTP bounce attacks against third-party hosts.\n\nThe vulnerable path is the default configuration (mode=passive, ipfamily=inet, ftp_extension=false). RFC 2577 section 3 explicitly recommends validating the PASV response IP against the control connection peer.\n\nThe ftp application is deprecated and scheduled for removal in OTP-30.\n\nThis vulnerability is associated with program files lib/inets/src/ftp/ftp_internal.erl (inets 5.10.4 through 6.5, OTP 17.4 through 20.3) and lib/ftp/src/ftp_internal.erl (ftp 1.0 and later, OTP 21.0 and later).\n\nThis issue affects OTP from OTP 17.4 before OTP 27.3.4.13, OTP 28.5.0.2, and OTP 29.0.2, corresponding to inets from 5.10.4 before 7.0, and ftp from 1.0 before 1.2.3.1, 1.2.4.1, and 1.2.6."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-54887","versionConstraint":">= 20.0, < 27.3.4.14||>= 28.0, < 28.5.0.3||>= 29.0, < 29.0.3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-54887","fix":{"state":"fixed","versions":["27.3.4.14","28.5.0.3","29.0.3"],"available":[{"date":"2026-08-21","kind":"first-observed","version":"27.3.4.14"},{"date":"2026-08-21","kind":"first-observed","version":"28.5.0.3"},{"date":"2026-08-21","kind":"first-observed","version":"29.0.3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54887","cwe":"CWE-1394","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-54887","date":"2026-11-12","epss":0.00252,"percentile":0.16816}],"risk":0.13293,"urls":["https://cna.erlef.org/cves/CVE-2026-54887.html","https://github.com/erlang/otp/commit/888e3bcd72d5406016b9e0de741026bc2a6f114d","https://github.com/erlang/otp/commit/e594aad2f87aab39e99fccf9e021bc94e0bbf7d4","https://github.com/erlang/otp/security/advisories/GHSA-p2m2-3c2w-8jp8","https://osv.dev/vulnerability/EEF-CVE-2026-54887","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54887","description":"Use of Default Cryptographic Key vulnerability in Erlang/OTP ssl (DTLS server) allows predictable DTLS cookie computation during the startup window, enabling source address verification bypass.\n\nOn DTLS server startup, dtls_server_connection:initial_hello/3 initializes previous_cookie_secret to the empty binary (<<>>) instead of a random value. Because HMAC with an empty key is deterministic, anyone who observes the plaintext ClientHello can compute dtls_handshake:cookie(<<>>, IP, Port, Hello) and forge a valid DTLS cookie before the first rotation of the cookie secret. The DTLS cookie (RFC 6347 §4.2.1) is a denial-of-service mitigation that prevents spoofed source IPs from forcing the server to allocate state and perform expensive cryptographic operations; it is not an authentication mechanism. During the window from server startup until the first secret rotation (0 to 15 seconds), an attacker who can observe the plaintext ClientHello can bypass the source address verification, enabling DTLS handshake amplification with spoofed source addresses.\n\nThis vulnerability is associated with program file lib/ssl/src/dtls_server_connection.erl and program routine dtls_server_connection:initial_hello/3.\n\nThis issue affects OTP from OTP 20.0 before OTP 27.3.4.14, OTP 28.5.0.3, and OTP 29.0.3, corresponding to ssl from 8.2 before 11.2.12.10, 11.6.0.3, and 11.7.3."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.11"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-4516","versionConstraint":"< 3.9.23||>= 3.10.0, < 3.10.18||>= 3.11.0, < 3.11.13||>= 3.12.0, < 3.12.11||>= 3.13.0, < 3.13.4||>= 3.14.0a1, < 3.14.0b2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.11"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-4516","versionConstraint":"< 3.9.23||>= 3.10.0, < 3.10.18||>= 3.11.0, < 3.11.13||>= 3.12.0, < 3.12.11||>= 3.13.0, < 3.13.4||>= 3.14.0a1, < 3.14.0b2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-4516","fix":{"state":"fixed","versions":["3.9.23","3.10.18","3.11.13","3.12.11","3.13.4","3.14.0b2"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.9.23"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.18"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.11"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.4"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.0b2"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.23"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.18"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.13"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.11"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.4"},{"date":"2025-09-04","kind":"first-observed","version":"3.14.0b2"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-4516","cwe":"CWE-416","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-4516","date":"2026-11-12","epss":0.00225,"percentile":0.13357}],"risk":0.12262499999999998,"urls":["https://github.com/python/cpython/commit/4398b788ffc1f954a2c552da285477d42a571292","https://github.com/python/cpython/commit/6279eb8c076d89d3739a6edb393e43c7929b429d","https://github.com/python/cpython/commit/69b4387f78f413e8c47572a85b3478c47eba8142","https://github.com/python/cpython/commit/73b3040f592436385007918887b7e2132aa8431f","https://github.com/python/cpython/commit/8d35fd1b34935221aff23a1ab69a429dd156be77","https://github.com/python/cpython/commit/9f69a58623bd01349a18ba0c7a9cb1dad6a51e8e","https://github.com/python/cpython/commit/ab9893c40609935e0d40a6d2a7307ea51aec598b","https://github.com/python/cpython/issues/133767","https://github.com/python/cpython/pull/129648","https://mail.python.org/archives/list/security-announce@python.org/thread/L75IPBBTSCYEF56I2M4KIW353BB3AY74/","http://www.openwall.com/lists/oss-security/2025/05/16/4","http://www.openwall.com/lists/oss-security/2025/05/19/1"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-4516","description":"There is an issue in CPython when using `bytes.decode(\"unicode_escape\", error=\"ignore|replace\")`. If you are not using the \"unicode_escape\" encoding or an error handler your usage is not affected. To work-around this issue you may stop using the error= handler and instead wrap the bytes.decode() call in a try-except catching the DecodeError."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-2297","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.13||>= 3.14.0, < 3.14.4||>= 3.15.0a1, < 3.15.0a7 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-2297","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.13||>= 3.14.0, < 3.14.4||>= 3.15.0a1, < 3.15.0a7 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-2297","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.13","3.14.4","3.15.0a7"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.4"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0a7"},{"date":"2026-08-19","kind":"first-observed","version":"3.10.21"},{"date":"2026-08-19","kind":"first-observed","version":"3.11.16"},{"date":"2026-08-19","kind":"first-observed","version":"3.12.14"},{"date":"2026-04-10","kind":"first-observed","version":"3.13.13"},{"date":"2026-04-10","kind":"first-observed","version":"3.14.4"},{"date":"2026-04-10","kind":"first-observed","version":"3.15.0a7"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-2297","cwe":"CWE-668","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-2297","date":"2026-11-12","epss":0.0022,"percentile":0.12691}],"risk":0.11770000000000001,"urls":["https://github.com/python/cpython/commit/482d6f8bdba9da3725d272e8bb4a2d25fb6a603e","https://github.com/python/cpython/commit/69ddd9bb2cc4bd69b1565647c18659c6a789ccd9","https://github.com/python/cpython/commit/876858c9f65d9ab656c7fa639f268ce7856d89dd","https://github.com/python/cpython/commit/a51b1b512de1d56b3714b65628a2eae2b07e535e","https://github.com/python/cpython/commit/c70adad78caeeea33f92f560ecb93331ca11bf66","https://github.com/python/cpython/commit/e58e9802b9bec5cdbf48fc9bf1da5f4fda482e86","https://github.com/python/cpython/issues/145506","https://github.com/python/cpython/pull/145507","http://www.openwall.com/lists/oss-security/2026/03/05/6"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-2297","description":"The import hook in CPython that handles legacy *.pyc files (SourcelessFileLoader) is incorrectly handled in FileLoader (a base class) and so does not use io.open_code() to read the .pyc files. sys.audit handlers for this audit event therefore do not fire."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"26.2.5.19"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-28810","versionConstraint":">= 17.0, < 26.2.5.19||>= 27.0, < 27.3.4.10||>= 28.0, < 28.4.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-28810","fix":{"state":"fixed","versions":["26.2.5.19","27.3.4.10","28.4.2"],"available":[{"date":"2026-08-21","kind":"first-observed","version":"26.2.5.19"},{"date":"2026-08-21","kind":"first-observed","version":"27.3.4.10"},{"date":"2026-08-21","kind":"first-observed","version":"28.4.2"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28810","cwe":"CWE-340","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-28810","date":"2026-11-12","epss":0.00281,"percentile":0.20813}],"risk":0.1124,"urls":["https://cna.erlef.org/cves/CVE-2026-28810.html","https://github.com/erlang/otp/commit/07b8f441ca711f9812fad9e9115bab3c3aa92f79","https://github.com/erlang/otp/commit/36f23c9d2cc54afe83671dd7343596d7972839a5","https://github.com/erlang/otp/commit/b057a9d995017b1be50d6dc02edd52382f3231b8","https://github.com/erlang/otp/commit/dd15e8eb03548c5e55e9915f0e91389ec6bad9fd","https://github.com/erlang/otp/security/advisories/GHSA-v884-5jg5-whj8","https://osv.dev/vulnerability/EEF-CVE-2026-28810","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"Low","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-28810","description":"Generation of Predictable Numbers or Identifiers vulnerability in Erlang/OTP kernel (inet_res, inet_db modules) allows DNS Cache Poisoning.\n\nThe built-in DNS resolver (inet_res) uses a sequential, process-global 16-bit transaction ID for UDP queries and does not implement source port randomization. Response validation relies almost entirely on this ID, making DNS cache poisoning practical for an attacker who can observe one query or predict the next ID. This conflicts with RFC 5452 recommendations for mitigating forged DNS answers.\n\ninet_res is intended for use in trusted network environments and with trusted recursive resolvers. Earlier documentation did not clearly state this deployment assumption, which could lead users to deploy the resolver in environments where spoofed DNS responses are possible.\n\nThis vulnerability is associated with program files lib/kernel/src/inet_db.erl and lib/kernel/src/inet_res.erl.\n\nThis issue affects OTP from OTP 17.0 before OTP 26.2.5.19, OTP 27.3.4.10, and OTP 28.4.2, corresponding to kernel from 3.0 before 9.2.4.11, 10.2.7.4, and 10.6.2."},"relatedVulnerabilities":[]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-53422","versionConstraint":">= 17.0, < 27.3.4.14||>= 28.0, < 28.5.0.3||>= 29.0, < 29.0.3||>= 3.0.1, < 5.2.11.9||>= 5.3, < 5.5.2.2||>= 6.0, < 6.0.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-53422","fix":{"state":"fixed","versions":["5.2.11.9","5.5.2.2","6.0.2","27.3.4.14","28.5.0.3","29.0.3"],"available":[{"date":"2026-08-21","kind":"first-observed","version":"27.3.4.14"},{"date":"2026-08-21","kind":"first-observed","version":"28.5.0.3"},{"date":"2026-08-21","kind":"first-observed","version":"29.0.3"},{"date":"2026-08-21","kind":"first-observed","version":"5.2.11.9"},{"date":"2026-08-21","kind":"first-observed","version":"5.5.2.2"},{"date":"2026-08-21","kind":"first-observed","version":"6.0.2"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-53422","cwe":"CWE-204","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-53422","date":"2026-11-12","epss":0.00262,"percentile":0.18179}],"risk":0.10872999999999998,"urls":["https://cna.erlef.org/cves/CVE-2026-53422.html","https://github.com/erlang/otp/commit/059e5785ef8c1d423820ca633fb7b37f47645172","https://github.com/erlang/otp/commit/86622cfaacf57a02c7645d1999f946846b504c94","https://github.com/erlang/otp/commit/c5a8f50ae68888ff243c5c741a06d2b3a4b48b7a","https://github.com/erlang/otp/security/advisories/GHSA-h9pw-h5w4-h976","https://osv.dev/vulnerability/EEF-CVE-2026-53422","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-53422","description":"Observable Response Discrepancy vulnerability in Erlang OTP ssh (ssh_sftpd module) allows an authenticated SFTP user to enumerate the existence of files and directories outside the configured root directory.\n\nThe SSH_FXP_REALPATH handler in ssh_sftpd calls relate_file_name/3 with Canonicalize=false, unlike every other SFTP operation handler. This allows .. components in the requested path to bypass the is_within_root/2 check without being resolved. The un-canonicalized path then enters resolve_symlinks/2, which walks up the directory tree above the configured root and issues read_link() syscalls on arbitrary filesystem paths.\n\nAn authenticated SFTP client can exploit this by sending a REALPATH request with a crafted traversal path. The server response differs depending on whether the target path exists on the host filesystem (SSH_FXP_NAME when the path resolves successfully, SSH_FX_NO_SUCH_FILE when it does not). This creates a path-existence oracle that an attacker can use to enumerate the filesystem structure outside the configured root, including the existence of sensitive files, directories, and mount points.\n\nThe vulnerability leaks only the existence of paths. No file contents, credentials, or write access are obtainable through this issue alone. The information gained may assist further attacks when combined with other vulnerabilities.\n\nThis vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl and program routine ssh_sftpd:handle_op/4.\n\nThis issue affects OTP from OTP 17.0 before OTP 27.3.4.14, OTP 28.5.0.3, and OTP 29.0.3, corresponding to ssh from 3.0.1 before 5.2.11.9, 5.5.2.2, and 6.0.2. Whether OTP before OTP 17.0, corresponding to ssh before 3.0.1, is affected is unknown."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-13837","versionConstraint":"< 3.10.20||>= 3.11.0, < 3.11.15||>= 3.12.0, < 3.12.13||>= 3.13.0, < 3.13.10||>= 3.14.0, < 3.14.1||>= 3.15.0a1, < 3.15.0a3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-13837","versionConstraint":"< 3.10.20||>= 3.11.0, < 3.11.15||>= 3.12.0, < 3.12.13||>= 3.13.0, < 3.13.10||>= 3.14.0, < 3.14.1||>= 3.15.0a1, < 3.15.0a3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-13837","fix":{"state":"fixed","versions":["3.10.20","3.11.15","3.12.13","3.13.10","3.14.1","3.15.0a3"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.10"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.1"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0a3"},{"date":"2026-09-15","kind":"first-observed","version":"3.10.20"},{"date":"2026-09-15","kind":"first-observed","version":"3.11.15"},{"date":"2026-09-15","kind":"first-observed","version":"3.12.13"},{"date":"2025-12-04","kind":"first-observed","version":"3.13.10"},{"date":"2025-12-04","kind":"first-observed","version":"3.14.1"},{"date":"2026-04-15","kind":"first-observed","version":"3.15.0a3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-13837","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-13837","date":"2026-11-12","epss":0.00239,"percentile":0.15124}],"risk":0.10516000000000002,"urls":["https://github.com/python/cpython/commit/568342cfc8f002d9a15f30238f26b9d2e0e79036","https://github.com/python/cpython/commit/5a8b19677d818fb41ee55f310233772e15aa1a2b","https://github.com/python/cpython/commit/694922cf40aa3a28f898b5f5ee08b71b4922df70","https://github.com/python/cpython/commit/71fa8eb8233b37f16c88b6e3e583b461b205d1ba","https://github.com/python/cpython/commit/b64441e4852383645af5b435411a6f849dd1b4cb","https://github.com/python/cpython/commit/cefee7d118a26ef6cd43db59bb9d98ca9a331111","https://github.com/python/cpython/issues/119342","https://github.com/python/cpython/pull/119343","https://mail.python.org/archives/list/security-announce@python.org/thread/2X5IBCJXRQAZ5PSERLHMSJFBHFR3QM2C/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-13837","description":"When loading a plist file, the plistlib module reads data in size specified by the file itself, meaning a malicious file can cause OOM and DoS issues"},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.13.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-3446","versionConstraint":"< 3.13.13||>= 3.14.0, < 3.14.4||>= 3.15.0a1, < 3.15.0a8 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.13.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-3446","versionConstraint":"< 3.13.13||>= 3.14.0, < 3.14.4||>= 3.15.0a1, < 3.15.0a8 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-3446","fix":{"state":"fixed","versions":["3.13.13","3.14.4","3.15.0a8"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.13.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.4"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0a8"},{"date":"2026-04-14","kind":"first-observed","version":"3.13.13"},{"date":"2026-04-14","kind":"first-observed","version":"3.14.4"},{"date":"2026-04-14","kind":"first-observed","version":"3.15.0a8"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3446","cwe":"CWE-345","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-3446","date":"2026-11-12","epss":0.00179,"percentile":0.07557}],"risk":0.09845000000000001,"urls":["https://github.com/python/cpython/commit/1f9958f909c1b41a4ffc0b613ef8ec8fa5e7c474","https://github.com/python/cpython/commit/4561f6418a691b3e89aef0901f53fe0dfb7f7c0e","https://github.com/python/cpython/commit/e31c55121620189a0d1a07b689762d8ca9c1b7fa","https://github.com/python/cpython/issues/145264","https://github.com/python/cpython/pull/145267","https://mail.python.org/archives/list/security-announce@python.org/thread/F5ZT5ICGJ6CKXVUJ34YBVY7WOZ5SHG53/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-3446","description":"When calling base64.b64decode() or related functions the decoding process would stop after encountering the first padded quad regardless of whether there was more information to be processed. This can lead to data being accepted which may be processed differently by other implementations. Use \"validate=True\" to enable stricter processing of base64 data."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.13.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-6019","versionConstraint":"< 3.13.14||>= 3.14.0a1, < 3.14.5rc1||>= 3.15.0a1, < 3.15.0b1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.13.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-6019","versionConstraint":"< 3.13.14||>= 3.14.0a1, < 3.14.5rc1||>= 3.15.0a1, < 3.15.0b1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-6019","fix":{"state":"fixed","versions":["3.13.14","3.14.5rc1","3.15.0b1"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.13.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.5rc1"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0b1"},{"date":"2026-06-25","kind":"first-observed","version":"3.13.14"},{"date":"2026-06-25","kind":"first-observed","version":"3.14.5rc1"},{"date":"2026-06-25","kind":"first-observed","version":"3.15.0b1"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6019","cwe":"CWE-150","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-6019","cwe":"CWE-116","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-6019","date":"2026-11-12","epss":0.00211,"percentile":0.11394}],"risk":0.09600499999999998,"urls":["https://github.com/python/cpython/commit/3c59b8b53fc75c7f9578d16fb8201ceb43e8f76c","https://github.com/python/cpython/commit/76b3923d688c0efc580658476c5f525ec8735104","https://github.com/python/cpython/commit/f795e042043dfe26c42e1971d4502c1cdc4c65b8","https://github.com/python/cpython/issues/90309","https://github.com/python/cpython/pull/148848","https://mail.python.org/archives/list/security-announce@python.org/thread/IVNWGV2BBNC3RHQAFS22UP4DY56SAXX3/","https://cert-portal.siemens.com/productcert/html/ssa-457936.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6019","description":"http.cookies.Morsel.js_output() returns an inline <script> snippet and only escapes \" for JavaScript string context. It does not neutralize the HTML parser-sensitive sequence </script> inside the generated script element. Mitigation base64-encodes the cookie value to disallow escaping using cookie value."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.16.0"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-103995","versionConstraint":"< 3.16.0 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.16.0"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-103995","versionConstraint":"< 3.16.0 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-103995","fix":{"state":"fixed","versions":["3.16.0"],"available":[{"date":"2026-10-31","kind":"first-observed","version":"3.16.0"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-103995","cwe":"CWE-444","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-103995","date":"2026-11-12","epss":0.0036,"percentile":0.30181}],"risk":0.09,"urls":["https://github.com/python/cpython/commit/2eb2af805c156ca52b316bb4ced5e0ab3971d0ae","https://github.com/python/cpython/commit/9f52b443c002cccfb54bda0706a9276b6b4a109d","https://github.com/python/cpython/issues/150751","https://github.com/python/cpython/pull/150752"],"severity":"Low","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-103995","description":"Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-6879","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.15||>= 3.14.0, < 3.14.7||>= 3.15.0a1, < 3.15.0rc1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-6879","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.15||>= 3.14.0, < 3.14.7||>= 3.15.0a1, < 3.15.0rc1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-6879","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.15","3.14.7","3.15.0rc1"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.7"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0rc1"},{"date":"2026-08-19","kind":"first-observed","version":"3.10.21"},{"date":"2026-08-19","kind":"first-observed","version":"3.11.16"},{"date":"2026-08-19","kind":"first-observed","version":"3.12.14"},{"date":"2026-08-12","kind":"first-observed","version":"3.13.15"},{"date":"2026-08-12","kind":"first-observed","version":"3.14.7"},{"date":"2026-08-12","kind":"first-observed","version":"3.15.0rc1"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6879","cwe":"CWE-407","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-6879","date":"2026-11-12","epss":0.00355,"percentile":0.29675}],"risk":0.08875000000000001,"urls":["https://github.com/python/cpython/commit/02c08e6b747ac43d0d866a4ffa916bedf3423f81","https://github.com/python/cpython/commit/037965c00a427cba5c05447efadc67c51a492e85","https://github.com/python/cpython/commit/0583f24ae678993e3f7939f51ad5bcae5ad9dc70","https://github.com/python/cpython/commit/2ffab083782968a4d732738f4f1dff6bbd69d2b0","https://github.com/python/cpython/commit/390337b8ba1658833fdef379e1739c9f9533a8db","https://github.com/python/cpython/commit/96510a3758f4a075f43223afdee3b6ee1a7a7f02","https://github.com/python/cpython/commit/cb409342a19f25656f62e679f8bac265fe1442c3","https://github.com/python/cpython/issues/152674","https://github.com/python/cpython/pull/152676","https://mail.python.org/archives/list/security-announce@python.org/thread/7YMZ6DDZVR26TJJBVO3RDNBAVGHNYAKR/"],"severity":"Low","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6879","description":"`Element.findall()` and fully-consumed `Element.iterfind()` exhibit `O(n^2)` time complexity when using XPath index predicates (e.g. `[1]`, `[last()]`, `[last()-N]`) on XML documents with many same-tag siblings. `Element.find()` is only affected when the first match is near the end  of the sibling list, such as with `[last()]` or `[last()-N]`;  `.//item[1]` short-circuits after the first match."},"relatedVulnerabilities":[]},{"artifact":{"id":"f19767660d7ddb63","cpes":["cpe:2.3:a:golang:go:1.27.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.27.3","type":"go-module","version":"go1.27.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.27.3"},"locations":[{"path":"/usr/bin/pebble","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/pebble","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.27.4"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6859","versionConstraint":"<1.26.11||>=1.27.0-0,<1.27.4 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.27.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6859","fix":{"state":"fixed","versions":["1.26.11","1.27.4"],"available":[{"date":"2026-11-10","kind":"release","version":"1.26.11"},{"date":"2026-11-10","kind":"release","version":"1.27.4"}]},"cvss":[],"epss":[{"cve":"CVE-2026-97054","date":"2026-11-12","epss":0.00171,"percentile":0.0656}],"risk":0.08549999999999999,"urls":["https://go.dev/issue/82563","https://groups.google.com/g/golang-announce/c/iY8TY0wWgbM"],"severity":"Unknown","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/862185","description":"For HTTP/1 servers, when MaxBytesReader's limit is exceeded, \"Connection: close\" header is automatically set without synchronization, which might race with another header being set explicitly in the server handler. As a result, an HTTP/1 server that utilizes MaxBytesReader or MaxBytesHandler can crash due to runtime panic if its handler reads the request body concurrently with writing the response header."},"relatedVulnerabilities":[{"id":"CVE-2026-97054","cvss":[],"epss":[{"cve":"CVE-2026-97054","date":"2026-11-12","epss":0.00171,"percentile":0.0656}],"urls":["https://go.dev/cl/862185","https://go.dev/issue/82563","https://groups.google.com/g/golang-announce/c/iY8TY0wWgbM","https://pkg.go.dev/vuln/GO-2026-6859"],"severity":"Unknown","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-97054","description":"For HTTP/1 servers, when MaxBytesReader's limit is exceeded, \"Connection: close\" header is automatically set without synchronization, which might race with another header being set explicitly in the server handler. As a result, an HTTP/1 server that utilizes MaxBytesReader or MaxBytesHandler can crash due to runtime panic if its handler reads the request body concurrently with writing the response header."}]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-49760","versionConstraint":">= 17.0, < 27.3.4.13||>= 28.0.0, < 28.5.0.2||>= 29.0.0, < 29.0.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-49760","fix":{"state":"fixed","versions":["27.3.4.13","28.5.0.2","29.0.2"],"available":[{"date":"2026-08-21","kind":"first-observed","version":"27.3.4.13"},{"date":"2026-08-21","kind":"first-observed","version":"28.5.0.2"},{"date":"2026-08-21","kind":"first-observed","version":"29.0.2"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-49760","cwe":"CWE-121","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-49760","date":"2026-11-12","epss":0.00136,"percentile":0.03084}],"risk":0.07616,"urls":["https://cna.erlef.org/cves/CVE-2026-49760.html","https://github.com/erlang/otp/commit/0bef277b2d39dc8babb9ceb4f5d0a456f3007111","https://github.com/erlang/otp/security/advisories/GHSA-xcxj-5pg2-v72j","https://osv.dev/vulnerability/EEF-CVE-2026-49760","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-49760","description":"Stack-based Buffer Overflow vulnerability in Erlang OTP (erl_interface) allows Stack-based Buffer Overflow.\n\nThis vulnerability is associated with program file lib/erl_interface/src/misc/ei_printterm.c and program routine ei_s_print_term.\n\nThe C function ei_s_print_term uses an internal 2000-character stack buffer to format terms. When called with an encoded Erlang term containing a very large integer (encoded representation exceeding 2000 characters), the buffer overflows. The overflow bytes are restricted to the ASCII values of 0-9 and A-F, which limits exploitation to Denial of Service.\n\nThe companion function ei_print_term, which prints directly to a FILE instead of a memory buffer, does not contain this bug.\n\nThis issue affects OTP from OTP 17.0 before OTP 27.3.4.13, OTP 28.5.0.2, and OTP 29.0.2, corresponding to erl_interface from 3.7.16 before 5.5.2.1, 5.7.0.1, and 5.8.1. Whether OTP before OTP 17.0, corresponding to erl_interface before 3.7.16, is affected is unknown."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-12003","versionConstraint":"< 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.15||>= 3.14.0, < 3.14.7||>= 3.15.0a1, < 3.15.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-12003","versionConstraint":"< 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.15||>= 3.14.0, < 3.14.7||>= 3.15.0a1, < 3.15.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-12003","fix":{"state":"fixed","versions":["3.11.16","3.12.14","3.13.15","3.14.7","3.15.0b3"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.7"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0b3"},{"date":"2026-08-19","kind":"first-observed","version":"3.11.16"},{"date":"2026-08-19","kind":"first-observed","version":"3.12.14"},{"date":"2026-08-12","kind":"first-observed","version":"3.13.15"},{"date":"2026-08-12","kind":"first-observed","version":"3.14.7"},{"date":"2026-07-02","kind":"first-observed","version":"3.15.0b3"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-12003","cwe":"CWE-427","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-12003","date":"2026-11-12","epss":0.00142,"percentile":0.0355}],"risk":0.07313,"urls":["https://github.com/python/cpython/commit/03ab7b44788bfd6b8927e16bcdbd025aa08dce06","https://github.com/python/cpython/commit/16c40f944b7bff724a403cf4902763d095bb4b2a","https://github.com/python/cpython/commit/872038377db2e170e0e140b5f8aaedf636b3fbf5","https://github.com/python/cpython/commit/9e863fab283eddca9c2a8f9d1ee30f4dc243e314","https://github.com/python/cpython/commit/a86de0bc236fbb9452f98998fc8437e9fca35700","https://github.com/python/cpython/commit/b93d6d3399adbd3a5037b6b92fc3587c85ac5d56","https://github.com/python/cpython/issues/151544","https://github.com/python/cpython/pull/151545","https://https://mail.python.org/archives/list/security-announce@python.org/thread/JIFOBO7UX3LY4VJKJUOKYJV62CFR2IRH/","http://www.openwall.com/lists/oss-security/2026/06/16/8"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-12003","description":"To allow builds of Python to be run from an in-tree layout (rather than\nan installed file layout), the VPATH variable is defined at build time\nand used to locate certain landmarks - specifically,\nModules/setup.local. When this landmark is found relative to VPATH\nrelative to the executable, Python assumes it is running in a source\ntree and generates a different default sys.path. This code remains in\nrelease builds, so that release-ready builds can be built in-tree.\n\nOn Windows, since builds are written to 'PCbuild/', the value of\nVPATH is set to '..\\..', which results in a landmark of\n'..\\..\\Modules\\setup.local'. This path is outside the install directory\nof Python, and may have different permissions, potentially allowing a\nlow-privilege user to create the landmark and an alternative `Lib`\nfolder that will be discovered by an otherwise restricted install.\n\nSuch a setup occurs with the legacy default install location for all\nusers (in the now superseded EXE installer), due to how Windows allows\nall users to create folders in the root directory of their OS drive.\n\nOur recommended mitigation on Windows is to migrate away from the\nlegacy installer and use the new [Python install\nmanager](https://www.python.org/downloads/latest/pymanager/) to install\nfor the current user. Installs where the directory two levels above the\nPython installation directory have equivalent permissions are unaffected\n(in general, a per-user install cannot be modified at all by other\nusers, removing any escalation of privilege risk, and could be directly\nmodified by a privileged user, making the potential tampering\nirrelevant). Alternative mitigations might include preemptively creating\nand restricting access to a `Modules` directory. Be aware that only 3.13\nand 3.14 will receive updated legacy installers - earlier fixes are only\nprovided as sources.\n\nPlatforms other than Windows allow VPATH to be overridden, but as they\ndon't usually use a separated directory in the build for binaries, are\nunlikely to have a landmark reference outside of the install directory.\n\nThe landmark detection involving VPATH is a fallback for when a more\nspecific landmark - .\\pybuilddir.txt - is absent, and was included for\ncompatibility. Future releases of Python will no longer include the\nfallback, and so builds will need to generate or preserve the\npybuilddir.txt file in order to work in-tree. This landmark file has\nbeen generated on Windows since 3.11, and on other platforms for longer."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-6075","versionConstraint":"< 3.9.25||>= 3.10.0, < 3.10.20||>= 3.11.0, < 3.11.15||>= 3.12.0, < 3.12.13||>= 3.13.0, < 3.13.10||>= 3.14.0, < 3.14.1||>= 3.15.0a1, < 3.15.0a2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-6075","versionConstraint":"< 3.9.25||>= 3.10.0, < 3.10.20||>= 3.11.0, < 3.11.15||>= 3.12.0, < 3.12.13||>= 3.13.0, < 3.13.10||>= 3.14.0, < 3.14.1||>= 3.15.0a1, < 3.15.0a2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-6075","fix":{"state":"fixed","versions":["3.9.25","3.10.20","3.11.15","3.12.13","3.13.10","3.14.1","3.15.0a2"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.9.25"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.10"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.1"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0a2"},{"date":"2026-04-10","kind":"first-observed","version":"3.9.25"},{"date":"2026-04-10","kind":"first-observed","version":"3.10.20"},{"date":"2026-04-10","kind":"first-observed","version":"3.11.15"},{"date":"2026-04-10","kind":"first-observed","version":"3.12.13"},{"date":"2025-12-04","kind":"first-observed","version":"3.13.10"},{"date":"2025-12-04","kind":"first-observed","version":"3.14.1"},{"date":"2025-12-04","kind":"first-observed","version":"3.15.0a2"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":1.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-6075","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-6075","date":"2026-11-12","epss":0.00149,"percentile":0.04192}],"risk":0.0644425,"urls":["https://github.com/python/cpython/commit/2e6150adccaaf5bd95d4c19dfd04a36e0b325d8c","https://github.com/python/cpython/commit/5dceb93486176e6b4a6d9754491005113eb23427","https://github.com/python/cpython/commit/631ba3407e3348ccd56ce5160c4fb2c5dc5f4d84","https://github.com/python/cpython/commit/892747b4cf0f95ba8beb51c0d0658bfaa381ebca","https://github.com/python/cpython/commit/9ab89c026aa9611c4b0b67c288b8303a480fe742","https://github.com/python/cpython/commit/c8a5f3435c342964e0a432cc9fb448b7dbecd1ba","https://github.com/python/cpython/commit/f029e8db626ddc6e3a3beea4eff511a71aaceb5c","https://github.com/python/cpython/issues/136065","https://mail.python.org/archives/list/security-announce@python.org/thread/IUP5QJ6D4KK6ULHOMPC7DPNKRYQTQNLA/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-6075","description":"If the value passed to os.path.expandvars() is user-controlled a \nperformance degradation is possible when expanding environment \nvariables."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-0864","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.15||>= 3.14.0, < 3.14.7||>= 3.15.0a1, < 3.15.0b4 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-0864","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.15||>= 3.14.0, < 3.14.7||>= 3.15.0a1, < 3.15.0b4 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-0864","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.15","3.14.7","3.15.0b4"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.7"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0b4"},{"date":"2026-08-19","kind":"first-observed","version":"3.10.21"},{"date":"2026-08-19","kind":"first-observed","version":"3.11.16"},{"date":"2026-08-19","kind":"first-observed","version":"3.12.14"},{"date":"2026-08-12","kind":"first-observed","version":"3.13.15"},{"date":"2026-08-12","kind":"first-observed","version":"3.14.7"},{"date":"2026-07-30","kind":"first-observed","version":"3.15.0b4"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-0864","cwe":"CWE-74","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-0864","date":"2026-11-12","epss":0.00126,"percentile":0.02338}],"risk":0.06174,"urls":["https://github.com/python/cpython/commit/0adb386f6e68eb2e73d32e19f235d012df009528","https://github.com/python/cpython/commit/12dcbd74d3563016a8cb8c47e4898889f34f74dd","https://github.com/python/cpython/commit/274de100bbf4345bd0c23ef5b446722e9e636908","https://github.com/python/cpython/commit/5858e42c539dac8394636a6e9b30472b8994851f","https://github.com/python/cpython/commit/71f2e02a52d47417a6fd69f456346cd8aa7aca98","https://github.com/python/cpython/commit/aaf850fd333cd89e9aada03d92aaa788a6cb1bb8","https://github.com/python/cpython/commit/db4a157c790479710a1a840d7937c5c815a6f8b6","https://github.com/python/cpython/issues/143927","https://github.com/python/cpython/pull/151559","https://mail.python.org/archives/list/security-announce@python.org/thread/CV4NE6AFCRJL7XQOHX7J5TSDHUWVWGJS/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-0864","description":"When using the \"configparser\" module to write configuration files\ncontaining multi-line text values with carriage return characters (\\r) the\nresulting file could be injected with unexpected keys and values if the\nattacker controls the written value."},"relatedVulnerabilities":[]},{"artifact":{"id":"0be572c3a6dff7ea","cpes":["cpe:2.3:a:systemd:systemd:255.4-1ubuntu8.18:*:*:*:*:*:*:*"],"name":"systemd","purl":"pkg:deb/Ubuntu/systemd@255.4-1ubuntu8.18?distro=Ubuntu","type":"deb","version":"255.4-1ubuntu8.18","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/libsystemd.so.0.38.0","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/x86_64-linux-gnu/libsystemd.so.0.38.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-40228","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"24.04"},"package":{"name":"systemd","version":"255.4-1ubuntu8.18"},"namespace":"ubuntu:distro:ubuntu:24.04"}}],"vulnerability":{"id":"CVE-2026-40228","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-40228","cwe":"CWE-669","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40228","date":"2026-11-12","epss":0.0018,"percentile":0.07631}],"risk":0.054,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:24.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-40228"},"relatedVulnerabilities":[{"id":"CVE-2026-40228","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":2.9,"impactScore":1.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40228","cwe":"CWE-669","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40228","date":"2026-11-12","epss":0.0018,"percentile":0.07631}],"urls":["https://www.openwall.com/lists/oss-security/2026/04/08/1","http://www.openwall.com/lists/oss-security/2026/05/05/1"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-40228","description":"In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary users when a \"logger -p emerg\" command is executed, if ForwardToWall=yes is set."}]},{"artifact":{"id":"a523a3baebddc2a1","cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"name":"erlang","purl":"pkg:generic/erlang@25.3.2.8","type":"binary","version":"25.3.2.8","language":"","licenses":[],"locations":[{"path":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/lib/erlang/erts-13.2.2.5/bin/beam.smp","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"27.3.4.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-54891","versionConstraint":">= 17.0, < 27.3.4.14||>= 28.0, < 28.5.0.3||>= 29.0, < 29.0.3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:25.3.2.8:*:*:*:*:*:*:*"],"package":{"name":"erlang","version":"25.3.2.8"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-54891","fix":{"state":"fixed","versions":["27.3.4.14","28.5.0.3","29.0.3"],"available":[{"date":"2026-08-21","kind":"first-observed","version":"27.3.4.14"},{"date":"2026-08-21","kind":"first-observed","version":"28.5.0.3"},{"date":"2026-08-21","kind":"first-observed","version":"29.0.3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54891","cwe":"CWE-924","type":"Secondary","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"epss":[{"cve":"CVE-2026-54891","date":"2026-11-12","epss":0.00135,"percentile":0.03036}],"risk":0.054,"urls":["https://cna.erlef.org/cves/CVE-2026-54891.html","https://github.com/erlang/otp/commit/07d2d0e93f6aaf7652a81e8df075fc1728da5e96","https://github.com/erlang/otp/security/advisories/GHSA-gf6r-99xw-6qg6","https://osv.dev/vulnerability/EEF-CVE-2026-54891","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"severity":"Low","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54891","description":"Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Erlang/OTP ssl (tls_gen_connection module) allows a network-positioned attacker to inject unauthenticated plaintext that the TLS client application later treats as authenticated server data.\n\nThe function tls_gen_connection:handle_protocol_record/3 rejects APPLICATION_DATA records that arrive in pre-handshake states when the TLS endpoint acts as a server, but does not apply the same check when the endpoint acts as a client. A network-positioned attacker can send plaintext APPLICATION_DATA records to the client during the handshake. The records are buffered and, once the handshake completes successfully, delivered to the application as if they were authenticated post-handshake data. The attacker cannot observe the client's response or steer the connection, so the impact is limited to blind injection of unauthenticated bytes. The injection window is wider for TLS versions prior to TLS 1.3 than for TLS 1.3.\n\nThis vulnerability is associated with program file lib/ssl/src/tls_gen_connection.erl.\n\nTLS 1.3 is affected starting with OTP 22.0, when TLS 1.3 support was added.\n\nThis issue affects OTP from OTP 17.0 before OTP 27.3.4.14, from OTP 28.0 before OTP 28.5.0.3, and from OTP 29.0 before OTP 29.0.3, corresponding to ssl from 5.3.4 before 11.2.12.10, from 11.3 before 11.6.0.3, and from 11.7 before 11.7.3. Whether OTP before OTP 17.0, corresponding to ssl before 5.3.4, is affected is unknown."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-13462","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.13||>= 3.14.0, < 3.14.4||>= 3.15.0a1, < 3.15.0a8 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-13462","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.13||>= 3.14.0, < 3.14.4||>= 3.15.0a1, < 3.15.0a8 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-13462","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.13","3.14.4","3.15.0a8"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.4"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0a8"},{"date":"2026-09-15","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-15","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-15","kind":"first-observed","version":"3.12.14"},{"date":"2026-04-10","kind":"first-observed","version":"3.13.13"},{"date":"2026-04-10","kind":"first-observed","version":"3.14.4"},{"date":"2026-04-10","kind":"first-observed","version":"3.15.0a8"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-13462","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2025-13462","cwe":"CWE-74","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2025-13462","cwe":"CWE-434","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-13462","date":"2026-11-12","epss":0.00183,"percentile":0.07925}],"risk":0.05169749999999999,"urls":["https://github.com/python/cpython/commit/42d754e34c06e57ad6b8e7f92f32af679912d8ab","https://github.com/python/cpython/commit/72dde1016493c52abe857fc4a7bf6c40138b4114","https://github.com/python/cpython/commit/7ad3093d76a748af55bdb1d2e8aad3638163b017","https://github.com/python/cpython/commit/9a23b753552afa28e3a2f4d8863572fc66479406","https://github.com/python/cpython/commit/ae99fe3a33b43e303a05f012815cef60b611a9c7","https://github.com/python/cpython/commit/d10950739a78f54d0718d88fb5a868374603c084","https://github.com/python/cpython/issues/141707","https://github.com/python/cpython/pull/143934","https://mail.python.org/archives/list/security-announce@python.org/thread/EOMI5I66ZMKQ2INNFT6T7IAIKUGPZYIE/"],"severity":"Low","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-13462","description":"The \"tarfile\" module would still apply normalization of AREGTYPE (\\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other implementations."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-18503","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.15||>= 3.14.0, < 3.14.7||>= 3.15.0a1, < 3.15.0rc1||>= 3.16.0a1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.12.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-18503","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.15||>= 3.14.0, < 3.14.7||>= 3.15.0a1, < 3.15.0rc1||>= 3.16.0a1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-18503","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.15","3.14.7","3.15.0rc1"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.7"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0rc1"},{"date":"2026-08-14","kind":"first-observed","version":"3.10.21"},{"date":"2026-08-14","kind":"first-observed","version":"3.11.16"},{"date":"2026-08-14","kind":"first-observed","version":"3.12.14"},{"date":"2026-08-14","kind":"first-observed","version":"3.13.15"},{"date":"2026-08-14","kind":"first-observed","version":"3.14.7"},{"date":"2026-08-14","kind":"first-observed","version":"3.15.0rc1"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.4},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-18503","cwe":"CWE-1176","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-18503","date":"2026-11-12","epss":0.00123,"percentile":0.02078}],"risk":0.033209999999999996,"urls":["https://github.com/python/cpython/commit/063d4555c94ef412c731527dbf30193327f2ee82","https://github.com/python/cpython/commit/476fb09cdb0d73e645849d98c610e7e5697ce7c9","https://github.com/python/cpython/commit/89f29c760c02774b099ddd6863268eb13fa3946a","https://github.com/python/cpython/commit/b09a67a20c464f8288c9f9a6b9c7082a74560024","https://github.com/python/cpython/commit/b30c7fa9edd921a118f286e9f90f560777fa693b","https://github.com/python/cpython/commit/fd78b565d7c326f96ae903ab945b47f35d829cf4","https://github.com/python/cpython/issues/98820","https://github.com/python/cpython/pull/153694","https://mail.python.org/archives/list/security-announce@python.org/thread/KQ7NBMCPAZJHRROQXJQE4GMXGLD5KHBS/","https://cert-portal.siemens.com/productcert/html/ssa-457936.html"],"severity":"Low","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-18503","description":"Attacker-controlled CSV samples can trigger super-linear \nregular-expression work during dialect sniffing and consume significant \nCPU when applications pass unbounded input to csv.Sniffer.sniff()."},"relatedVulnerabilities":[]},{"artifact":{"id":"237d6d52a40623ec","cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.12.3","type":"binary","version":"3.12.3","language":"","licenses":[],"locations":[{"path":"/usr/bin/python3.12","layerID":"sha256:fc94d539465c11cfd8161c16f838f3827502f6afdbc37f3ac77b0406cb19070c","accessPath":"/usr/bin/python3.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.13.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-3479","versionConstraint":"< 3.13.13||>= 3.14.0, < 3.14.4||>= 3.15.0a1, < 3.15.0a8 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.13.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-3479","versionConstraint":"< 3.13.13||>= 3.14.0, < 3.14.4||>= 3.15.0a1, < 3.15.0a8 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.12.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-3479","fix":{"state":"fixed","versions":["3.13.13","3.14.4","3.15.0a8"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.13.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.4"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0a8"},{"date":"2026-04-10","kind":"first-observed","version":"3.13.13"},{"date":"2026-04-10","kind":"first-observed","version":"3.14.4"},{"date":"2026-04-10","kind":"first-observed","version":"3.15.0a8"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":0},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3479","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-3479","date":"2026-11-12","epss":0.00253,"percentile":0.16964}],"risk":0.012650000000000002,"urls":["https://github.com/python/cpython/commit/5af6ce3e7b643a30a02d22245c1e3f4a8bc0a1fe","https://github.com/python/cpython/commit/bcdf231946b1da8bdfbab4c05539bb0cc964a1c7","https://github.com/python/cpython/commit/cf59bf76470f3d75ad47d80ffb8ce76b64b5e943","https://github.com/python/cpython/commit/d786d59a8f7196bb630100a869f28ad13436b59c","https://github.com/python/cpython/issues/146121","https://github.com/python/cpython/pull/146122","https://mail.python.org/archives/list/security-announce@python.org/thread/WYLLVQOOCKGK73JM7Z7ZSNOJC4N7BAWY/"],"severity":"Negligible","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-3479","description":"DISPUTED: The project has clarified that the documentation was incorrect, and that pkgutil.get_data() has the same security model as open(). The documentation has been updated to clarify this point. There is no vulnerability in the function if following the intended security model.\n\npkgutil.get_data() did not validate the resource argument as documented, allowing path traversals."},"relatedVulnerabilities":[]}],"grade":"F","score":"0.00","as_of":"2026-11-14T07:54:11.115Z","grype_db_version":"2026-11-13T15:40:34.000Z"}