All products

Red Hat Enterprise Linux 10/python3.12

Red Hat · Package
24 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Pillow has an integer overflow when processing fontsCVE-2026-42308 · GHSA-WJX4-4JCJ-G98JVersion ranges need review. pillowExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 PyPIRed Hat Medium Fix reported
python: python: Arbitrary file write via tarfile extraction filter bypassCVE-2026-114583 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 10/python3.14 Red Hat Medium No fix reported
python: Distrust compromised eMudhra intermediate certificates in Python ssl moduleCVE-2026-115557 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 10/python3.14 Red Hat Medium No fix reported
python: python: Misinterpretation of HTTP responses via invalid chunk parsingCVE-2026-103995 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 10/python3.14 Red Hat Medium No fix reported
python: python: Security bypass via null byte truncation in socket.getaddrinfo()CVE-2026-116566 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 10/python3.14 Red Hat Medium No fix reported
cpython: python: Uncontrolled CPU resource consumption when in http.cookies moduleCVE-2024-7592 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 6/python Red Hat Low No fix reported
python: Mishandling of comma during folding and unicode-encoding of email headersCVE-2025-1795 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 6/python Red Hat Low No fix reported
cpython: python: CPython DecodeError Handling VulnerabilityCVE-2025-4516 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 6/python Red Hat Medium No fix reported
cpython: Python HTMLParser quadratic complexityCVE-2025-6069 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 6/python Red Hat Medium No fix reported
cpython: Missing character filtering in PythonCVE-2025-11468 Red Hat Enterprise Linux 10/firefoxRed Hat Enterprise Linux 10/python3.12 Red Hat Medium No fix reported
cpython: base64.b64decode() always accepts "+/" characters, despite setting altcharsCVE-2025-12781 Red Hat Enterprise Linux 10/firefoxRed Hat Enterprise Linux 10/python3.12 Red Hat Medium No fix reported
cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issuesCVE-2025-13462 Exploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9Red Hat Enterprise Linux 10/python3.12 Red Hat Low No fix reported
python: Python pkgutil.get_data(): Path Traversal via improper resource argument validationCVE-2026-3479 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 10/python3.14 Red Hat Low No fix reported
python: Python: Information disclosure and arbitrary code execution via remote debugging with a malicious process.CVE-2026-5713 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 6/python Red Hat Medium No fix reported
python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies moduleCVE-2026-6019 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 6/python Red Hat Medium No fix reported
python: Python/Expat: Denial of Service via crafted XML documentCVE-2026-7210 Exploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9Red Hat AI Inference Server/rhaii/model-opt-cuda-rhel9 Red Hat Medium No fix reported
python: Python unicodedata: Denial of Service due to excessive CPU consumptionCVE-2026-3276 Exploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9Red Hat AI Inference Server/rhaii/model-opt-cuda-rhel9 Red Hat Medium No fix reported
python: CPython: Python tarfile: Arbitrary file write via crafted link entriesCVE-2026-7774 Exploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9Red Hat Enterprise Linux 10/python3.12 Red Hat Medium No fix reported
python: cpython: Python configparser: Configuration injection via crafted multi-line inputCVE-2026-0864 Exploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9Red Hat Enterprise Linux 10/python3.12 Red Hat Medium No fix reported
python: Python tarfile module: Denial of Service via improper EOF handling in streaming modeCVE-2026-11972 Exploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9Red Hat AI Inference Server/rhaii/model-opt-cuda-rhel9 Red Hat Medium No fix reported