Security
فارسی
All products

Red Hat Enterprise Linux 10/python3.14

Red Hat · Package
21 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Pillow has an integer overflow when processing fontsCVE-2026-42308 · GHSA-WJX4-4JCJ-G98JVersion ranges need review. pillowExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 PyPIRed Hat Medium Fix reported
python: python: Arbitrary file write via tarfile extraction filter bypassCVE-2026-114583 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 10/python3.14 Red Hat Medium No fix reported
python: Distrust compromised eMudhra intermediate certificates in Python ssl moduleCVE-2026-115557 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 10/python3.14 Red Hat Medium No fix reported
python: python: Misinterpretation of HTTP responses via invalid chunk parsingCVE-2026-103995 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 10/python3.14 Red Hat Medium No fix reported
python: python: Security bypass via null byte truncation in socket.getaddrinfo()CVE-2026-116566 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 10/python3.14 Red Hat Medium No fix reported
cpython: Missing character filtering in PythonCVE-2025-11468 Red Hat Enterprise Linux 10/firefoxRed Hat Enterprise Linux 10/python3.12 Red Hat Medium No fix reported
cpython: Header injection via newlines in data URL mediatype in PythonCVE-2025-15282 Red Hat Enterprise Linux 10/firefoxRed Hat Enterprise Linux 10/python3.14 Red Hat Medium No fix reported
cpython: IMAP command injection in user-controlled commandsCVE-2025-15366 Red Hat Enterprise Linux 10/python3.14Red Hat Enterprise Linux 9/python3.14 Red Hat Medium No fix reported
cpython: POP3 command injection in user-controlled commandsCVE-2025-15367 Red Hat Enterprise Linux 10/python3.14Red Hat Enterprise Linux 9/python3.14 Red Hat Medium No fix reported
cpython: Header injection in http.cookies.Morsel in PythonCVE-2026-0672 Red Hat Enterprise Linux 10/firefoxRed Hat Enterprise Linux 10/python3.14 Red Hat Medium No fix reported
cpython: base64.b64decode() always accepts "+/" characters, despite setting altcharsCVE-2025-12781 Red Hat Enterprise Linux 10/firefoxRed Hat Enterprise Linux 10/python3.12 Red Hat Medium No fix reported
cpython: email header injection due to unquoted newlinesCVE-2026-1299 Red Hat Enterprise Linux 10/python3.14Red Hat Enterprise Linux 9/python3.14 Red Hat Medium No fix reported
cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issuesCVE-2025-13462 Exploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9Red Hat Enterprise Linux 10/python3.12 Red Hat Low No fix reported
python: Python pkgutil.get_data(): Path Traversal via improper resource argument validationCVE-2026-3479 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 10/python3.14 Red Hat Low No fix reported
python: Python base64: Incomplete data decoding due to premature stop at paddingCVE-2026-3446 Red Hat Enterprise Linux 10/python3.14Red Hat Enterprise Linux 9/python3.14 Red Hat Medium No fix reported
python: Python/Expat: Denial of Service via crafted XML documentCVE-2026-7210 Exploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9Red Hat AI Inference Server/rhaii/model-opt-cuda-rhel9 Red Hat Medium No fix reported
python: Python unicodedata: Denial of Service due to excessive CPU consumptionCVE-2026-3276 Exploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9Red Hat AI Inference Server/rhaii/model-opt-cuda-rhel9 Red Hat Medium No fix reported
python: Python tarfile module: Denial of Service via improper EOF handling in streaming modeCVE-2026-11972 Exploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9Red Hat AI Inference Server/rhaii/model-opt-cuda-rhel9 Red Hat Medium No fix reported
python: Python Tarfile: Unexpected file ownership when extracting hardlinksCVE-2026-4360 Exploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9Red Hat AI Inference Server/rhaii/model-opt-cuda-rhel9 Red Hat Medium No fix reported
python: Python tarfile module: Directory traversal allows creation of empty directories outside extraction destinationCVE-2026-19672 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 10/python3.14 Red Hat Medium No fix reported