{"id":"CVE-2026-0672","aliases":["ALSA-2026:10950","ALSA-2026:19064","ALSA-2026:19177","AZL-75026","AZL-75044","BELL-CVE-2026-0672","BIT-libpython-2026-0672","BIT-python-2026-0672","BIT-python-min-2026-0672","CLSA-2026-1776330599","CLSA-2026-1778129970","CLSA-2026-1779213441","CLSA-2026-1779886202","CLSA-2026-1781173352","CLSA-2026-1781174666","CLSA-2026-1781176375","CLSA-2026-1781259901","CLSA-2026-1781342809","CLSA-2026-1781525675","CLSA-2026-1781527577","CLSA-2026-1781528783","CLSA-2026-1781620276","CLSA-2026-1782139078","CLSA-2026-1782159334","CLSA-2026-1782490405","CLSA-2026-1783703079","CLSA-2026-1783705997","DEBIAN-CVE-2026-0672","DLA-4455-1","EUVD-2026-3521","GHSA-x85f-j5v8-5vrv","MGASA-2026-0455","OESA-2026-1356","OESA-2026-1357","OESA-2026-1358","OESA-2026-1461","OESA-2026-1462","OESA-2026-1463","PSF-2026-5","RHSA-2026:10950","RHSA-2026:19064","RHSA-2026:19177","RLSA-2026:10950","RLSA-2026:19064","RLSA-2026:19177","ROOT-OS-DEBIAN-12-CVE-2026-0672","SUSE-SU-2026:0590-1","SUSE-SU-2026:0612-1","SUSE-SU-2026:0613-1","SUSE-SU-2026:0642-1","SUSE-SU-2026:0643-1","SUSE-SU-2026:0644-1","SUSE-SU-2026:0645-1","SUSE-SU-2026:0663-1","SUSE-SU-2026:0664-1","SUSE-SU-2026:0693-1","SUSE-SU-2026:0767-1","SUSE-SU-2026:1062-1","SUSE-SU-2026:1107-1","SUSE-SU-2026:1117-1","SUSE-SU-2026:1349-1","SUSE-SU-2026:20543-1","SUSE-SU-2026:20581-1","SUSE-SU-2026:20665-1","SUSE-SU-2026:20710-1","SUSE-SU-2026:20768-1","SUSE-SU-2026:20796-1","UBUNTU-CVE-2026-0672","USN-8509-1","openSUSE-SU-2026:10126-1","openSUSE-SU-2026:10200-1","openSUSE-SU-2026:10206-1","openSUSE-SU-2026:10221-1","openSUSE-SU-2026:10222-1","openSUSE-SU-2026:10223-1","openSUSE-SU-2026:10990-1","openSUSE-SU-2026:20254-1"],"status":"published","title":"Header injection in http.cookies.Morsel","description":"When using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch rejects all control characters within cookie names, values, and parameters.","severity":{"version":"4.0","score":6,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0048,"percentile":0.41701,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-93"],"published":"2026-01-20T21:52:33Z","modified":"2026-11-04T02:46:57Z","fixes":[{"ecosystem":"Azure Linux:3","package":"python3","fixed_in":["3.12.9-8"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"python3","fixed_in":["3.9.19-18"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"python3","fixed_in":["3.11.13-r3"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"python3","fixed_in":["3.12.12-r2"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"python3","fixed_in":["3.12.12-r3"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"python3","fixed_in":["3.11.13-r3"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"python3","fixed_in":["3.12.12-r2"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"python3","fixed_in":["3.12.12-r3"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"libpython","fixed_in":["3.10.20","3.11.15","3.12.13","3.13.12","3.14.3"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"python","fixed_in":["3.10.20","3.11.15","3.12.13","3.13.12","3.14.3"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"python-min","fixed_in":["3.10.20","3.11.15","3.12.13","3.13.12","3.14.3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"pypy3","fixed_in":["7.3.21+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"python3.11","fixed_in":["3.11.2-6+deb12u7"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"python3.13","fixed_in":["3.13.5-2+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"python3.14","fixed_in":["3.14.3-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"python2.7","fixed_in":["2.7.6-8ubuntu0.6+esm29"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"python3.4","fixed_in":["3.4.3-1ubuntu1~14.04.7+esm19"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"python3.5","fixed_in":["3.5.2-2ubuntu0~16.04.4~14.04.1+esm9"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"python2.7","fixed_in":["2.7.12-1ubuntu0~16.04.18+esm19"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"python3.5","fixed_in":["3.5.2-2ubuntu0~16.04.13+esm21"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python2.7","fixed_in":["2.7.17-1~18.04ubuntu1.13+esm14"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python3.6","fixed_in":["3.6.9-1~18.04ubuntu1.13+esm8"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python3.7","fixed_in":["3.7.5-2ubuntu1~18.04.2+esm9"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python3.8","fixed_in":["3.8.0-3ubuntu1~18.04.2+esm9"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"python3.8","fixed_in":["3.8.10-0ubuntu1~20.04.18+esm5"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"python3.9","fixed_in":["3.9.5-3ubuntu0~20.04.1+esm9"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"python3.10","fixed_in":["3.10.12-1~22.04.14"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"python2.7","fixed_in":["2.7.18-13ubuntu1.5+esm8"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"python3.11","fixed_in":["3.11.0~rc1-1~22.04.1~esm8"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"python3.12","fixed_in":["3.12.3-1ubuntu0.11"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"python3.13","fixed_in":["3.13.7-1ubuntu0.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"python3.14","fixed_in":["3.14.0-1ubuntu0.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"python-M2Crypto","fixed_in":["0.48.0-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3.12-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3.12-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3.12-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3.12-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3.12-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3.12-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3.12-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python-unversioned-command","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python3-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3.12-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3.12-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3.12-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3.12-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3.12-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3.12-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"Azure Linux:3","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.9-8"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.19-18"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.11.3-r0"},{"fixed":"3.11.13-r3"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.12.10-r1"},{"fixed":"3.12.12-r2"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.11.4-r0"},{"fixed":"3.12.12-r3"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.11.3-r0"},{"fixed":"3.11.13-r3"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.12.10-r1"},{"fixed":"3.12.12-r2"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.11.4-r0"},{"fixed":"3.12.12-r3"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"libpython","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.10.20"},{"introduced":"3.11.0"},{"fixed":"3.11.15"},{"introduced":"3.12.0"},{"fixed":"3.12.13"},{"introduced":"3.13.0"},{"fixed":"3.13.12"},{"introduced":"3.14.0"},{"fixed":"3.14.3"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"python","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.10.20"},{"introduced":"3.11.0"},{"fixed":"3.11.15"},{"introduced":"3.12.0"},{"fixed":"3.12.13"},{"introduced":"3.13.0"},{"fixed":"3.13.12"},{"introduced":"3.14.0"},{"fixed":"3.14.3"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"python-min","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.10.20"},{"introduced":"3.11.0"},{"fixed":"3.11.15"},{"introduced":"3.12.0"},{"fixed":"3.12.13"},{"introduced":"3.13.0"},{"fixed":"3.13.12"},{"introduced":"3.14.0"},{"fixed":"3.14.3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python-unversioned-command","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els22"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els22"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els22"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els22"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els22"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els22"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els22"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els22"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-2.el9_2.2.tuxcare.els23"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-2.el9_2.2.tuxcare.els23"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-2.el9_2.2.tuxcare.els23"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-2.el9_2.2.tuxcare.els23"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-2.el9_2.2.tuxcare.els23"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-2.el9_2.2.tuxcare.els23"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-2.el9_2.2.tuxcare.els23"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.11-2.el9_6.2.tuxcare.els8"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.11-2.el9_6.2.tuxcare.els8"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.11-2.el9_6.2.tuxcare.els8"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.11-2.el9_6.2.tuxcare.els8"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.11-2.el9_6.2.tuxcare.els8"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.11-2.el9_6.2.tuxcare.els8"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.11-2.el9_6.2.tuxcare.els8"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python-unversioned-command","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.21-2.el9_6.2.tuxcare.els9"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.21-2.el9_6.2.tuxcare.els9"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.21-2.el9_6.2.tuxcare.els9"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.21-2.el9_6.2.tuxcare.els9"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.21-2.el9_6.2.tuxcare.els9"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.21-2.el9_6.2.tuxcare.els9"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.21-2.el9_6.2.tuxcare.els9"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.21-2.el9_6.2.tuxcare.els9"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"idle-python3.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els26"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython3.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els26"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython3.5-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els26"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython3.5-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els26"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython3.5-stdlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els26"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython3.5-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els26"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python3.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els26"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python3.5-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els26"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python3.5-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els26"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python3.5-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els26"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python3.5-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els26"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python3.5-venv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els26"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"idle-python3.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.12+tuxcare.els23"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpython3.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.12+tuxcare.els23"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpython3.6-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.12+tuxcare.els23"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpython3.6-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.12+tuxcare.els23"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpython3.6-stdlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.12+tuxcare.els23"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpython3.6-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.12+tuxcare.els23"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python3.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.12+tuxcare.els23"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python3.6-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.12+tuxcare.els23"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python3.6-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.12+tuxcare.els23"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python3.6-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.12+tuxcare.els23"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python3.6-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.12+tuxcare.els23"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python3.6-venv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.12+tuxcare.els23"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"idle-python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-1~18.04ubuntu1.11+tuxcare.els14"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpython2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-1~18.04ubuntu1.11+tuxcare.els14"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpython2.7-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-1~18.04ubuntu1.11+tuxcare.els14"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpython2.7-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-1~18.04ubuntu1.11+tuxcare.els14"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpython2.7-stdlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-1~18.04ubuntu1.11+tuxcare.els14"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpython2.7-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-1~18.04ubuntu1.11+tuxcare.els14"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-1~18.04ubuntu1.11+tuxcare.els14"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python2.7-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-1~18.04ubuntu1.11+tuxcare.els14"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python2.7-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-1~18.04ubuntu1.11+tuxcare.els14"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python2.7-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-1~18.04ubuntu1.11+tuxcare.els14"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python2.7-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-1~18.04ubuntu1.11+tuxcare.els14"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"idle-python3.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els5"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libpython3.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els5"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libpython3.7-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els5"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libpython3.7-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els5"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libpython3.7-stdlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els5"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libpython3.7-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els5"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python3.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els5"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python3.7-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els5"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python3.7-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els5"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python3.7-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els5"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python3.7-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els5"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python3.7-venv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els5"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"idle-python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els19"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els19"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython2.7-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els19"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython2.7-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els19"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython2.7-stdlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els19"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython2.7-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els19"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els19"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python2.7-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els19"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python2.7-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els19"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python2.7-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els19"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python2.7-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els19"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"python3-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"python3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"python3-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"python3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"python3-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"python3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"idle-python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-1~20.04.7+tuxcare.els3"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libpython2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-1~20.04.7+tuxcare.els3"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libpython2.7-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-1~20.04.7+tuxcare.els3"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libpython2.7-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-1~20.04.7+tuxcare.els3"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libpython2.7-stdlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-1~20.04.7+tuxcare.els3"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libpython2.7-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-1~20.04.7+tuxcare.els3"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-1~20.04.7+tuxcare.els3"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"python2.7-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-1~20.04.7+tuxcare.els3"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"python2.7-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-1~20.04.7+tuxcare.els3"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"python2.7-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-1~20.04.7+tuxcare.els3"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"python2.7-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-1~20.04.7+tuxcare.els3"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"platform-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-42.el8.tuxcare.els22"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"platform-python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-42.el8.tuxcare.els22"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"platform-python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-42.el8.tuxcare.els22"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-42.el8.tuxcare.els22"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-42.el8.tuxcare.els22"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-42.el8.tuxcare.els22"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-42.el8.tuxcare.els22"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-42.el8.tuxcare.els22"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"platform-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-40.el8_4.tuxcare.els22"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"platform-python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-40.el8_4.tuxcare.els22"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"platform-python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-40.el8_4.tuxcare.els22"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-40.el8_4.tuxcare.els22"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-40.el8_4.tuxcare.els22"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-40.el8_4.tuxcare.els22"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-40.el8_4.tuxcare.els22"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-40.el8_4.tuxcare.els22"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"platform-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-62.el8.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"platform-python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-62.el8.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"platform-python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-62.el8.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"python3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-62.el8.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-62.el8.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-62.el8.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-62.el8.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-62.el8.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-94.0.1.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-94.0.1.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-94.0.1.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-94.0.1.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-94.0.1.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-94.0.1.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-94.0.1.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-94.0.1.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-94.0.1.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-94.0.1.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-94.0.1.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-94.0.1.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-94.0.1.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-94.0.1.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"pypy3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.3.11+dfsg-2","7.3.11+dfsg-2+deb12u1","7.3.11+dfsg-2+deb12u2","7.3.11+dfsg-2+deb12u3","7.3.12+dfsg-1","7.3.12~rc1+dfsg-1","7.3.12~rc2+dfsg-1","7.3.13+dfsg-1","7.3.14+dfsg-1","7.3.15+dfsg-1","7.3.16+dfsg-1","7.3.16+dfsg-2","7.3.17+dfsg-1","7.3.17+dfsg-2","7.3.17+dfsg-3","7.3.18+dfsg-1","7.3.18+dfsg-2","7.3.19+dfsg-1","7.3.19+dfsg-2","7.3.20+dfsg-1","7.3.20+dfsg-2","7.3.20+dfsg-3","7.3.20+dfsg-4","7.3.21+dfsg-1","7.3.21+dfsg-2","7.3.21+dfsg-3","7.3.21+dfsg-4","7.3.22+dfsg-1","7.3.23+dfsg-1","7.3.23+dfsg-2","8.0.0+dfsg-1","8.0.1+dfsg-1"]},{"source":"osv","ecosystem":"Debian:13","package":"pypy3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.3.19+dfsg-2","7.3.20+dfsg-1","7.3.20+dfsg-2","7.3.20+dfsg-3","7.3.20+dfsg-4","7.3.21+dfsg-1","7.3.21+dfsg-2","7.3.21+dfsg-3","7.3.21+dfsg-4","7.3.22+dfsg-1","7.3.23+dfsg-1","7.3.23+dfsg-2","8.0.0+dfsg-1","8.0.1+dfsg-1"]},{"source":"osv","ecosystem":"Debian:14","package":"pypy3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.21+dfsg-1"}]}],"versions":["7.3.19+dfsg-2","7.3.20+dfsg-1","7.3.20+dfsg-2","7.3.20+dfsg-3","7.3.20+dfsg-4"]},{"source":"osv","ecosystem":"Debian:12","package":"python3.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-6+deb12u7"}]}],"versions":["3.11.2-6","3.11.2-6+deb12u1","3.11.2-6+deb12u2","3.11.2-6+deb12u3","3.11.2-6+deb12u4","3.11.2-6+deb12u5","3.11.2-6+deb12u6"]},{"source":"osv","ecosystem":"Debian:13","package":"python3.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.5-2+deb13u1"}]}],"versions":["3.13.5-2"]},{"source":"osv","ecosystem":"Debian:14","package":"python3.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.3-1"}]}],"versions":["3.14.0-1","3.14.0-2","3.14.0-3","3.14.0-4","3.14.0-5","3.14.0~a7-1","3.14.0~b1-1","3.14.0~b2-1","3.14.0~b3-1","3.14.0~b4-1","3.14.0~rc1-1","3.14.0~rc2-1","3.14.0~rc3-1","3.14.2-1"]},{"source":"osv","ecosystem":"Debian:11","package":"python3.9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.2-1+deb11u5"}]}],"versions":["3.9.2-1","3.9.2-1+deb11u1","3.9.2-1+deb11u2","3.9.2-1+deb11u3","3.9.2-1+deb11u4"],"bundled":8},{"source":"osv","ecosystem":"Mageia:10","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.15-1.mga10"}]}],"bundled":17},{"source":"osv","ecosystem":"Mageia:10","package":"python-pip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.2.1-1.mga10"}]}],"bundled":17},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.6-20.oe2403"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.6-23.oe2403sp1"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.6-23.oe2403sp2"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.6-24.oe2403sp3"}]}],"bundled":7},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.9-51.oe2003sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.9-52.oe2203sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3.12-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3.12-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3.12-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3.12-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3.12-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3.12-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"python3.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"python3.12-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"python3.12-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"python3.12-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"python3.12-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"python3.12-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"python3.12-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python-unversioned-command","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3.12-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3.12-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3.12-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3.12-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3.12-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3.12-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3.12-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"python3.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"python3.12-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"python3.12-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"python3.12-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"python3.12-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"python3.12-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"python3.12-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python3.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"Rocky Linux:10","package":"python3.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:9","package":"python3.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-150000.102.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-150000.102.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-150000.102.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-150000.102.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-150000.102.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"python36","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-100.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"python36-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-100.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"python36","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-100.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"python36-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-100.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"python310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.19-150400.4.97.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"python310-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.19-150400.4.97.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"python310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.19-150400.4.97.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"python310-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.19-150400.4.97.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"python310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.19-150400.4.97.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"python310-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.19-150400.4.97.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"python310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.19-150400.4.97.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"python310-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.19-150400.4.97.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.19-150400.4.97.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python310-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.19-150400.4.97.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python310-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.19-150400.4.97.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP7","package":"python313","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.12-150700.4.39.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP7","package":"python313-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.12-150700.4.39.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"python39","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.25-150300.4.93.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"python39-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.25-150300.4.93.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"python39","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.25-150300.4.93.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"python39-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.25-150300.4.93.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python39","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.25-150300.4.93.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python39-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.25-150300.4.93.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python39-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.25-150300.4.93.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"python312","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.12-150600.3.43.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"python312-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.12-150600.3.43.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"python312","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.12-150600.3.43.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"python312-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.12-150600.3.43.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python312","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.12-150600.3.43.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python312-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.12-150600.3.43.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python312-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.12-150600.3.43.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-25.172.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"python3-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-25.172.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-25.172.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"python3-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-25.172.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-33.63.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-33.63.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"python-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-33.63.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-33.63.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-33.63.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"python-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-33.63.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.106.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"python3-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.106.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.106.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"python3-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.106.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.106.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"python3-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.106.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.106.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"python3-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.106.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"python3-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.106.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.106.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"python3-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.106.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.106.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"python3-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.106.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.106.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"python3-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.106.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.106.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"python3-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.106.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.106.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"python3-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.106.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.106.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"python3-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.106.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.106.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"python3-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.106.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.106.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"python3-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.106.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.106.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"python3-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.106.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.106.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"python3-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.106.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.106.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"python3-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.106.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.106.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python3-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.106.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python3-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.106.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-150400.9.75.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-150400.9.75.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-150400.9.75.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-150400.9.75.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-150400.9.75.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-150400.9.75.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-150400.9.75.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-150400.9.75.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-150400.9.75.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-150400.9.75.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-150400.9.75.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-150400.9.75.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-150400.9.75.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-150400.9.75.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-150400.9.75.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-150400.9.75.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-150400.9.75.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-150400.9.75.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-150400.9.75.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-150400.9.75.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-150400.9.75.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-150400.9.75.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-150400.9.75.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-150400.9.75.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-150400.9.75.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-150400.9.75.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-150600.3.44.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP7","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-150600.3.44.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP7","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-150600.3.44.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-150600.3.44.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-150600.3.44.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-150600.3.44.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-150600.3.44.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-150600.3.44.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-150600.3.44.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-150600.3.44.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.80.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.80.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.80.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.80.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.80.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.80.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.80.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.80.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.80.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.80.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.80.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.80.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.80.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.80.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.80.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.80.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.80.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.80.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.80.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.80.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.80.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.80.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.80.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.80.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.80.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.80.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150600.3.53.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP7","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150600.3.53.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP7","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150600.3.53.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150600.3.53.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150600.3.53.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150600.3.53.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150600.3.53.1"}]}],"bundled":15},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150600.3.53.1"}]}],"bundled":15},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150600.3.53.1"}]}],"bundled":15},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150600.3.53.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"python313","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.12-160000.1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"python313-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.12-160000.1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"python313","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.12-160000.1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"python313-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.12-160000.1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"python313-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.12-160000.1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"python313","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.12-160000.1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"python313-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.12-160000.1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"python313-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.12-160000.1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-slfo.1.1_3.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-slfo.1.1_3.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-3.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-3.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-slfo.1.1_1.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-slfo.1.1_1.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-1.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-1.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-8ubuntu0.6+esm29"}]}],"versions":["2.7.5-8ubuntu3","2.7.5-8ubuntu4","2.7.6-2","2.7.6-2ubuntu1","2.7.6-3","2.7.6-3ubuntu1","2.7.6-4","2.7.6-4ubuntu1","2.7.6-5","2.7.6-7","2.7.6-8","2.7.6-8ubuntu0.2","2.7.6-8ubuntu0.3","2.7.6-8ubuntu0.4","2.7.6-8ubuntu0.5","2.7.6-8ubuntu0.6+esm2","2.7.6-8ubuntu0.6+esm3","2.7.6-8ubuntu0.6+esm5","2.7.6-8ubuntu0.6+esm6","2.7.6-8ubuntu0.6+esm7","2.7.6-8ubuntu0.6+esm8","2.7.6-8ubuntu0.6+esm9","2.7.6-8ubuntu0.6+esm10","2.7.6-8ubuntu0.6+esm11","2.7.6-8ubuntu0.6+esm12","2.7.6-8ubuntu0.6+esm13","2.7.6-8ubuntu0.6+esm14","2.7.6-8ubuntu0.6+esm15","2.7.6-8ubuntu0.6+esm16","2.7.6-8ubuntu0.6+esm17","2.7.6-8ubuntu0.6+esm18","2.7.6-8ubuntu0.6+esm20","2.7.6-8ubuntu0.6+esm21","2.7.6-8ubuntu0.6+esm22","2.7.6-8ubuntu0.6+esm24","2.7.6-8ubuntu0.6+esm25","2.7.6-8ubuntu0.6+esm26","2.7.6-8ubuntu0.6+esm28"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"python3.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.3-1ubuntu1~14.04.7+esm19"}]}],"versions":["3.4~b1-0ubuntu3","3.4~b1-4ubuntu4","3.4~b1-4ubuntu6","3.4~b1-5ubuntu2","3.4~b2-1","3.4~b3-1ubuntu1","3.4~rc1-1build1","3.4~rc2-1","3.4~rc3-0ubuntu1","3.4.0-1","3.4.0-2ubuntu1","3.4.0-2ubuntu1.1","3.4.3-1ubuntu1~14.04.1","3.4.3-1ubuntu1~14.04.3","3.4.3-1ubuntu1~14.04.4","3.4.3-1ubuntu1~14.04.5","3.4.3-1ubuntu1~14.04.6","3.4.3-1ubuntu1~14.04.7","3.4.3-1ubuntu1~14.04.7+esm2","3.4.3-1ubuntu1~14.04.7+esm4","3.4.3-1ubuntu1~14.04.7+esm6","3.4.3-1ubuntu1~14.04.7+esm7","3.4.3-1ubuntu1~14.04.7+esm8","3.4.3-1ubuntu1~14.04.7+esm10","3.4.3-1ubuntu1~14.04.7+esm11","3.4.3-1ubuntu1~14.04.7+esm12","3.4.3-1ubuntu1~14.04.7+esm13","3.4.3-1ubuntu1~14.04.7+esm14","3.4.3-1ubuntu1~14.04.7+esm15","3.4.3-1ubuntu1~14.04.7+esm16","3.4.3-1ubuntu1~14.04.7+esm17"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"python3.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.2-2ubuntu0~16.04.4~14.04.1+esm9"}]}],"versions":["3.5.2-2ubuntu0~16.04.4~14.04.1","3.5.2-2ubuntu0~16.04.4~14.04.1+esm1","3.5.2-2ubuntu0~16.04.4~14.04.1+esm3","3.5.2-2ubuntu0~16.04.4~14.04.1+esm4","3.5.2-2ubuntu0~16.04.4~14.04.1+esm5","3.5.2-2ubuntu0~16.04.4~14.04.1+esm6","3.5.2-2ubuntu0~16.04.4~14.04.1+esm7","3.5.2-2ubuntu0~16.04.4~14.04.1+esm8"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+esm19"}]}],"versions":["2.7.10-4ubuntu1","2.7.10-4ubuntu2","2.7.11-2","2.7.11-3","2.7.11-4","2.7.11-6","2.7.11-7","2.7.11-7ubuntu1","2.7.12-1~16.04","2.7.12-1ubuntu0~16.04.1","2.7.12-1ubuntu0~16.04.2","2.7.12-1ubuntu0~16.04.3","2.7.12-1ubuntu0~16.04.4","2.7.12-1ubuntu0~16.04.8","2.7.12-1ubuntu0~16.04.9","2.7.12-1ubuntu0~16.04.11","2.7.12-1ubuntu0~16.04.12","2.7.12-1ubuntu0~16.04.13","2.7.12-1ubuntu0~16.04.14","2.7.12-1ubuntu0~16.04.16","2.7.12-1ubuntu0~16.04.18","2.7.12-1ubuntu0~16.04.18+esm1","2.7.12-1ubuntu0~16.04.18+esm2","2.7.12-1ubuntu0~16.04.18+esm3","2.7.12-1ubuntu0~16.04.18+esm4","2.7.12-1ubuntu0~16.04.18+esm5","2.7.12-1ubuntu0~16.04.18+esm6","2.7.12-1ubuntu0~16.04.18+esm7","2.7.12-1ubuntu0~16.04.18+esm8","2.7.12-1ubuntu0~16.04.18+esm9","2.7.12-1ubuntu0~16.04.18+esm10","2.7.12-1ubuntu0~16.04.18+esm11","2.7.12-1ubuntu0~16.04.18+esm12","2.7.12-1ubuntu0~16.04.18+esm13","2.7.12-1ubuntu0~16.04.18+esm15","2.7.12-1ubuntu0~16.04.18+esm16","2.7.12-1ubuntu0~16.04.18+esm17","2.7.12-1ubuntu0~16.04.18+esm18"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"python3.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.2-2ubuntu0~16.04.13+esm21"}]}],"versions":["3.5.0-3","3.5.0-3ubuntu1","3.5.1~rc1-2ubuntu1","3.5.1-1","3.5.1-2","3.5.1-3","3.5.1-5","3.5.1-6ubuntu1","3.5.1-6ubuntu2","3.5.1-9ubuntu1","3.5.1-10","3.5.2-2~16.01","3.5.2-2~16.04","3.5.2-2ubuntu0~16.04.1","3.5.2-2ubuntu0~16.04.2","3.5.2-2ubuntu0~16.04.3","3.5.2-2ubuntu0~16.04.4","3.5.2-2ubuntu0~16.04.5","3.5.2-2ubuntu0~16.04.8","3.5.2-2ubuntu0~16.04.9","3.5.2-2ubuntu0~16.04.10","3.5.2-2ubuntu0~16.04.11","3.5.2-2ubuntu0~16.04.12","3.5.2-2ubuntu0~16.04.13","3.5.2-2ubuntu0~16.04.13+esm1","3.5.2-2ubuntu0~16.04.13+esm2","3.5.2-2ubuntu0~16.04.13+esm3","3.5.2-2ubuntu0~16.04.13+esm5","3.5.2-2ubuntu0~16.04.13+esm6","3.5.2-2ubuntu0~16.04.13+esm7","3.5.2-2ubuntu0~16.04.13+esm8","3.5.2-2ubuntu0~16.04.13+esm9","3.5.2-2ubuntu0~16.04.13+esm10","3.5.2-2ubuntu0~16.04.13+esm11","3.5.2-2ubuntu0~16.04.13+esm12","3.5.2-2ubuntu0~16.04.13+esm13","3.5.2-2ubuntu0~16.04.13+esm14","3.5.2-2ubuntu0~16.04.13+esm15","3.5.2-2ubuntu0~16.04.13+esm16","3.5.2-2ubuntu0~16.04.13+esm17","3.5.2-2ubuntu0~16.04.13+esm18","3.5.2-2ubuntu0~16.04.13+esm19","3.5.2-2ubuntu0~16.04.13+esm20"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-1~18.04ubuntu1.13+esm14"}]}],"versions":["2.7.14-2ubuntu2","2.7.14-4","2.7.14-6","2.7.14-7","2.7.14-8","2.7.15~rc1-1","2.7.15~rc1-1ubuntu0.1","2.7.15-4ubuntu4~18.04","2.7.15-4ubuntu4~18.04.1","2.7.15-4ubuntu4~18.04.2","2.7.17-1~18.04","2.7.17-1~18.04ubuntu1","2.7.17-1~18.04ubuntu1.1","2.7.17-1~18.04ubuntu1.2","2.7.17-1~18.04ubuntu1.3","2.7.17-1~18.04ubuntu1.5","2.7.17-1~18.04ubuntu1.6","2.7.17-1~18.04ubuntu1.7","2.7.17-1~18.04ubuntu1.8","2.7.17-1~18.04ubuntu1.10","2.7.17-1~18.04ubuntu1.11","2.7.17-1~18.04ubuntu1.13","2.7.17-1~18.04ubuntu1.13+esm1","2.7.17-1~18.04ubuntu1.13+esm2","2.7.17-1~18.04ubuntu1.13+esm3","2.7.17-1~18.04ubuntu1.13+esm4","2.7.17-1~18.04ubuntu1.13+esm5","2.7.17-1~18.04ubuntu1.13+esm6","2.7.17-1~18.04ubuntu1.13+esm7","2.7.17-1~18.04ubuntu1.13+esm8","2.7.17-1~18.04ubuntu1.13+esm10","2.7.17-1~18.04ubuntu1.13+esm11","2.7.17-1~18.04ubuntu1.13+esm12","2.7.17-1~18.04ubuntu1.13+esm13"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python3.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.13+esm8"}]}],"versions":["3.6.3-1ubuntu1","3.6.4~rc1-1","3.6.4~rc1-2","3.6.4-1","3.6.4-2","3.6.4-3build1","3.6.4-4","3.6.5~rc1-1","3.6.5-3","3.6.6-1~18.04","3.6.7-1~18.04","3.6.8-1~18.04.1","3.6.8-1~18.04.2","3.6.8-1~18.04.3","3.6.9-1~18.04","3.6.9-1~18.04ubuntu1","3.6.9-1~18.04ubuntu1.1","3.6.9-1~18.04ubuntu1.3","3.6.9-1~18.04ubuntu1.4","3.6.9-1~18.04ubuntu1.6","3.6.9-1~18.04ubuntu1.7","3.6.9-1~18.04ubuntu1.8","3.6.9-1~18.04ubuntu1.9","3.6.9-1~18.04ubuntu1.10","3.6.9-1~18.04ubuntu1.12","3.6.9-1~18.04ubuntu1.13","3.6.9-1~18.04ubuntu1.13+esm1","3.6.9-1~18.04ubuntu1.13+esm2","3.6.9-1~18.04ubuntu1.13+esm3","3.6.9-1~18.04ubuntu1.13+esm4","3.6.9-1~18.04ubuntu1.13+esm5","3.6.9-1~18.04ubuntu1.13+esm6","3.6.9-1~18.04ubuntu1.13+esm7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python3.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.5-2ubuntu1~18.04.2+esm9"}]}],"versions":["3.7.0~a2-1","3.7.0~a3-1","3.7.0~a3-2","3.7.0~a3-3","3.7.0~a4-1","3.7.0~b1-1","3.7.0~b1-1build1","3.7.0~b2-1","3.7.0~b3-1","3.7.0-1~18.04","3.7.1-1~18.04","3.7.3-2~18.04.1","3.7.5-2~18.04","3.7.5-2~18.04.4","3.7.5-2ubuntu1~18.04.2","3.7.5-2ubuntu1~18.04.2+esm1","3.7.5-2ubuntu1~18.04.2+esm2","3.7.5-2ubuntu1~18.04.2+esm3","3.7.5-2ubuntu1~18.04.2+esm4","3.7.5-2ubuntu1~18.04.2+esm5","3.7.5-2ubuntu1~18.04.2+esm6","3.7.5-2ubuntu1~18.04.2+esm7","3.7.5-2ubuntu1~18.04.2+esm8"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python3.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-3ubuntu1~18.04.2+esm9"}]}],"versions":["3.8.0-3~18.04","3.8.0-3~18.04.1","3.8.0-3ubuntu1~18.04.2","3.8.0-3ubuntu1~18.04.2+esm1","3.8.0-3ubuntu1~18.04.2+esm2","3.8.0-3ubuntu1~18.04.2+esm3","3.8.0-3ubuntu1~18.04.2+esm4","3.8.0-3ubuntu1~18.04.2+esm5","3.8.0-3ubuntu1~18.04.2+esm6","3.8.0-3ubuntu1~18.04.2+esm7","3.8.0-3ubuntu1~18.04.2+esm8"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"python3.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.10-0ubuntu1~20.04.18+esm5"}]}],"versions":["3.8.0-1","3.8.0-2","3.8.0-3","3.8.0-4","3.8.0-5","3.8.1-2ubuntu3","3.8.2~rc1-1ubuntu1","3.8.2-1","3.8.2-1ubuntu1","3.8.2-1ubuntu1.1","3.8.2-1ubuntu1.2","3.8.5-1~20.04","3.8.5-1~20.04.2","3.8.5-1~20.04.3","3.8.10-0ubuntu1~20.04","3.8.10-0ubuntu1~20.04.1","3.8.10-0ubuntu1~20.04.2","3.8.10-0ubuntu1~20.04.4","3.8.10-0ubuntu1~20.04.5","3.8.10-0ubuntu1~20.04.6","3.8.10-0ubuntu1~20.04.7","3.8.10-0ubuntu1~20.04.8","3.8.10-0ubuntu1~20.04.9","3.8.10-0ubuntu1~20.04.10","3.8.10-0ubuntu1~20.04.11","3.8.10-0ubuntu1~20.04.12","3.8.10-0ubuntu1~20.04.13","3.8.10-0ubuntu1~20.04.14","3.8.10-0ubuntu1~20.04.15","3.8.10-0ubuntu1~20.04.16","3.8.10-0ubuntu1~20.04.17","3.8.10-0ubuntu1~20.04.18","3.8.10-0ubuntu1~20.04.18+esm1","3.8.10-0ubuntu1~20.04.18+esm2","3.8.10-0ubuntu1~20.04.18+esm3","3.8.10-0ubuntu1~20.04.18+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"python3.9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.5-3ubuntu0~20.04.1+esm9"}]}],"versions":["3.9.0~rc1-1~20.04","3.9.0-5~20.04","3.9.5-3~20.04.1","3.9.5-3ubuntu0~20.04.1","3.9.5-3ubuntu0~20.04.1+esm1","3.9.5-3ubuntu0~20.04.1+esm2","3.9.5-3ubuntu0~20.04.1+esm3","3.9.5-3ubuntu0~20.04.1+esm4","3.9.5-3ubuntu0~20.04.1+esm5","3.9.5-3ubuntu0~20.04.1+esm6","3.9.5-3ubuntu0~20.04.1+esm7","3.9.5-3ubuntu0~20.04.1+esm8"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"python3.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.12-1~22.04.14"}]}],"versions":["3.10.0-2","3.10.0-3","3.10.0-4","3.10.0-5","3.10.0-5build1","3.10.1-1","3.10.1-2","3.10.2-1","3.10.2-5","3.10.2-7","3.10.3-1","3.10.4-3","3.10.4-3ubuntu0.1","3.10.6-1~22.04","3.10.6-1~22.04.1","3.10.6-1~22.04.2","3.10.6-1~22.04.2ubuntu1","3.10.6-1~22.04.2ubuntu1.1","3.10.12-1~22.04.2","3.10.12-1~22.04.3","3.10.12-1~22.04.4","3.10.12-1~22.04.5","3.10.12-1~22.04.6","3.10.12-1~22.04.7","3.10.12-1~22.04.8","3.10.12-1~22.04.9","3.10.12-1~22.04.10","3.10.12-1~22.04.11","3.10.12-1~22.04.12","3.10.12-1~22.04.13"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-13ubuntu1.5+esm8"}]}],"versions":["2.7.18-8build1","2.7.18-13","2.7.18-13ubuntu1","2.7.18-13ubuntu1.1","2.7.18-13ubuntu1.1+esm2","2.7.18-13ubuntu1.2","2.7.18-13ubuntu1.2+esm1","2.7.18-13ubuntu1.2+esm2","2.7.18-13ubuntu1.2+esm3","2.7.18-13ubuntu1.3","2.7.18-13ubuntu1.3+esm1","2.7.18-13ubuntu1.4","2.7.18-13ubuntu1.4+esm1","2.7.18-13ubuntu1.5","2.7.18-13ubuntu1.5+esm2","2.7.18-13ubuntu1.5+esm3","2.7.18-13ubuntu1.5+esm5","2.7.18-13ubuntu1.5+esm6","2.7.18-13ubuntu1.5+esm7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"python3.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.0~rc1-1~22.04.1~esm8"}]}],"versions":["3.11.0~rc1-1~22.04","3.11.0~rc1-1~22.04.1~esm1","3.11.0~rc1-1~22.04.1~esm2","3.11.0~rc1-1~22.04.1~esm3","3.11.0~rc1-1~22.04.1~esm4","3.11.0~rc1-1~22.04.1~esm5","3.11.0~rc1-1~22.04.1~esm6","3.11.0~rc1-1~22.04.1~esm7"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"python3.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.3-1ubuntu0.11"}]}],"versions":["3.12.0-1","3.12.0-5","3.12.0-6","3.12.0-7","3.12.1-2","3.12.2-1","3.12.2-4build3","3.12.2-4build4","3.12.2-5ubuntu3","3.12.3-1","3.12.3-1ubuntu0.1","3.12.3-1ubuntu0.2","3.12.3-1ubuntu0.3","3.12.3-1ubuntu0.4","3.12.3-1ubuntu0.5","3.12.3-1ubuntu0.6","3.12.3-1ubuntu0.7","3.12.3-1ubuntu0.8","3.12.3-1ubuntu0.9","3.12.3-1ubuntu0.10"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"python3.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.7-1ubuntu0.3"}]}],"versions":["3.13.3-1","3.13.3-2","3.13.3-4","3.13.4-1","3.13.5-1","3.13.5-2","3.13.6-1","3.13.7-1","3.13.7-1ubuntu0.1","3.13.7-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"python3.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-1ubuntu0.2"}]}],"versions":["3.14.0~a7-0ubuntu1","3.14.0~b1-1","3.14.0~b3-1","3.14.0~rc1-1","3.14.0~rc2-1","3.14.0~rc3-1","3.14.0-1","3.14.0-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"python3.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.12-1~22.04.16"}]}],"versions":["3.10.0-2","3.10.0-3","3.10.0-4","3.10.0-5","3.10.0-5build1","3.10.1-1","3.10.1-2","3.10.2-1","3.10.2-5","3.10.2-7","3.10.3-1","3.10.4-3","3.10.4-3ubuntu0.1","3.10.6-1~22.04","3.10.6-1~22.04.1","3.10.6-1~22.04.2","3.10.6-1~22.04.2ubuntu1","3.10.6-1~22.04.2ubuntu1.1","3.10.12-1~22.04.2","3.10.12-1~22.04.3","3.10.12-1~22.04.4","3.10.12-1~22.04.5","3.10.12-1~22.04.6","3.10.12-1~22.04.7","3.10.12-1~22.04.8","3.10.12-1~22.04.9","3.10.12-1~22.04.10","3.10.12-1~22.04.11","3.10.12-1~22.04.12","3.10.12-1~22.04.13","3.10.12-1~22.04.14","3.10.12-1~22.04.15"],"bundled":18},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"python3.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.3-1ubuntu0.15"}]}],"versions":["3.12.0-1","3.12.0-5","3.12.0-6","3.12.0-7","3.12.1-2","3.12.2-1","3.12.2-4build3","3.12.2-4build4","3.12.2-5ubuntu3","3.12.3-1","3.12.3-1ubuntu0.1","3.12.3-1ubuntu0.2","3.12.3-1ubuntu0.3","3.12.3-1ubuntu0.4","3.12.3-1ubuntu0.5","3.12.3-1ubuntu0.6","3.12.3-1ubuntu0.7","3.12.3-1ubuntu0.8","3.12.3-1ubuntu0.9","3.12.3-1ubuntu0.10","3.12.3-1ubuntu0.11","3.12.3-1ubuntu0.12","3.12.3-1ubuntu0.13"],"bundled":18},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"python3.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.4-1ubuntu0.1"}]}],"versions":["3.14.0-1","3.14.0-2","3.14.0-4","3.14.2-1","3.14.3-1","3.14.3-2","3.14.3-3","3.14.3-5","3.14.4-1"],"bundled":18},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python315","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15.0~a3-3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.19-4.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python314","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.3-1.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14-4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python312","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.12-5.1"}]}],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python313","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.12-1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.48.0-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"python313","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.12-160000.1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"python313-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.12-160000.1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"python313-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.12-160000.1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"python313-nogil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.12-160000.1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"python313-nogil-nogil-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.12-160000.1.1"}]}],"bundled":5}],"products":[{"vendor":"python software foundation","product":"cpython"}],"references":[{"url":"https://github.com/python/cpython/pull/143920","tags":["patch","web","fix","article","report"]},{"url":"https://github.com/python/cpython/issues/143919","tags":["issue-tracking","web","report","article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/6VFLQQEIX673KXKFUZXCUNE5AZOGZ45M/","tags":["vendor-advisory","web","advisory","report"]},{"url":"https://github.com/python/cpython/commit/95746b3a13a985787ef53b977129041971ed7f70","tags":["patch","web","fix","report"]},{"url":"https://github.com/python/cpython/commit/712452e6f1d4b9f7f8c4c92ebfcaac1705faa440","tags":["patch","web","fix"]},{"url":"https://github.com/python/cpython/commit/62700107418eb2cca3fc88da036a243ea975f172","tags":["patch","web","fix"]},{"url":"https://github.com/python/cpython/commit/7852d72b653fea0199acf5fc2a84f6f8b84eba8d","tags":["patch","web","fix"]},{"url":"https://github.com/python/cpython/commit/918387e4912d12ffc166c8f2a38df92b6ec756ca","tags":["patch","web","fix"]},{"url":"https://github.com/python/cpython/commit/b1869ff648bbee0717221d09e6deff46617f3e85","tags":["patch","web","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0672","tags":["web","advisory"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/6VFLQQEIX673KXKFUZXCUNE5AZOGZ45M"},{"url":"https://github.com/advisories/GHSA-x85f-j5v8-5vrv"},{"url":"https://access.redhat.com/errata/RHSA-2026:10950","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-13837","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-15282","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-59375","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-6075","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-0672","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-1502","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2297","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-3644","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-4224","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-4786","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6100","tags":["report"]},{"url":"https://bugzilla.redhat.com/2395108","tags":["report"]},{"url":"https://bugzilla.redhat.com/2408891","tags":["report"]},{"url":"https://bugzilla.redhat.com/2418084","tags":["report"]},{"url":"https://bugzilla.redhat.com/2431366","tags":["report"]},{"url":"https://bugzilla.redhat.com/2431374","tags":["report"]},{"url":"https://bugzilla.redhat.com/2444691","tags":["report"]},{"url":"https://bugzilla.redhat.com/2448168","tags":["report"]},{"url":"https://bugzilla.redhat.com/2448181","tags":["report"]},{"url":"https://bugzilla.redhat.com/2457409","tags":["report"]},{"url":"https://bugzilla.redhat.com/2457932","tags":["report"]},{"url":"https://bugzilla.redhat.com/2458049","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-10950.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19064","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-4519","tags":["report"]},{"url":"https://bugzilla.redhat.com/2449649","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-19064.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19177","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-19177.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-0672","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1776330599.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1778129970.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1779213441.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1779886202.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1781173352.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13462","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3644","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4224","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1781174666.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1781176375.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1781259901.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-7210","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1781342809.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1781525675.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-26116","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-28861","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3177","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3737","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0391","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-45061","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-48560","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-48564","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-48565","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1781527577.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1781528783.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1781620276.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2026-1782139078.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2026-1782159334.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1782490405.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1783703079.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1783705997.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/0xxx/CVE-2026-0672.json","tags":["advisory"]},{"url":"https://github.com/python/cpython","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-0672","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0455.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35072","tags":["report"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1356","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-12781","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-15367","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0865","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-1299","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1357","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1358","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1461","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11468","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-15282","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1462","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1463","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2395108","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2408891","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2418084","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2431366","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2431374","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2444691","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2448168","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2448181","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2457409","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2457932","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2458049","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_10950.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-6075","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-6075","tags":["advisory"]},{"url":"https://github.com/python/cpython/issues/136065","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/IUP5QJ6D4KK6ULHOMPC7DPNKRYQTQNLA/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-13837","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13837","tags":["advisory"]},{"url":"https://github.com/python/cpython/issues/119342","tags":["article"]},{"url":"https://github.com/python/cpython/pull/119343","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-15282","tags":["advisory"]},{"url":"https://github.com/python/cpython/issues/143925","tags":["article"]},{"url":"https://github.com/python/cpython/pull/143926","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/X66HL7SISGJT33J53OHXMZT4DFLMHVKF/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-59375","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-59375","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2025-59375","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2025-59375","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-0672","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-1502","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-1502","tags":["advisory"]},{"url":"https://github.com/python/cpython/commit/05ed7ce7ae9e17c23a04085b2539fe6d6d3cef69","tags":["article"]},{"url":"https://github.com/python/cpython/issues/146211","tags":["article"]},{"url":"https://github.com/python/cpython/pull/146212","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/2IVPAEQWUJBCTQZEJEVTYCIKSMQPGRZ3/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2297","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2297","tags":["advisory"]},{"url":"https://github.com/python/cpython/commit/482d6f8bdba9da3725d272e8bb4a2d25fb6a603e","tags":["article"]},{"url":"https://github.com/python/cpython/commit/a51b1b512de1d56b3714b65628a2eae2b07e535e","tags":["article"]},{"url":"https://github.com/python/cpython/commit/e58e9802b9bec5cdbf48fc9bf1da5f4fda482e86","tags":["article"]},{"url":"https://github.com/python/cpython/issues/145506","tags":["article"]},{"url":"https://github.com/python/cpython/pull/145507","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-3644","tags":["advisory"]},{"url":"https://github.com/python/cpython/commit/57e88c1cf95e1481b94ae57abe1010469d47a6b4","tags":["article"]},{"url":"https://github.com/python/cpython/issues/145599","tags":["article"]},{"url":"https://github.com/python/cpython/pull/145600","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/H6CADMBCDRFGWCMOXWUIHFJNV43GABJ7/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-4224","tags":["advisory"]},{"url":"https://github.com/python/cpython/commit/196edfb06a7458377d4d0f4b3cd41724c1f3bd4a","tags":["article"]},{"url":"https://github.com/python/cpython/commit/e0a8a6da90597a924b300debe045cdb4628ee1f3","tags":["article"]},{"url":"https://github.com/python/cpython/commit/eb0e8be3a7e11b87d198a2c3af1ed0eccf532768","tags":["article"]},{"url":"https://github.com/python/cpython/issues/145986","tags":["article"]},{"url":"https://github.com/python/cpython/pull/145987","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/5M7CGUW3XBRY7II4DK43KF7NQQ3TPZ6R/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-4786","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4786","tags":["advisory"]},{"url":"https://github.com/python/cpython/issues/148169","tags":["article"]},{"url":"https://github.com/python/cpython/pull/148170","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/JQDUNJVB4AQNTJECSUKOBDU3XCJIPSE5/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6100","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6100","tags":["advisory"]},{"url":"https://github.com/python/cpython/commit/6a5f79c8d7bbf22b083b240910c7a8781a59437d","tags":["article"]},{"url":"https://github.com/python/cpython/commit/8fc66aef6d7b3ae58f43f5c66f9366cc8cbbfcd2","tags":["article"]},{"url":"https://github.com/python/cpython/commit/c3cf71c3366fe49acb776a639405c0eea6169c20","tags":["article"]},{"url":"https://github.com/python/cpython/issues/148395","tags":["article"]},{"url":"https://github.com/python/cpython/pull/148396","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/HTWB2Z6KT5QQX4RYEZAFININDHNOSIF3/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2449649","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19064.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-4519","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4519","tags":["advisory"]},{"url":"https://github.com/python/cpython/issues/143930","tags":["article"]},{"url":"https://github.com/python/cpython/pull/143931","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/AY5NDSS433JK56Q7Q5IS7B37QFZVVOUS/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19177.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:10950","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:19064","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:19177","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260590-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1254867","tags":["report"]},{"url":"https://bugzilla.suse.com/1257031","tags":["report"]},{"url":"https://bugzilla.suse.com/1257041","tags":["report"]},{"url":"https://bugzilla.suse.com/1257042","tags":["report"]},{"url":"https://bugzilla.suse.com/1257044","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-15366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-15367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0672","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0865","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260612-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1257029","tags":["report"]},{"url":"https://bugzilla.suse.com/1257046","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-15282","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260613-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260642-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1257181","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1299","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260643-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260644-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260645-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260663-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1252974","tags":["report"]},{"url":"https://bugzilla.suse.com/1257064","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6075","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260664-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260693-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1257108","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-12781","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260767-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261062-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1254400","tags":["report"]},{"url":"https://bugzilla.suse.com/1254401","tags":["report"]},{"url":"https://bugzilla.suse.com/1254997","tags":["report"]},{"url":"https://bugzilla.suse.com/1259240","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-12084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13837","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2297","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261107-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261117-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261349-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1259611","tags":["report"]},{"url":"https://bugzilla.suse.com/1259734","tags":["report"]},{"url":"https://bugzilla.suse.com/1259735","tags":["report"]},{"url":"https://bugzilla.suse.com/1259989","tags":["report"]},{"url":"https://bugzilla.suse.com/1260026","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3479","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4519","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620543-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620581-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620665-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620710-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620768-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620796-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-0672","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8018-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8018-3","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8509-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-4189","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-13462","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-69534","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-1299","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-1502","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-2297","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-3276","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-3644","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-4224","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-4519","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-4786","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-5713","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-6019","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-6100","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-7774","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-8328","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-9669","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-0672","title":"Header injection in http.cookies.Morsel","description":"When using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch rejects all control characters within cookie names, values, and parameters.","status":"published","published":"2026-01-20T21:52:33.925Z","modified":"2026-03-03T14:43:20.49Z","cvss":[{"version":"4.0","score":6,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N","level":"medium","assessor":"cna"}],"cwes":["CWE-93"],"updated_at":"2026-11-02T14:20:13.587351Z"}],"euvd":[{"id":"EUVD-2026-3521","description":"When using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch rejects all control characters within cookie names, values, and parameters.","status":"published","published":"2026-01-20T21:52:33Z","modified":"2026-03-03T14:43:20Z","cvss":[{"version":"4.0","score":6,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T19:48:12.247854Z"}],"ghsa":[{"id":"GHSA-x85f-j5v8-5vrv","title":"When using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting...","description":"When using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch rejects all control characters within cookie names, values, and parameters.","status":"published","published":"2026-01-21T00:31:42Z","modified":"2026-01-26T15:30:50Z","cvss":[{"version":"4.0","score":6,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"}],"cwes":["CWE-93"],"updated_at":"2026-11-02T15:05:54.187658Z"}],"nvd":[{"id":"CVE-2026-0672","description":"When using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch rejects all control characters within cookie names, values, and parameters.","status":"published","published":"2026-01-20T22:15:52.68Z","modified":"2026-06-17T10:11:11.133Z","cvss":[{"version":"4.0","score":6,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"}],"cwes":["CWE-93"],"updated_at":"2026-11-02T14:12:04.066712Z"}],"osv":[{"id":"CVE-2026-0672","title":"Header injection in http.cookies.Morsel","description":"When using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch rejects all control characters within cookie names, values, and parameters.","status":"published","published":"2026-01-20T21:52:33.925Z","modified":"2026-11-04T02:46:57.77889038Z","cvss":[{"version":"4.0","score":6,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"cwes":["CWE-93"],"updated_at":"2026-11-04T02:53:57.551196Z"},{"id":"DEBIAN-CVE-2026-0672","description":"When using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch rejects all control characters within cookie names, values, and parameters.","status":"published","published":"2026-01-20T22:15:52.68Z","modified":"2026-11-01T17:00:09.820412741Z","cvss":[{"version":"4.0","score":6,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"}],"updated_at":"2026-11-02T15:45:48.440897Z"},{"id":"OESA-2026-1356","title":"python3 security update","description":"Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces.\r\n\r\nSecurity Fix(es):\n\nWhen passing data to the b64decode(), standard_b64decode(), and urlsafe_b64decode() functions in the \u0026quot;base64\u0026quot; module the characters \u0026quot;+/\u0026quot; will always be accepted, regardless of the value of \u0026quot;altchars\u0026quot; parameter, typically used to establish an \u0026quot;alternative base64 alphabet\u0026quot; such as the URL safe alphabet. This behavior matches what is recommended in earlier base64 RFCs, but newer RFCs now recommend either dropping characters outside the specified base64 alphabet or raising an error. The old behavior has the possibility of causing data integrity issues.\n\n\n\n\nThis behavior can only be insecure if your application uses an alternate base64 alphabet (without \u0026quot;+/\u0026quot;). If your application does not use the \u0026quot;altchars\u0026quot; parameter or the urlsafe_b64decode() function, then your application does not use an alternative base64 alphabet.\n\n\n\n\nThe attached patches DOES NOT make the base64-decode behavior raise an error, as this would be a change in behavior and break existing programs. Instead, the patch deprecates the behavior which will be replaced with the newly recommended behavior in a future version of Python. Users are recommended to mitigate by verifying user-controlled inputs match the base64 \nalphabet they are expecting or verify that their application would not be \naffected if the b64decode() functions accepted \u0026quot;+\u0026quot; or \u0026quot;/\u0026quot; outside of altchars.(CVE-2025-12781)\n\nThe poplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters.(CVE-2025-15367)\n\nWhen using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch rejects all control characters within cookie names, values, and parameters.(CVE-2026-0672)\n\nThe wsgiref.headers.Headers module has an HTTP header injection vulnerability where user-controlled header names and values containing newlines can allow injecting malicious HTTP headers.(CVE-2026-0865)\n\nThe \nemail module, specifically the \u0026quot;BytesGenerator\u0026quot; class, didn’t properly quote newlines for email headers when \nserializing an email message allowing for header injection when an email\n is serialized. This is only applicable if using \u0026quot;LiteralHeader\u0026quot; writing headers that don\u0026apos;t respect email folding rules, the new behavior will reject the incorrectly folded headers in \u0026quot;BytesGenerator\u0026quot;.(CVE-2026-1299)","status":"published","published":"2026-02-13T11:10:23Z","modified":"2026-08-18T01:19:32.650797813Z","cvss":[{"version":"4.0","score":6,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1357","title":"python3 security update","description":"Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces.\r\n\r\nSecurity Fix(es):\n\nWhen passing data to the b64decode(), standard_b64decode(), and urlsafe_b64decode() functions in the \u0026quot;base64\u0026quot; module the characters \u0026quot;+/\u0026quot; will always be accepted, regardless of the value of \u0026quot;altchars\u0026quot; parameter, typically used to establish an \u0026quot;alternative base64 alphabet\u0026quot; such as the URL safe alphabet. This behavior matches what is recommended in earlier base64 RFCs, but newer RFCs now recommend either dropping characters outside the specified base64 alphabet or raising an error. The old behavior has the possibility of causing data integrity issues.\n\n\n\n\nThis behavior can only be insecure if your application uses an alternate base64 alphabet (without \u0026quot;+/\u0026quot;). If your application does not use the \u0026quot;altchars\u0026quot; parameter or the urlsafe_b64decode() function, then your application does not use an alternative base64 alphabet.\n\n\n\n\nThe attached patches DOES NOT make the base64-decode behavior raise an error, as this would be a change in behavior and break existing programs. Instead, the patch deprecates the behavior which will be replaced with the newly recommended behavior in a future version of Python. Users are recommended to mitigate by verifying user-controlled inputs match the base64 \nalphabet they are expecting or verify that their application would not be \naffected if the b64decode() functions accepted \u0026quot;+\u0026quot; or \u0026quot;/\u0026quot; outside of altchars.(CVE-2025-12781)\n\nThe poplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters.(CVE-2025-15367)\n\nWhen using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch rejects all control characters within cookie names, values, and parameters.(CVE-2026-0672)\n\nThe wsgiref.headers.Headers module has an HTTP header injection vulnerability where user-controlled header names and values containing newlines can allow injecting malicious HTTP headers.(CVE-2026-0865)\n\nThe \nemail module, specifically the \u0026quot;BytesGenerator\u0026quot; class, didn’t properly quote newlines for email headers when \nserializing an email message allowing for header injection when an email\n is serialized. This is only applicable if using \u0026quot;LiteralHeader\u0026quot; writing headers that don\u0026apos;t respect email folding rules, the new behavior will reject the incorrectly folded headers in \u0026quot;BytesGenerator\u0026quot;.(CVE-2026-1299)","status":"published","published":"2026-02-13T11:10:23Z","modified":"2026-08-18T01:19:33.55354041Z","cvss":[{"version":"4.0","score":6,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1358","title":"python3 security update","description":"Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces.\r\n\r\nSecurity Fix(es):\n\nWhen passing data to the b64decode(), standard_b64decode(), and urlsafe_b64decode() functions in the \u0026quot;base64\u0026quot; module the characters \u0026quot;+/\u0026quot; will always be accepted, regardless of the value of \u0026quot;altchars\u0026quot; parameter, typically used to establish an \u0026quot;alternative base64 alphabet\u0026quot; such as the URL safe alphabet. This behavior matches what is recommended in earlier base64 RFCs, but newer RFCs now recommend either dropping characters outside the specified base64 alphabet or raising an error. The old behavior has the possibility of causing data integrity issues.\n\n\n\n\nThis behavior can only be insecure if your application uses an alternate base64 alphabet (without \u0026quot;+/\u0026quot;). If your application does not use the \u0026quot;altchars\u0026quot; parameter or the urlsafe_b64decode() function, then your application does not use an alternative base64 alphabet.\n\n\n\n\nThe attached patches DOES NOT make the base64-decode behavior raise an error, as this would be a change in behavior and break existing programs. Instead, the patch deprecates the behavior which will be replaced with the newly recommended behavior in a future version of Python. Users are recommended to mitigate by verifying user-controlled inputs match the base64 \nalphabet they are expecting or verify that their application would not be \naffected if the b64decode() functions accepted \u0026quot;+\u0026quot; or \u0026quot;/\u0026quot; outside of altchars.(CVE-2025-12781)\n\nThe poplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters.(CVE-2025-15367)\n\nWhen using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch rejects all control characters within cookie names, values, and parameters.(CVE-2026-0672)\n\nThe wsgiref.headers.Headers module has an HTTP header injection vulnerability where user-controlled header names and values containing newlines can allow injecting malicious HTTP headers.(CVE-2026-0865)\n\nThe \nemail module, specifically the \u0026quot;BytesGenerator\u0026quot; class, didn’t properly quote newlines for email headers when \nserializing an email message allowing for header injection when an email\n is serialized. This is only applicable if using \u0026quot;LiteralHeader\u0026quot; writing headers that don\u0026apos;t respect email folding rules, the new behavior will reject the incorrectly folded headers in \u0026quot;BytesGenerator\u0026quot;.(CVE-2026-1299)","status":"published","published":"2026-02-13T11:10:23Z","modified":"2026-08-18T01:19:33.597233212Z","cvss":[{"version":"4.0","score":6,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1461","title":"python3 security update","description":"Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces.\r\n\r\nSecurity Fix(es):\n\nIn CPython\u0026apos;s email module, when folding a long comment containing exclusively unfoldable characters, the parentheses are not preserved. This could be exploited to inject headers into email messages in scenarios where email addresses are user-controlled and not sanitized.(CVE-2025-11468)\n\nWhen passing data to the b64decode(), standard_b64decode(), and urlsafe_b64decode() functions in the \u0026quot;base64\u0026quot; module the characters \u0026quot;+/\u0026quot; will always be accepted, regardless of the value of \u0026quot;altchars\u0026quot; parameter, typically used to establish an \u0026quot;alternative base64 alphabet\u0026quot; such as the URL safe alphabet. This behavior matches what is recommended in earlier base64 RFCs, but newer RFCs now recommend either dropping characters outside the specified base64 alphabet or raising an error. The old behavior has the possibility of causing data integrity issues.\n\n\n\n\nThis behavior can only be insecure if your application uses an alternate base64 alphabet (without \u0026quot;+/\u0026quot;). If your application does not use the \u0026quot;altchars\u0026quot; parameter or the urlsafe_b64decode() function, then your application does not use an alternative base64 alphabet.\n\n\n\n\nThe attached patches DOES NOT make the base64-decode behavior raise an error, as this would be a change in behavior and break existing programs. Instead, the patch deprecates the behavior which will be replaced with the newly recommended behavior in a future version of Python. Users are recommended to mitigate by verifying user-controlled inputs match the base64 \nalphabet they are expecting or verify that their application would not be \naffected if the b64decode() functions accepted \u0026quot;+\u0026quot; or \u0026quot;/\u0026quot; outside of altchars.(CVE-2025-12781)\n\nUser-controlled data URLs parsed by urllib.request.DataHandler allow injecting headers through newlines in the data URL mediatype.(CVE-2025-15282)\n\nThe poplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters.(CVE-2025-15367)\n\nWhen using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch rejects all control characters within cookie names, values, and parameters.(CVE-2026-0672)\n\nThe wsgiref.headers.Headers module has an HTTP header injection vulnerability where user-controlled header names and values containing newlines can allow injecting malicious HTTP headers.(CVE-2026-0865)\n\nThe \nemail module, specifically the \u0026quot;BytesGenerator\u0026quot; class, didn’t properly quote newlines for email headers when \nserializing an email message allowing for header injection when an email\n is serialized. This is only applicable if using \u0026quot;LiteralHeader\u0026quot; writing headers that don\u0026apos;t respect email folding rules, the new behavior will reject the incorrectly folded headers in \u0026quot;BytesGenerator\u0026quot;.(CVE-2026-1299)","status":"published","published":"2026-02-28T11:10:28Z","modified":"2026-08-18T01:19:34.930706191Z","cvss":[{"version":"4.0","score":6,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N","level":"medium"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1462","title":"python3 security update","description":"Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces.\r\n\r\nSecurity Fix(es):\n\nWhen using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch rejects all control characters within cookie names, values, and parameters.(CVE-2026-0672)\n\nThe wsgiref.headers.Headers module has an HTTP header injection vulnerability where user-controlled header names and values containing newlines can allow injecting malicious HTTP headers.(CVE-2026-0865)","status":"published","published":"2026-02-28T11:10:28Z","modified":"2026-08-18T01:19:34.477255451Z","cvss":[{"version":"4.0","score":6,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1463","title":"python3 security update","description":"Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces.\r\n\r\nSecurity Fix(es):\n\nWhen using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch rejects all control characters within cookie names, values, and parameters.(CVE-2026-0672)\n\nThe wsgiref.headers.Headers module has an HTTP header injection vulnerability where user-controlled header names and values containing newlines can allow injecting malicious HTTP headers.(CVE-2026-0865)\n\nThe \nemail module, specifically the \u0026quot;BytesGenerator\u0026quot; class, didn’t properly quote newlines for email headers when \nserializing an email message allowing for header injection when an email\n is serialized. This is only applicable if using \u0026quot;LiteralHeader\u0026quot; writing headers that don\u0026apos;t respect email folding rules, the new behavior will reject the incorrectly folded headers in \u0026quot;BytesGenerator\u0026quot;.(CVE-2026-1299)","status":"published","published":"2026-02-28T11:10:28Z","modified":"2026-08-18T01:19:34.398555766Z","cvss":[{"version":"4.0","score":6,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"RHSA-2026:10950","title":"Red Hat Security Advisory: python3.12 security update","status":"published","published":"2026-04-28T10:08:05Z","modified":"2026-10-17T10:09:00Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.066978Z"},{"id":"RHSA-2026:19064","title":"Red Hat Security Advisory: python3.12 security update","status":"published","published":"2026-05-20T10:09:48Z","modified":"2026-10-17T10:10:13Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:19177","title":"Red Hat Security Advisory: python3.12 security update","status":"published","published":"2026-05-20T10:10:11Z","modified":"2026-10-17T10:10:21Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RLSA-2026:10950","title":"Important: python3.12 security update","description":"Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.\n\nSecurity Fix(es):\n\n* expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375)\n\n* python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075)\n\n* cpython: Out-of-memory when loading Plist (CVE-2025-13837)\n\n* cpython: Header injection via newlines in data URL mediatype in Python (CVE-2025-15282)\n\n* cpython: Header injection in http.cookies.Morsel in Python (CVE-2026-0672)\n\n* cpython: CPython: Logging Bypass in Legacy .pyc File Handling (CVE-2026-2297)\n\n* cpython: Incomplete control character validation in http.cookies (CVE-2026-3644)\n\n* cpython: Stack overflow parsing XML with deeply nested DTD content models (CVE-2026-4224)\n\n* python: Python: HTTP header injection via CR/LF in proxy tunnel headers (CVE-2026-1502)\n\n* python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)\n\n* python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-04-28T06:00:55.994176Z","modified":"2026-04-28T06:30:23.710127Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"RLSA-2026:19064","title":"Important: python3.12 security update","description":"Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.\n\nSecurity Fix(es):\n\n* expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375)\n\n* python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075)\n\n* cpython: Out-of-memory when loading Plist (CVE-2025-13837)\n\n* cpython: Header injection via newlines in data URL mediatype in Python (CVE-2025-15282)\n\n* cpython: Header injection in http.cookies.Morsel in Python (CVE-2026-0672)\n\n* cpython: CPython: Logging Bypass in Legacy .pyc File Handling (CVE-2026-2297)\n\n* cpython: Incomplete control character validation in http.cookies (CVE-2026-3644)\n\n* cpython: Stack overflow parsing XML with deeply nested DTD content models (CVE-2026-4224)\n\n* python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)\n\n* python: Python: HTTP header injection via CR/LF in proxy tunnel headers (CVE-2026-1502)\n\n* python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)\n\n* python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-05-29T16:03:24.060458Z","modified":"2026-05-29T16:30:43.831339403Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"RLSA-2026:19177","title":"Important: python3.12 security update","description":"Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.\n\nSecurity Fix(es):\n\n* expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375)\n\n* python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075)\n\n* cpython: Out-of-memory when loading Plist (CVE-2025-13837)\n\n* cpython: Header injection via newlines in data URL mediatype in Python (CVE-2025-15282)\n\n* cpython: Header injection in http.cookies.Morsel in Python (CVE-2026-0672)\n\n* cpython: CPython: Logging Bypass in Legacy .pyc File Handling (CVE-2026-2297)\n\n* cpython: Incomplete control character validation in http.cookies (CVE-2026-3644)\n\n* cpython: Stack overflow parsing XML with deeply nested DTD content models (CVE-2026-4224)\n\n* python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)\n\n* python: Python: HTTP header injection via CR/LF in proxy tunnel headers (CVE-2026-1502)\n\n* python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)\n\n* python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-05-28T15:43:06.024531Z","modified":"2026-05-28T16:00:26.699981422Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"UBUNTU-CVE-2026-0672","description":"When using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch rejects all control characters within cookie names, values, and parameters.","status":"published","published":"2026-01-20T22:15:00Z","modified":"2026-07-06T16:15:25.974358305Z","cvss":[{"version":"4.0","score":6,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T16:55:58.519486Z"},{"id":"ALSA-2026:10950","title":"Important: python3.12 security update","description":"Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  \n\nSecurity Fix(es):  \n\n  * expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375)\n  * python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075)\n  * cpython: Out-of-memory when loading Plist (CVE-2025-13837)\n  * cpython: Header injection via newlines in data URL mediatype in Python (CVE-2025-15282)\n  * cpython: Header injection in http.cookies.Morsel in Python (CVE-2026-0672)\n  * cpython: CPython: Logging Bypass in Legacy .pyc File Handling (CVE-2026-2297)\n  * cpython: Incomplete control character validation in http.cookies (CVE-2026-3644)\n  * cpython: Stack overflow parsing XML with deeply nested DTD content models (CVE-2026-4224)\n  * python: Python: HTTP header injection via CR/LF in proxy tunnel headers (CVE-2026-1502)\n  * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)\n  * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-04-27T00:00:00Z","modified":"2026-10-29T11:02:23.390084647Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"ALSA-2026:19064","title":"Important: python3.12 security update","description":"Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  \n\nSecurity Fix(es):  \n\n  * expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375)\n  * python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075)\n  * cpython: Out-of-memory when loading Plist (CVE-2025-13837)\n  * cpython: Header injection via newlines in data URL mediatype in Python (CVE-2025-15282)\n  * cpython: Header injection in http.cookies.Morsel in Python (CVE-2026-0672)\n  * cpython: CPython: Logging Bypass in Legacy .pyc File Handling (CVE-2026-2297)\n  * cpython: Incomplete control character validation in http.cookies (CVE-2026-3644)\n  * cpython: Stack overflow parsing XML with deeply nested DTD content models (CVE-2026-4224)\n  * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)\n  * python: Python: HTTP header injection via CR/LF in proxy tunnel headers (CVE-2026-1502)\n  * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)\n  * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-05-19T00:00:00Z","modified":"2026-10-29T11:30:17.576467972Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"ALSA-2026:19177","title":"Important: python3.12 security update","description":"Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  \n\nSecurity Fix(es):  \n\n  * expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375)\n  * python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075)\n  * cpython: Out-of-memory when loading Plist (CVE-2025-13837)\n  * cpython: Header injection via newlines in data URL mediatype in Python (CVE-2025-15282)\n  * cpython: Header injection in http.cookies.Morsel in Python (CVE-2026-0672)\n  * cpython: CPython: Logging Bypass in Legacy .pyc File Handling (CVE-2026-2297)\n  * cpython: Incomplete control character validation in http.cookies (CVE-2026-3644)\n  * cpython: Stack overflow parsing XML with deeply nested DTD content models (CVE-2026-4224)\n  * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)\n  * python: Python: HTTP header injection via CR/LF in proxy tunnel headers (CVE-2026-1502)\n  * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)\n  * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-05-19T00:00:00Z","modified":"2026-10-29T11:32:30.937571683Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"AZL-75026","title":"CVE-2026-0672 affecting package python3 for versions less than 3.12.9-8","description":"When using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch rejects all control characters within cookie names, values, and parameters.","status":"published","published":"2026-01-20T22:15:52Z","modified":"2026-09-08T17:33:11Z","updated_at":"2026-11-02T15:28:09.474476Z"},{"id":"AZL-75044","title":"CVE-2026-0672 affecting package python3 for versions less than 3.9.19-18","description":"When using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch rejects all control characters within cookie names, values, and parameters.","status":"published","published":"2026-01-20T22:15:52Z","modified":"2026-04-21T04:38:50.305149Z","updated_at":"2026-11-02T15:28:09.474476Z"},{"id":"BELL-CVE-2026-0672","status":"published","published":"2026-01-22T06:06:50.717836Z","modified":"2026-01-28T07:30:01.656646Z","updated_at":"2026-11-02T15:28:23.037038Z"},{"id":"BIT-libpython-2026-0672","title":"Header injection in http.cookies.Morsel","description":"When using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch rejects all control characters within cookie names, values, and parameters.","status":"published","published":"2026-01-26T14:43:32.238Z","modified":"2026-04-10T11:46:31.979708Z","updated_at":"2026-11-02T15:28:32.162822Z"},{"id":"BIT-python-2026-0672","title":"Header injection in http.cookies.Morsel","description":"When using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch rejects all control characters within cookie names, values, and parameters.","status":"published","published":"2026-01-26T14:50:03.015Z","modified":"2026-04-10T11:45:39.59178Z","updated_at":"2026-11-02T15:28:34.724063Z"},{"id":"BIT-python-min-2026-0672","title":"Header injection in http.cookies.Morsel","description":"When using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch rejects all control characters within cookie names, values, and parameters.","status":"published","published":"2026-01-26T14:50:04.045Z","modified":"2026-04-10T11:45:30.15096Z","updated_at":"2026-11-02T15:28:35.111822Z"},{"id":"CLSA-2026-1776330599","title":"python3.9: Fix of 11 CVEs","description":"- CVE-2025-8291: fix zipfile ZIP64 EOCD Locator offset validation\n- CVE-2025-6069: fix quadratic complexity in HTMLParser\n- CVE-2025-4516: fix use-after-free in unicode-escape decoder with error handler\n- CVE-2026-2297: ensure SourcelessFileLoader uses io.open_code\n- CVE-2026-3479: reject invalid resource arguments in pkgutil.get_data()\n- CVE-2025-1795: fix email header list separator incorrectly encoded during\n  folding\n- CVE-2026-0672: reject control characters in http cookies\n- CVE-2025-15282: reject control characters in data URL mediatypes\n- CVE-2026-3644: reject control characters in http.cookies.Morsel.update(), |=,\n  unpickling, and js_output()\n- CVE-2026-4224: avoid unbound C recursion in conv_content_model in pyexpat.c\n- CVE-2025-11468: preserve parens when folding email comments to prevent header\n  injection","status":"published","published":"2026-04-16T09:10:08Z","modified":"2026-10-21T10:46:32.697091307Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1778129970","title":"python3.11: Fix of 7 CVEs","description":"- CVE-2026-0672: reject control characters in http.cookies cookie names, values, and parameters to prevent header injection\n- CVE-2026-3644: reject control characters in Morsel.update(), |= operator, and unpickling paths missed by CVE-2026-0672; add output validation to BaseCookie.js_output()\n- CVE-2026-2297: ensure SourcelessFileLoader uses io.open_code so sys.audit handlers fire for legacy .pyc imports\n- CVE-2025-8291: validate ZIP64 End of Central Directory locator offset to prevent ZIP archive parser confusion\n- CVE-2025-6069: fix quadratic complexity in html.parser.HTMLParser when processing crafted malformed inputs\n- CVE-2025-4516: fix use-after-free in unicode-escape decoder when an error handler is invoked\n- CVE-2025-1795: stop incorrectly RFC 2047 encoding the comma separator when an address list is folded","status":"published","published":"2026-05-07T04:59:39Z","modified":"2026-10-21T10:45:55.420367696Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1779213441","title":"python3.11: Fix of 11 CVEs","description":"- CVE-2026-4224: avoid unbound C recursion in conv_content_model in pyexpat\n- CVE-2026-3644: reject control characters in http.cookies.Morsel.update()\n- CVE-2026-0672: reject control characters in http.cookies.Morsel\n- CVE-2025-8291: check consistency of zip64 end of central directory record\n- CVE-2025-6069: fix quadratic complexity in processing special input in HTMLParser\n- CVE-2025-4516: fix use-after-free in the unicode-escape decoder with error handler\n- CVE-2025-15282: reject control characters in data URL mediatypes\n- CVE-2025-11468: preserve parenthesis when folding email comments\n- CVE-2026-3479: reject invalid resource arguments in pkgutil.get_data()\n- CVE-2026-2297: ensure SourcelessFileLoader uses io.open_code\n- CVE-2024-5642: disallow setting an empty list for ssl NPN protocols","status":"published","published":"2026-05-19T17:57:25Z","modified":"2026-10-21T10:47:00.495001696Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1779886202","title":"python3.9: Fix of 4 CVEs","description":"- CVE-2026-0672: reject control characters in http.cookies.Morsel keys/values\n- CVE-2026-3644: extend control-character rejection to Morsel.update(), |=, and __setstate__\n- CVE-2026-4224: avoid unbound C recursion in pyexpat conv_content_model for deeply nested DTDs\n- CVE-2026-1502: reject CR/LF in HTTP tunnel request headers and tunnel host","status":"published","published":"2026-05-27T14:06:00Z","modified":"2026-10-26T09:43:50.839805392Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1781173352","title":"Fix CVE(s): CVE-2025-13462, CVE-2026-0672, CVE-2026-3644, CVE-2026-4224","description":"   * SECURITY UPDATE: C stack overflow (DoS) in pyexpat when parsing deeply\n     nested DTD content models\n     - debian/patches/CVE-2026-4224.patch: guard conv_content_model() in\n       Modules/pyexpat.c with Py_EnterRecursiveCall/Py_LeaveRecursiveCall to\n       bound recursion when a registered ElementDeclHandler converts a deeply\n       nested content model.\n     - CVE-2026-4224\n   * SECURITY UPDATE: HTTP header injection via control characters in cookies\n     - debian/patches/CVE-2026-0672.patch: add _has_control_character() and\n       reject control characters in Morsel.__setitem__()/setdefault()/set()\n       and BaseCookie.output() in Lib/http/cookies.py.\n     - CVE-2026-0672\n   * SECURITY UPDATE: incomplete fix for CVE-2026-0672 (control characters in\n     cookies via additional Morsel paths)\n     - debian/patches/CVE-2026-3644.patch: reject control characters in\n       Morsel.update(), Morsel.__setstate__() and Morsel.js_output() in\n       Lib/http/cookies.py.\n     - CVE-2026-3644\n   * SECURITY UPDATE: tarfile member type confusion (regular file parsed as\n     directory) via GNU long name/link headers\n     - debian/patches/CVE-2025-13462.patch: skip the AREGTYPE-\u003eDIRTYPE\n       normalization while reading GNU LONGNAME/LONGLINK and PAX follow-up\n       headers (dircheck=False) in Lib/tarfile.py.\n     - CVE-2025-13462","status":"published","published":"2026-06-11T10:26:46Z","modified":"2026-10-26T09:32:00.767515318Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781174666","title":"Fix CVE(s): CVE-2025-13462, CVE-2026-0672, CVE-2026-3644, CVE-2026-4224","description":"   * SECURITY UPDATE: C stack overflow (DoS) in pyexpat when parsing deeply\n     nested DTD content models\n     - debian/patches/CVE-2026-4224.patch: guard conv_content_model() in\n       Modules/pyexpat.c with Py_EnterRecursiveCall/Py_LeaveRecursiveCall to\n       bound recursion when a registered ElementDeclHandler converts a deeply\n       nested content model.\n     - CVE-2026-4224\n   * SECURITY UPDATE: HTTP header injection via control characters in cookies\n     - debian/patches/CVE-2026-0672.patch: add _has_control_character() and\n       reject control characters in Morsel.__setitem__()/setdefault()/set()\n       and BaseCookie.output() in Lib/http/cookies.py.\n     - CVE-2026-0672\n   * SECURITY UPDATE: incomplete fix for CVE-2026-0672 (control characters in\n     cookies via additional Morsel paths)\n     - debian/patches/CVE-2026-3644.patch: reject control characters in\n       Morsel.update(), Morsel.__setstate__() and Morsel.js_output() in\n       Lib/http/cookies.py.\n     - CVE-2026-3644\n   * SECURITY UPDATE: tarfile member type confusion (regular file parsed as\n     directory) via GNU long name/link headers\n     - debian/patches/CVE-2025-13462.patch: skip the AREGTYPE-\u003eDIRTYPE\n       normalization while reading GNU LONGNAME/LONGLINK and PAX follow-up\n       headers (dircheck=False) in Lib/tarfile.py.\n     - CVE-2025-13462","status":"published","published":"2026-06-11T10:47:05Z","modified":"2026-10-26T09:32:03.516182037Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781176375","title":"Fix CVE(s): CVE-2025-13462, CVE-2026-0672, CVE-2026-3644, CVE-2026-4224","description":"   * SECURITY UPDATE: C stack overflow (DoS) in pyexpat when parsing deeply\n     nested DTD content models\n     - debian/patches/CVE-2026-4224.patch: guard conv_content_model() in\n       Modules/pyexpat.c with Py_EnterRecursiveCall/Py_LeaveRecursiveCall to\n       bound recursion when a registered ElementDeclHandler converts a deeply\n       nested content model.\n     - CVE-2026-4224\n   * SECURITY UPDATE: HTTP header injection via control characters in cookies\n     - debian/patches/CVE-2026-0672.patch: reject control characters in\n       Morsel.__setitem__()/set(), add a validating Morsel.setdefault()\n       override, and guard BaseCookie.output() in Lib/Cookie.py.\n     - CVE-2026-0672\n   * SECURITY UPDATE: incomplete fix for CVE-2026-0672 (control characters in\n     cookies via additional Morsel paths)\n     - debian/patches/CVE-2026-3644.patch: add a validating Morsel.update()\n       override and reject control characters in Morsel.js_output() in\n       Lib/Cookie.py.\n     - CVE-2026-3644\n   * SECURITY UPDATE: tarfile member type confusion (regular file parsed as\n     directory) via GNU long name/link headers\n     - debian/patches/CVE-2025-13462.patch: skip the AREGTYPE-\u003eDIRTYPE\n       normalization while reading GNU LONGNAME/LONGLINK and PAX follow-up\n       headers (dircheck=False) in Lib/tarfile.py.\n     - CVE-2025-13462","status":"published","published":"2026-06-11T11:15:35Z","modified":"2026-10-26T09:32:03.579381079Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781259901","title":"Fix CVE(s): CVE-2025-13462, CVE-2026-3644, CVE-2026-4224, CVE-2026-7210","description":"   * SECURITY UPDATE: tarfile AREGTYPE-\u003eDIRTYPE misnormalization of multi-block member headers\n     - debian/patches/CVE-2025-13462.patch: in Lib/tarfile.py, add a dircheck flag to\n       frombuf()/fromtarfile() and read the follow-up header of GNU long-name and PAX\n       multi-block members with dircheck=False in _proc_gnulong()/_proc_pax(), so the old-V7\n       \"AREGTYPE name ending in / is a directory\" normalization is no longer applied to a\n       follow-up header based on its truncated name. Prevents a crafted tar archive from being\n       interpreted differently by tarfile than by other tools. Backport of upstream commit\n       42d754e34c (gh-141707), the same fix shipped by Debian in DLA-4583-1; applies to 3.7.3\n       without code changes (the affected functions are structurally identical). Bundles the\n       upstream regression test test_longname_file_not_directory (test_tarfile.py).\n     - CVE-2025-13462\n   * SECURITY UPDATE: C stack overflow in pyexpat via deeply nested DTD content model\n     - debian/patches/CVE-2026-4224.patch: guard the recursion in Modules/pyexpat.c\n       conv_content_model() with Py_EnterRecursiveCall()/Py_LeaveRecursiveCall() so a deeply\n       nested inline DTD content model parsed by an Expat parser with a registered\n       ElementDeclHandler raises RecursionError instead of crashing the interpreter. Adapted\n       from upstream commit eb0e8be3a7 (gh-145986); upstream uses the private\n       _Py_EnterRecursiveCall() API, replaced here with the equivalent public 3.7 macros. The\n       upstream regression test is not bundled (it needs 3.7-absent test.support helpers and a\n       500000-deep model); the fix was verified manually.\n     - CVE-2026-4224\n   * SECURITY UPDATE: control-character injection in http.cookies (HTTP response splitting)\n     - debian/patches/CVE-2026-3644.patch: reject control characters (\\x00-\\x1F, \\x7F) in\n       Lib/http/cookies.py across all Morsel/BaseCookie paths via a new _has_control_character()\n       helper. CVE-2026-3644 is the incomplete-fix follow-up to CVE-2026-0672 and its upstream\n       fix (commit 57e88c1cf9, gh-145599) depends on the helper introduced by the CVE-2026-0672\n       base commit (95746b3a13, gh-143919). 3.7.3 shipped neither fix, so this patch bundles both:\n       the base validation in Morsel.__setitem__/setdefault/set and BaseCookie.output, plus the\n       follow-up validation in Morsel.update/__setstate__ and BaseCookie.js_output.\n       Also closes CVE-2026-0672. The upstream Morsel.__ior__ override is omitted: it only exists\n       to neutralize dict.__ior__ (PEP 584, Python 3.9+), which 3.7 does not have, so there is no\n       |= bypass to close. The module docstring doctest and the test_basic keebler fixture in\n       test_http_cookies.py are updated to drop a \\012 control character now rejected by load(),\n       and the upstream regression tests test_control_characters/test_control_characters_output\n       are bundled with the test.support.control_characters_c0() helper they require.\n     - CVE-2026-3644","status":"published","published":"2026-06-12T10:27:16Z","modified":"2026-10-26T09:43:11.8300495Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781342809","title":"Fix CVE(s): CVE-2025-13462, CVE-2026-0672, CVE-2026-3644, CVE-2026-4224","description":"   * SECURITY UPDATE: C stack overflow (DoS) in pyexpat when parsing deeply\n     nested DTD content models\n     - debian/patches/CVE-2026-4224.patch: guard conv_content_model() in\n       Modules/pyexpat.c with Py_EnterRecursiveCall/Py_LeaveRecursiveCall to\n       bound recursion when a registered ElementDeclHandler converts a deeply\n       nested content model.\n     - CVE-2026-4224\n   * SECURITY UPDATE: HTTP header injection via control characters in cookies\n     - debian/patches/CVE-2026-0672.patch: reject control characters in\n       Morsel.__setitem__()/set(), add a validating Morsel.setdefault()\n       override, and guard BaseCookie.output() in Lib/Cookie.py.\n     - CVE-2026-0672\n   * SECURITY UPDATE: incomplete fix for CVE-2026-0672 (control characters in\n     cookies via additional Morsel paths)\n     - debian/patches/CVE-2026-3644.patch: add a validating Morsel.update()\n       override and reject control characters in Morsel.js_output() in\n       Lib/Cookie.py.\n     - CVE-2026-3644\n   * SECURITY UPDATE: tarfile member type confusion (regular file parsed as\n     directory) via GNU long name/link headers\n     - debian/patches/CVE-2025-13462.patch: skip the AREGTYPE-\u003eDIRTYPE\n       normalization while reading GNU LONGNAME/LONGLINK and PAX follow-up\n       headers (dircheck=False) in Lib/tarfile.py.\n     - CVE-2025-13462","status":"published","published":"2026-06-13T09:27:31Z","modified":"2026-10-26T09:32:00.775591021Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781525675","title":"python3: Fix of 12 CVEs","description":"- CVE-2026-0672: reject control characters in http.cookies.Morsel fields and values\n- CVE-2026-3644: complete CVE-2026-0672 fix: reject control chars in Morsel.update(), |=, unpickling and js_output()\n- CVE-2026-4224: avoid unbound C recursion in pyexpat conv_content_model to prevent C stack overflow\n- CVE-2025-13462: skip TarInfo AREGTYPE-\u003eDIRTYPE normalization on GNU longname/longlink follow-up headers in tarfile","status":"published","published":"2026-06-25T08:49:21Z","modified":"2026-10-26T09:43:51.157178016Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781527577","title":"python3: Fix of 12 CVEs","description":"- CVE-2026-0672: reject control characters in http.cookies.Morsel fields and values\n- CVE-2026-3644: complete CVE-2026-0672 fix: reject control chars in Morsel.update(), |=, unpickling and js_output()\n- CVE-2026-4224: avoid unbound C recursion in pyexpat conv_content_model to prevent C stack overflow\n- CVE-2025-13462: skip TarInfo AREGTYPE-\u003eDIRTYPE normalization on GNU longname/longlink follow-up headers in tarfile","status":"published","published":"2026-06-25T08:45:23Z","modified":"2026-10-26T09:43:16.737388143Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781528783","title":"python3: Fix of 2 CVEs","description":"- CVE-2026-0672: reject control characters in http.cookies.Morsel fields and values\n- CVE-2026-3644: complete CVE-2026-0672 fix: reject control chars in Morsel.update(), |=, unpickling and js_output()\n- CVE-2026-4224: avoid unbound C recursion in pyexpat conv_content_model to prevent C stack overflow\n- CVE-2025-13462: skip TarInfo AREGTYPE-\u003eDIRTYPE normalization on GNU longname/longlink follow-up headers in tarfile","status":"published","published":"2026-06-15T20:44:57Z","modified":"2026-10-26T09:43:18.136186789Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781620276","title":"Fix CVE(s): CVE-2026-0672, CVE-2026-3644, CVE-2026-4224","description":"   * SECURITY UPDATE: Control characters not rejected in Cookie module (HTTP header injection)\n     - debian/patches/CVE-2026-0672.patch: add _has_control_character() helper and\n       reject control characters in Morsel.__setitem__(), Morsel.set() and\n       BaseCookie.output() in Lib/Cookie.py, plus regression tests in\n       Lib/test/test_cookie.py\n     - CVE-2026-0672\n   * SECURITY UPDATE: Incomplete rejection of control characters in Cookie module\n     - debian/patches/CVE-2026-3644.patch: add control character validation to\n       Morsel.update() and Morsel.js_output() in Lib/Cookie.py\n     - CVE-2026-3644\n   * SECURITY UPDATE: C stack overflow via deeply nested inline DTD content model in pyexpat\n     - debian/patches/CVE-2026-4224.patch: add Py_EnterRecursiveCall/Py_LeaveRecursiveCall\n       guards to conv_content_model() in Modules/pyexpat.c to prevent unbounded C recursion\n       when ElementDeclHandler is registered\n     - CVE-2026-4224","status":"published","published":"2026-06-16T14:31:34Z","modified":"2026-10-26T09:32:05.227518273Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1782139078","title":"python3: Fix of 3 CVEs","description":"- CVE-2026-0672: reject control characters in http.cookies Morsel keys,\n  values, and parameters (and in BaseCookie.output) to prevent HTTP header\n  injection via user-controlled cookie data\n- CVE-2026-3644: follow-up to CVE-2026-0672, rejecting control characters\n  in the http.cookies.Morsel paths the original fix missed (update(), the\n  |= operator, and unpickling) and validating Morsel.js_output() output\n- CVE-2026-4224: guard conv_content_model() in pyexpat against unbounded C\n  recursion when an ElementDeclHandler parses a deeply nested inline DTD\n  content model, raising RecursionError instead of crashing the interpreter","status":"published","published":"2026-06-22T14:38:15Z","modified":"2026-10-26T09:31:45.064173116Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1782159334","title":"python3: Fix of 3 CVEs","description":"- CVE-2026-0672: reject control characters in http.cookies Morsel keys,\n  values, and parameters (and in BaseCookie.output) to prevent HTTP header\n  injection via user-controlled cookie data\n- CVE-2026-3644: follow-up to CVE-2026-0672, rejecting control characters\n  in the http.cookies.Morsel paths the original fix missed (update(), the\n  |= operator, and unpickling) and validating Morsel.js_output() output\n- CVE-2026-4224: guard conv_content_model() in pyexpat against unbounded C\n  recursion when an ElementDeclHandler parses a deeply nested inline DTD\n  content model, raising RecursionError instead of crashing the interpreter","status":"published","published":"2026-06-24T09:18:00Z","modified":"2026-10-26T09:31:49.612747075Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1782490405","title":"python3: Fix of 3 CVEs","description":"- CVE-2026-0672: reject control characters in http.cookies Morsel keys,\n  values, and parameters (and in BaseCookie.output) to prevent HTTP header\n  injection via user-controlled cookie data\n- CVE-2026-3644: follow-up to CVE-2026-0672, rejecting control characters\n  in the http.cookies.Morsel paths the original fix missed (update(), the\n  |= operator, and unpickling) and validating Morsel.js_output() output\n- CVE-2026-4224: guard conv_content_model() in pyexpat against unbounded C\n  recursion when an ElementDeclHandler parses a deeply nested inline DTD\n  content model, raising RecursionError instead of crashing the interpreter","status":"published","published":"2026-06-26T16:13:43Z","modified":"2026-10-26T09:31:37.596567031Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1783703079","title":"python: Fix of 3 CVEs","description":"- CVE-2026-0672: reject control characters in the Cookie module - add the\n  _has_control_character() helper and validate in Morsel.__setitem__,\n  Morsel.setdefault(), Morsel.set() and BaseCookie.output(). Applied as the\n  prerequisite for CVE-2026-3644; Python 2.7.5 shipped neither fix.\n- CVE-2026-3644: reject control characters in Morsel.update(), the unpickling\n  path (Morsel.__setstate__) and Morsel.js_output().\n- CVE-2026-4224: guard conv_content_model() in pyexpat with\n  Py_EnterRecursiveCall()/Py_LeaveRecursiveCall() to avoid a C stack overflow\n  when parsing a deeply nested content model in an inline DTD with a registered\n  ElementDeclHandler.\n- CVE-2025-13462: skip the old-v7 AREGTYPE -\u003e DIRTYPE normalization in tarfile\n  when reading a follow-up header (GNU long name/link or PAX extended header),\n  so crafted multi-block members are no longer misinterpreted.","status":"published","published":"2026-07-10T17:05:13Z","modified":"2026-10-26T09:43:31.219100761Z","updated_at":"2026-11-02T15:43:46.151924Z"},{"id":"CLSA-2026-1783705997","title":"python: Fix of 3 CVEs","description":"- CVE-2026-0672: reject control characters in the Cookie module - add the\n  _has_control_character() helper and validate in Morsel.__setitem__,\n  Morsel.setdefault(), Morsel.set() and BaseCookie.output(). Applied as the\n  prerequisite for CVE-2026-3644; Python 2.7.5 shipped neither fix.\n- CVE-2026-3644: reject control characters in Morsel.update(), the unpickling\n  path (Morsel.__setstate__) and Morsel.js_output().\n- CVE-2026-4224: guard conv_content_model() in pyexpat with\n  Py_EnterRecursiveCall()/Py_LeaveRecursiveCall() to avoid a C stack overflow\n  when parsing a deeply nested content model in an inline DTD with a registered\n  ElementDeclHandler.\n- CVE-2025-13462: skip the old-v7 AREGTYPE -\u003e DIRTYPE normalization in tarfile\n  when reading a follow-up header (GNU long name/link or PAX extended header),\n  so crafted multi-block members are no longer misinterpreted.","status":"published","published":"2026-07-11T16:58:40Z","modified":"2026-10-26T09:43:16.66087455Z","updated_at":"2026-11-02T15:43:46.151924Z"},{"id":"DLA-4455-1","title":"python3.9 - security update","status":"published","published":"2026-01-25T00:00:00Z","modified":"2026-01-25T23:30:02.954647Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2026-0455","title":"Updated python3 \u0026 python-pip package fixes security vulnerabilities","description":"Please see the references for additional information about\nvulnerabilities.\n","status":"published","published":"2026-09-26T15:57:25Z","modified":"2026-09-26T16:12:22.700215778Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:10126-1","title":"python315-3.15.0~a3-3.1 on GA media","description":"These are all security issues fixed in the python315-3.15.0~a3-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-01-30T00:00:00Z","modified":"2026-03-23T04:54:29.562999Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"openSUSE-SU-2026:10200-1","title":"python310-3.10.19-4.1 on GA media","description":"These are all security issues fixed in the python310-3.10.19-4.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-02-13T00:00:00Z","modified":"2026-03-23T04:54:34.136877Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"openSUSE-SU-2026:10206-1","title":"python314-3.14.3-1.1 on GA media","description":"These are all security issues fixed in the python314-3.14.3-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-02-14T00:00:00Z","modified":"2026-03-23T04:54:34.187146Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"openSUSE-SU-2026:10221-1","title":"python311-3.11.14-4.1 on GA media","description":"These are all security issues fixed in the python311-3.11.14-4.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-02-18T00:00:00Z","modified":"2026-03-23T04:54:35.386125Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"openSUSE-SU-2026:10222-1","title":"python312-3.12.12-5.1 on GA media","description":"These are all security issues fixed in the python312-3.12.12-5.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-02-18T00:00:00Z","modified":"2026-03-23T04:54:35.274315Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"openSUSE-SU-2026:10223-1","title":"python313-3.13.12-1.1 on GA media","description":"These are all security issues fixed in the python313-3.13.12-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-02-18T00:00:00Z","modified":"2026-03-23T04:54:35.131241Z","updated_at":"2026-11-02T16:58:38.101535Z"}]},"sources_more":{"osv":26}}