{"id":"CVE-2026-1502","aliases":["ALPINE-CVE-2026-1502","ALSA-2026:10950","ALSA-2026:19019","ALSA-2026:19064","ALSA-2026:19176","ALSA-2026:19177","AZL-82899","BELL-CVE-2026-1502","BIT-libpython-2026-1502","BIT-python-2026-1502","BIT-python-min-2026-1502","CLSA-2026-1779748834","CLSA-2026-1779788314","CLSA-2026-1779875599","CLSA-2026-1779886202","DEBIAN-CVE-2026-1502","EUVD-2026-21519","GHSA-hjxq-7w9q-2jw6","MGASA-2026-0455","OESA-2026-2115","OESA-2026-2116","OESA-2026-2117","PSF-2026-15","RHSA-2026:10117","RHSA-2026:10950","RHSA-2026:19019","RHSA-2026:19064","RHSA-2026:19176","RHSA-2026:19177","RHSA-2026:8822","RHSA-2026:8824","RHSA-2026:9228","RLSA-2026:10950","RLSA-2026:19019","RLSA-2026:19064","RLSA-2026:19176","RLSA-2026:19177","ROOT-OS-DEBIAN-11-CVE-2026-1502","ROOT-OS-DEBIAN-12-CVE-2026-1502","ROOT-OS-DEBIAN-13-CVE-2026-1502","SUSE-SU-2026:1715-1","SUSE-SU-2026:1818-1","SUSE-SU-2026:1937-1","SUSE-SU-2026:1947-1","SUSE-SU-2026:2055-1","SUSE-SU-2026:22959-1","SUSE-SU-2026:23191-1","SUSE-SU-2026:23212-1","SUSE-SU-2026:23743-1","SUSE-SU-2026:2464-1","SUSE-SU-2026:3104-1","SUSE-SU-2026:3132-1","SUSE-SU-2026:3855-1","SUSE-SU-2026:4534-1","SUSE-SU-2026:4580-1","SUSE-SU-2026:4581-1","SUSE-SU-2026:4582-1","SUSE-SU-2026:4583-1","SUSE-SU-2026:4584-1","SUSE-SU-2026:4585-1","UBUNTU-CVE-2026-1502","USN-8509-1","openSUSE-SU-2026:10647-1","openSUSE-SU-2026:10648-1","openSUSE-SU-2026:10667-1","openSUSE-SU-2026:11068-1","openSUSE-SU-2026:11100-1","openSUSE-SU-2026:11181-1","openSUSE-SU-2026:21459-1"],"status":"published","title":"HTTP client proxy tunnel headers not validated for CR/LF","description":"CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.","severity":{"version":"4.0","score":5.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00535,"percentile":0.45389,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-93"],"published":"2026-04-10T17:54:44Z","modified":"2026-11-04T02:47:31Z","fixes":[{"ecosystem":"Alpine:v3.21","package":"python3","fixed_in":["3.12.14-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"python3","fixed_in":["3.12.14-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"python3","fixed_in":["3.12.14-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"python3","fixed_in":["3.12.9-11"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"python3","fixed_in":["3.11.16-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"python3","fixed_in":["3.12.14-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"python3","fixed_in":["3.14.5-r1"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"python3","fixed_in":["3.11.16-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"python3","fixed_in":["3.12.14-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"python3","fixed_in":["3.14.5-r1"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"libpython","fixed_in":["3.10.21","3.11.16","3.12.14","3.13.14","3.14.5"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"python","fixed_in":["3.10.21","3.11.16","3.12.14","3.13.14","3.14.5"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"python-min","fixed_in":["3.10.21","3.11.16","3.12.14","3.13.14","3.14.5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python-unversioned-command","fixed_in":["3.9.16-1.el9_2.2.tuxcare.els25"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3","fixed_in":["3.9.16-1.el9_2.2.tuxcare.els25"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-debug","fixed_in":["3.9.16-1.el9_2.2.tuxcare.els25"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-devel","fixed_in":["3.9.16-1.el9_2.2.tuxcare.els25"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-idle","fixed_in":["3.9.16-1.el9_2.2.tuxcare.els25"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-libs","fixed_in":["3.9.16-1.el9_2.2.tuxcare.els25"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-test","fixed_in":["3.9.16-1.el9_2.2.tuxcare.els25"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-tkinter","fixed_in":["3.9.16-1.el9_2.2.tuxcare.els25"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11","fixed_in":["3.11.11-2.el9_6.2.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11-debug","fixed_in":["3.11.11-2.el9_6.2.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11-devel","fixed_in":["3.11.11-2.el9_6.2.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11-idle","fixed_in":["3.11.11-2.el9_6.2.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11-libs","fixed_in":["3.11.11-2.el9_6.2.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11-test","fixed_in":["3.11.11-2.el9_6.2.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11-tkinter","fixed_in":["3.11.11-2.el9_6.2.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11","fixed_in":["3.11.2-2.el9_2.2.tuxcare.els25"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-debug","fixed_in":["3.11.2-2.el9_2.2.tuxcare.els25"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-devel","fixed_in":["3.11.2-2.el9_2.2.tuxcare.els25"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-idle","fixed_in":["3.11.2-2.el9_2.2.tuxcare.els25"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-libs","fixed_in":["3.11.2-2.el9_2.2.tuxcare.els25"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-test","fixed_in":["3.11.2-2.el9_2.2.tuxcare.els25"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-tkinter","fixed_in":["3.11.2-2.el9_2.2.tuxcare.els25"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"pypy3","fixed_in":["7.3.22+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"python3.11","fixed_in":["3.11.2-6+deb12u9"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"python3.13","fixed_in":["3.13.5-2+deb13u3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"python3.14","fixed_in":["3.14.5-1"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"python3.9","fixed_in":["3.9.2-1+deb11u7.aikido.18","3.9.2-1+deb11u7.aikido.19","3.9.2-1+deb11u7.aikido.20","3.9.2-1+deb11u7.aikido.17","3.9.2-1+deb11u7.root.io.15","3.9.2-1+deb11u7.root.io.16","3.9.2-1+deb11u7.aikido.21","3.9.2-1+deb11u7.aikido.22"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"rootio-python3.9","fixed_in":["3.9.2-1+deb11u7.aikido.18","3.9.2-1+deb11u7.aikido.19","3.9.2-1+deb11u7.aikido.20","3.9.2-1+deb11u7.aikido.17","3.9.2-1+deb11u7.root.io.15","3.9.2-1+deb11u7.root.io.16","3.9.2-1+deb11u7.aikido.21","3.9.2-1+deb11u7.aikido.22"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"python3.10","fixed_in":["3.10.12-1~22.04.16"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"python3.12","fixed_in":["3.12.3-1ubuntu0.15"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"python3.14","fixed_in":["3.14.4-1ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.21","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.14-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.14-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.14-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3.12-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3.12-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3.12-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3.12-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3.12-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3.12-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3.12-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python3.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.4-2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python3.14-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.4-2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python3.14-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.4-2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python3.14-freethreading","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.4-2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python3.14-freethreading-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.4-2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python3.14-freethreading-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.4-2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python3.14-freethreading-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.4-2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python3.14-freethreading-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.4-2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python3.14-freethreading-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.4-2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python3.14-freethreading-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.4-2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python3.14-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.4-2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python3.14-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.4-2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python3.14-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.4-2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python3.14-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.4-2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python-unversioned-command","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python3-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.4-2.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3.14-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.4-2.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3.14-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.4-2.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3.14-freethreading","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.4-2.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3.14-freethreading-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.4-2.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3.14-freethreading-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.4-2.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3.14-freethreading-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.4-2.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3.14-freethreading-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.4-2.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3.14-freethreading-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.4-2.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3.14-freethreading-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.4-2.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3.14-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.4-2.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3.14-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.4-2.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3.14-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.4-2.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3.14-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.4-2.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3.12-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3.12-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3.12-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3.12-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3.12-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3.12-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"Azure Linux:3","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.9-11"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.11.3-r0"},{"fixed":"3.11.16-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.12.10-r1"},{"fixed":"3.12.14-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.11.4-r0"},{"fixed":"3.14.5-r1"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.11.3-r0"},{"fixed":"3.11.16-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.12.10-r1"},{"fixed":"3.12.14-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.11.4-r0"},{"fixed":"3.14.5-r1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"libpython","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.10.21"},{"introduced":"3.11.0"},{"fixed":"3.11.16"},{"introduced":"3.12.0"},{"fixed":"3.12.14"},{"introduced":"3.13.0"},{"fixed":"3.13.14"},{"introduced":"3.14.0"},{"fixed":"3.14.5"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"python","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.10.21"},{"introduced":"3.11.0"},{"fixed":"3.11.16"},{"introduced":"3.12.0"},{"fixed":"3.12.14"},{"introduced":"3.13.0"},{"fixed":"3.13.14"},{"introduced":"3.14.0"},{"fixed":"3.14.5"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"python-min","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.10.21"},{"introduced":"3.11.0"},{"fixed":"3.11.16"},{"introduced":"3.12.0"},{"fixed":"3.12.14"},{"introduced":"3.13.0"},{"fixed":"3.13.14"},{"introduced":"3.14.0"},{"fixed":"3.14.5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python-unversioned-command","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els25"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els25"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els25"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els25"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els25"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els25"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els25"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els25"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.11-2.el9_6.2.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.11-2.el9_6.2.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.11-2.el9_6.2.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.11-2.el9_6.2.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.11-2.el9_6.2.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.11-2.el9_6.2.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.11-2.el9_6.2.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-2.el9_2.2.tuxcare.els25"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-2.el9_2.2.tuxcare.els25"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-2.el9_2.2.tuxcare.els25"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-2.el9_2.2.tuxcare.els25"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-2.el9_2.2.tuxcare.els25"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-2.el9_2.2.tuxcare.els25"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-2.el9_2.2.tuxcare.els25"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python-unversioned-command","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.21-2.el9_6.2.tuxcare.els9"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.21-2.el9_6.2.tuxcare.els9"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.21-2.el9_6.2.tuxcare.els9"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.21-2.el9_6.2.tuxcare.els9"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.21-2.el9_6.2.tuxcare.els9"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.21-2.el9_6.2.tuxcare.els9"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.21-2.el9_6.2.tuxcare.els9"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.21-2.el9_6.2.tuxcare.els9"}]}],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"pypy3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.3.11+dfsg-2","7.3.11+dfsg-2+deb12u1","7.3.11+dfsg-2+deb12u2","7.3.11+dfsg-2+deb12u3","7.3.12+dfsg-1","7.3.12~rc1+dfsg-1","7.3.12~rc2+dfsg-1","7.3.13+dfsg-1","7.3.14+dfsg-1","7.3.15+dfsg-1","7.3.16+dfsg-1","7.3.16+dfsg-2","7.3.17+dfsg-1","7.3.17+dfsg-2","7.3.17+dfsg-3","7.3.18+dfsg-1","7.3.18+dfsg-2","7.3.19+dfsg-1","7.3.19+dfsg-2","7.3.20+dfsg-1","7.3.20+dfsg-2","7.3.20+dfsg-3","7.3.20+dfsg-4","7.3.21+dfsg-1","7.3.21+dfsg-2","7.3.21+dfsg-3","7.3.21+dfsg-4","7.3.22+dfsg-1","7.3.23+dfsg-1","7.3.23+dfsg-2","8.0.0+dfsg-1","8.0.1+dfsg-1"]},{"source":"osv","ecosystem":"Debian:13","package":"pypy3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.3.19+dfsg-2","7.3.20+dfsg-1","7.3.20+dfsg-2","7.3.20+dfsg-3","7.3.20+dfsg-4","7.3.21+dfsg-1","7.3.21+dfsg-2","7.3.21+dfsg-3","7.3.21+dfsg-4","7.3.22+dfsg-1","7.3.23+dfsg-1","7.3.23+dfsg-2","8.0.0+dfsg-1","8.0.1+dfsg-1"]},{"source":"osv","ecosystem":"Debian:14","package":"pypy3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.22+dfsg-1"}]}],"versions":["7.3.19+dfsg-2","7.3.20+dfsg-1","7.3.20+dfsg-2","7.3.20+dfsg-3","7.3.20+dfsg-4","7.3.21+dfsg-1","7.3.21+dfsg-2","7.3.21+dfsg-3","7.3.21+dfsg-4"]},{"source":"osv","ecosystem":"Debian:12","package":"python3.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-6+deb12u9"}]}],"versions":["3.11.2-6","3.11.2-6+deb12u1","3.11.2-6+deb12u2","3.11.2-6+deb12u3","3.11.2-6+deb12u4","3.11.2-6+deb12u5","3.11.2-6+deb12u6","3.11.2-6+deb12u7","3.11.2-6+deb12u8"]},{"source":"osv","ecosystem":"Debian:13","package":"python3.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.5-2+deb13u3"}]}],"versions":["3.13.5-2","3.13.5-2+deb13u1","3.13.5-2+deb13u2"]},{"source":"osv","ecosystem":"Debian:14","package":"python3.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.5-1"}]}],"versions":["3.14.0-1","3.14.0-2","3.14.0-3","3.14.0-4","3.14.0-5","3.14.0~a7-1","3.14.0~b1-1","3.14.0~b2-1","3.14.0~b3-1","3.14.0~b4-1","3.14.0~rc1-1","3.14.0~rc2-1","3.14.0~rc3-1","3.14.2-1","3.14.3-1","3.14.3-2","3.14.3-3","3.14.3-4","3.14.3-5","3.14.4-1","3.14.4-2","3.14.5~rc1-1"]},{"source":"osv","ecosystem":"Mageia:10","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.15-1.mga10"}]}],"bundled":17},{"source":"osv","ecosystem":"Mageia:10","package":"python-pip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.2.1-1.mga10"}]}],"bundled":17},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.6-28.oe2403sp1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.6-28.oe2403sp3"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.6-25.oe2403"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.13-1.1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.13-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.13-1.1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.13-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.13-1.1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.13-freethreading","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.13-1.1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.13-freethreading-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.13-1.1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.13-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.13-1.1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.13-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.13-1.1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.13-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.13-1.1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.13-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.13-1.1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3.12-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3.12-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3.12-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3.12-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3.12-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3.12-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"python3.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"python3.12-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"python3.12-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"python3.12-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"python3.12-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"python3.12-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"python3.12-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3.14-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3.14-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3.14-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3.14-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3.14-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3.14-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3.14-freethreading","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3.14-freethreading-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3.14-freethreading-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3.14-freethreading-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3.14-freethreading-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3.14-freethreading-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3.14-freethreading-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3.14-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3.14-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python-unversioned-command","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3.12-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3.12-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3.14-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3.14-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3.14-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3.14-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3.14-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"python3.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"python3.14-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"python3.14-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"python3.14-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"python3.14-freethreading","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"python3.14-freethreading-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"python3.14-freethreading-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"python3.14-freethreading-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"python3.14-freethreading-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"python3.14-freethreading-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"python3.14-freethreading-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"python3.14-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"python3.14-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"python3.14-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3.12-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3.12-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3.12-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3.12-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3.12-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"python3.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"python3.12-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"python3.12-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"python3.12-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"python3.12-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"python3.12-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"python3.12-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.15-4.hum1"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.11-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.15-4.hum1"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.15-4.hum1"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.11-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.15-4.hum1"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.11-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.15-4.hum1"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.11-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.15-4.hum1"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.11-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.15-4.hum1"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-3.hum1"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.12-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-3.hum1"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.12-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-3.hum1"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.12-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-3.hum1"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.12-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-3.hum1"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.12-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-3.hum1"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.12-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-3.hum1"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python-unversioned-command","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.14-freethreading","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.14-freethreading-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.14-freethreading-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.14-freethreading-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.14-freethreading-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.14-freethreading-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.14-freethreading-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python3.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el8_10"}]}],"bundled":11},{"source":"osv","ecosystem":"Rocky Linux:10","package":"python3.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:10","package":"python3.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:9","package":"python3.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-2.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:9","package":"python3.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-2.el9_8"}]}],"bundled":12},{"source":"osv","ecosystem":"Root:Debian:11","package":"python3.9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.2-1+deb11u7.aikido.18"},{"fixed":"3.9.2-1+deb11u7.aikido.19"},{"fixed":"3.9.2-1+deb11u7.aikido.20"},{"fixed":"3.9.2-1+deb11u7.aikido.17"},{"fixed":"3.9.2-1+deb11u7.root.io.15"},{"fixed":"3.9.2-1+deb11u7.root.io.16"},{"fixed":"3.9.2-1+deb11u7.aikido.21"},{"fixed":"3.9.2-1+deb11u7.aikido.22"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"rootio-python3.9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.2-1+deb11u7.aikido.18"},{"fixed":"3.9.2-1+deb11u7.aikido.19"},{"fixed":"3.9.2-1+deb11u7.aikido.20"},{"fixed":"3.9.2-1+deb11u7.aikido.17"},{"fixed":"3.9.2-1+deb11u7.root.io.15"},{"fixed":"3.9.2-1+deb11u7.root.io.16"},{"fixed":"3.9.2-1+deb11u7.aikido.21"},{"fixed":"3.9.2-1+deb11u7.aikido.22"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.14-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"python313","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.14-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"python313-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.14-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-slfo.1.1_5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-slfo.1.1_5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-slfo.1.1_1.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-slfo.1.1_1.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP7","package":"python313","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.13-150700.4.50.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP7","package":"python313-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.13-150700.4.50.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150600.3.59.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP7","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150600.3.59.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP7","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150600.3.59.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150600.3.59.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150600.3.59.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150600.3.59.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150600.3.59.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.91.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.91.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.91.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.91.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.91.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.91.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.91.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.91.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.91.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.91.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.91.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.91.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.91.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.91.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.91.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.91.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.91.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.91.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.91.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.91.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.91.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.91.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.91.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.91.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.91.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.91.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"python36","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-116.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"python36-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-116.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"python36","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-116.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"python36-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-116.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"python312","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.14-150600.3.68.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"python312-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.14-150600.3.68.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"python312","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.14-150600.3.68.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"python312-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.14-150600.3.68.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-100002.1.9.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-cffi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.1-100002.1.6.2"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-100002.1.9.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-100002.1.6.2"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-cssselect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-100002.1.6.2"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-editables","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5-100002.1.6.2"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-exceptiongroup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-100002.1.6.2"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-exceptiongroup-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-100002.1.6.2"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-flit-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.0-100002.1.6.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-hatch-fancy-pypi-readme","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1.0-100002.1.6.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-hatch-fancy-pypi-readme-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1.0-100002.1.6.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-hatch-vcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-100002.1.6.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-hatch-vcs-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-100002.1.6.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-hatchling","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.31.0-100002.1.6.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-idna","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10-100002.1.6.2"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-iniconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-100002.1.6.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-iniconfig-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-100002.1.6.2"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.6-100002.1.6.2"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-lxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.1-100002.1.9.2"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.2-100002.1.6.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.1-100002.1.6.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pyasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.3-100002.1.6.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pyasn1-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.2-100002.1.6.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pyopenssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.2.0-100002.1.9.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pyparsing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.9-100002.1.6.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34.2-100002.1.9.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.2-100002.1.9.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-urllib3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.7-100002.1.9.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-websocket-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-100002.1.6.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerTools:Update","package":"scap-security-guide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.80-100002.1.6.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerTools:Update","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.10-100002.1.9.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerTools:Update","package":"uyuni-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.17-100002.1.9.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerTools:Update","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-100002.1.13.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools EL-10","package":"scap-security-guide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.80-100002.1.6.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools EL-10","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.10-100002.1.9.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools EL-10","package":"uyuni-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.17-100002.1.9.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools EL-10","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-100002.1.13.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-80002.4.15.4"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-cffi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.1-80002.3.6.5"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-80002.4.15.4"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-80002.3.6.5"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-cssselect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-80002.3.6.5"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-editables","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5-80002.3.3.5"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-exceptiongroup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-80002.3.3.5"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-exceptiongroup-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-80002.3.3.5"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-flit-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.0-80002.3.3.4"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-hatch-fancy-pypi-readme","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1.0-80002.3.3.3"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-hatch-fancy-pypi-readme-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1.0-80002.3.3.3"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-hatch-vcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-80002.3.3.3"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-hatch-vcs-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-80002.3.3.3"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-hatchling","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.31.0-80002.3.3.3"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-idna","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10-80002.3.6.5"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-iniconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-80002.3.3.3"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-iniconfig-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-80002.3.3.5"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.6-80002.5.3.5"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-lxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.1-80002.3.9.5"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.2-80002.3.3.3"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.1-80002.3.3.3"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pyasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.3-80002.3.6.3"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pyasn1-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.2-80002.3.6.3"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pyopenssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.2.0-80002.3.9.3"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pyparsing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.9-80002.3.6.3"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34.2-80002.4.6.3"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.2-80002.4.12.3"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-urllib3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.7-80002.3.6.3"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-websocket-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-80002.3.6.3"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"scap-security-guide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.80-80002.3.12.4"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.10-80002.3.15.3"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"uyuni-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.17-80002.3.15.3"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-80002.5.22.3"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools EL-8","package":"scap-security-guide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.80-80002.3.12.4"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools EL-8","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.10-80002.3.15.3"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools EL-8","package":"uyuni-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.17-80002.3.15.3"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools EL-8","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-80002.5.22.3"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-90002.4.15.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-cffi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.1-90002.3.6.2"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-90002.4.15.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-90002.3.6.2"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-cssselect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-90002.3.6.2"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-editables","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5-90002.3.3.2"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-exceptiongroup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-90002.3.3.2"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-exceptiongroup-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-90002.3.3.2"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-flit-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.0-90002.3.3.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-hatch-fancy-pypi-readme","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1.0-90002.3.3.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-hatch-fancy-pypi-readme-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1.0-90002.3.3.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-hatch-vcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-90002.3.3.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-hatch-vcs-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-90002.3.3.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-hatchling","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.31.0-90002.3.3.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-idna","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10-90002.3.6.2"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-iniconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-90002.3.3.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-iniconfig-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-90002.3.3.2"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.6-90002.5.3.2"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-lxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.1-90002.3.9.2"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.2-90002.3.3.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.1-90002.3.3.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pyasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.3-90002.3.6.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pyasn1-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.2-90002.3.6.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pyopenssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.2.0-90002.3.9.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pyparsing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.9-90002.3.6.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34.2-90002.4.6.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.2-90002.4.12.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-urllib3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.7-90002.3.6.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-websocket-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-90002.3.6.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"scap-security-guide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.80-90002.3.12.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.10-90002.3.15.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"uyuni-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.17-90002.3.15.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-90002.5.22.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools EL-9","package":"scap-security-guide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.80-90002.3.12.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools EL-9","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.10-90002.3.15.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools EL-9","package":"uyuni-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.17-90002.3.15.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools EL-9","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-90002.5.22.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"mgr-push","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.5-70002.3.12.2"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-70002.4.15.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-cffi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.1-70002.3.6.2"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-70002.4.15.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-70002.3.6.2"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-cssselect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-70002.3.6.2"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-editables","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5-70002.3.3.2"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-exceptiongroup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-70002.3.3.2"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-exceptiongroup-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-70002.3.3.2"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-flit-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.0-70002.3.3.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-hatch-fancy-pypi-readme","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1.0-70002.3.3.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-hatch-fancy-pypi-readme-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1.0-70002.3.3.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-hatch-vcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-70002.3.3.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-hatch-vcs-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-70002.3.3.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-hatchling","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.31.0-70002.3.3.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-idna","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10-70002.3.6.2"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-iniconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-70002.3.3.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-iniconfig-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-70002.3.3.2"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.6-70002.5.3.2"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-lxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.1-70002.3.9.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.2-70002.3.3.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.1-70002.3.3.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pyasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.3-70002.3.6.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pyasn1-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.2-70002.3.6.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pyopenssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.2.0-70002.3.9.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pyparsing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.9-70002.3.6.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34.2-70002.4.6.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.2-70002.4.12.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-urllib3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.7-70002.3.6.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-websocket-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-70002.3.6.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.10-70002.3.15.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.7-70002.3.12.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-70002.5.22.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools RES-7","package":"mgr-push","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.5-70002.3.12.2"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools RES-7","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.10-70002.3.15.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools RES-7","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.7-70002.3.12.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools RES-7","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-70002.5.22.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools SLE-12","package":"mgr-push","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.5-120002.3.12.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools SLE-12","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.10-120002.3.15.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools SLE-12","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.7-120002.3.12.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools SLE-12","package":"uyuni-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.17-120002.3.18.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools SLE-12","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-120002.5.22.2"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools SLE-15","package":"golang-github-prometheus-prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.2-150002.3.19.1"}]}],"bundled":58},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools SLE-15","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.4.10-150002.4.27.1"}]}],"bundled":58},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools SLE-15","package":"mgr-push","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.5-150002.3.12.1"}]}],"bundled":58},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools SLE-15","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.10-150002.3.15.1"}]}],"bundled":58},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools SLE-15","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.7-150002.3.12.1"}]}],"bundled":58},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools SLE-15","package":"uyuni-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.17-150002.3.20.1"}]}],"bundled":58},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools SLE-15","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150002.5.22.1"}]}],"bundled":58},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools SLE-Micro-5","package":"uyuni-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.17-150002.3.20.1"}]}],"bundled":58},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools SLE-Micro-5","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150002.5.22.1"}]}],"bundled":58},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.7.5-8ubuntu3","2.7.5-8ubuntu4","2.7.6-2","2.7.6-2ubuntu1","2.7.6-3","2.7.6-3ubuntu1","2.7.6-4","2.7.6-4ubuntu1","2.7.6-5","2.7.6-7","2.7.6-8","2.7.6-8ubuntu0.2","2.7.6-8ubuntu0.3","2.7.6-8ubuntu0.4","2.7.6-8ubuntu0.5","2.7.6-8ubuntu0.6+esm2","2.7.6-8ubuntu0.6+esm3","2.7.6-8ubuntu0.6+esm5","2.7.6-8ubuntu0.6+esm6","2.7.6-8ubuntu0.6+esm7","2.7.6-8ubuntu0.6+esm8","2.7.6-8ubuntu0.6+esm9","2.7.6-8ubuntu0.6+esm10","2.7.6-8ubuntu0.6+esm11","2.7.6-8ubuntu0.6+esm12","2.7.6-8ubuntu0.6+esm13","2.7.6-8ubuntu0.6+esm14","2.7.6-8ubuntu0.6+esm15","2.7.6-8ubuntu0.6+esm16","2.7.6-8ubuntu0.6+esm17","2.7.6-8ubuntu0.6+esm18","2.7.6-8ubuntu0.6+esm20","2.7.6-8ubuntu0.6+esm21","2.7.6-8ubuntu0.6+esm22","2.7.6-8ubuntu0.6+esm24","2.7.6-8ubuntu0.6+esm25","2.7.6-8ubuntu0.6+esm26","2.7.6-8ubuntu0.6+esm28","2.7.6-8ubuntu0.6+esm29","2.7.6-8ubuntu0.6+esm30"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"python3.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.4~b1-0ubuntu3","3.4~b1-4ubuntu4","3.4~b1-4ubuntu6","3.4~b1-5ubuntu2","3.4~b2-1","3.4~b3-1ubuntu1","3.4~rc1-1build1","3.4~rc2-1","3.4~rc3-0ubuntu1","3.4.0-1","3.4.0-2ubuntu1","3.4.0-2ubuntu1.1","3.4.3-1ubuntu1~14.04.1","3.4.3-1ubuntu1~14.04.3","3.4.3-1ubuntu1~14.04.4","3.4.3-1ubuntu1~14.04.5","3.4.3-1ubuntu1~14.04.6","3.4.3-1ubuntu1~14.04.7","3.4.3-1ubuntu1~14.04.7+esm2","3.4.3-1ubuntu1~14.04.7+esm4","3.4.3-1ubuntu1~14.04.7+esm6","3.4.3-1ubuntu1~14.04.7+esm7","3.4.3-1ubuntu1~14.04.7+esm8","3.4.3-1ubuntu1~14.04.7+esm10","3.4.3-1ubuntu1~14.04.7+esm11","3.4.3-1ubuntu1~14.04.7+esm12","3.4.3-1ubuntu1~14.04.7+esm13","3.4.3-1ubuntu1~14.04.7+esm14","3.4.3-1ubuntu1~14.04.7+esm15","3.4.3-1ubuntu1~14.04.7+esm16","3.4.3-1ubuntu1~14.04.7+esm17","3.4.3-1ubuntu1~14.04.7+esm19","3.4.3-1ubuntu1~14.04.7+esm20","3.4.3-1ubuntu1~14.04.7+esm21"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"python3.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.5.2-2ubuntu0~16.04.4~14.04.1","3.5.2-2ubuntu0~16.04.4~14.04.1+esm1","3.5.2-2ubuntu0~16.04.4~14.04.1+esm3","3.5.2-2ubuntu0~16.04.4~14.04.1+esm4","3.5.2-2ubuntu0~16.04.4~14.04.1+esm5","3.5.2-2ubuntu0~16.04.4~14.04.1+esm6","3.5.2-2ubuntu0~16.04.4~14.04.1+esm7","3.5.2-2ubuntu0~16.04.4~14.04.1+esm8","3.5.2-2ubuntu0~16.04.4~14.04.1+esm9","3.5.2-2ubuntu0~16.04.4~14.04.1+esm10","3.5.2-2ubuntu0~16.04.4~14.04.1+esm11"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.7.10-4ubuntu1","2.7.10-4ubuntu2","2.7.11-2","2.7.11-3","2.7.11-4","2.7.11-6","2.7.11-7","2.7.11-7ubuntu1","2.7.12-1~16.04","2.7.12-1ubuntu0~16.04.1","2.7.12-1ubuntu0~16.04.2","2.7.12-1ubuntu0~16.04.3","2.7.12-1ubuntu0~16.04.4","2.7.12-1ubuntu0~16.04.8","2.7.12-1ubuntu0~16.04.9","2.7.12-1ubuntu0~16.04.11","2.7.12-1ubuntu0~16.04.12","2.7.12-1ubuntu0~16.04.13","2.7.12-1ubuntu0~16.04.14","2.7.12-1ubuntu0~16.04.16","2.7.12-1ubuntu0~16.04.18","2.7.12-1ubuntu0~16.04.18+esm1","2.7.12-1ubuntu0~16.04.18+esm2","2.7.12-1ubuntu0~16.04.18+esm3","2.7.12-1ubuntu0~16.04.18+esm4","2.7.12-1ubuntu0~16.04.18+esm5","2.7.12-1ubuntu0~16.04.18+esm6","2.7.12-1ubuntu0~16.04.18+esm7","2.7.12-1ubuntu0~16.04.18+esm8","2.7.12-1ubuntu0~16.04.18+esm9","2.7.12-1ubuntu0~16.04.18+esm10","2.7.12-1ubuntu0~16.04.18+esm11","2.7.12-1ubuntu0~16.04.18+esm12","2.7.12-1ubuntu0~16.04.18+esm13","2.7.12-1ubuntu0~16.04.18+esm15","2.7.12-1ubuntu0~16.04.18+esm16","2.7.12-1ubuntu0~16.04.18+esm17","2.7.12-1ubuntu0~16.04.18+esm18","2.7.12-1ubuntu0~16.04.18+esm19","2.7.12-1ubuntu0~16.04.18+esm20","2.7.12-1ubuntu0~16.04.18+esm21","2.7.12-1ubuntu0~16.04.18+esm22"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"python3.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.5.0-3","3.5.0-3ubuntu1","3.5.1~rc1-2ubuntu1","3.5.1-1","3.5.1-2","3.5.1-3","3.5.1-5","3.5.1-6ubuntu1","3.5.1-6ubuntu2","3.5.1-9ubuntu1","3.5.1-10","3.5.2-2~16.01","3.5.2-2~16.04","3.5.2-2ubuntu0~16.04.1","3.5.2-2ubuntu0~16.04.2","3.5.2-2ubuntu0~16.04.3","3.5.2-2ubuntu0~16.04.4","3.5.2-2ubuntu0~16.04.5","3.5.2-2ubuntu0~16.04.8","3.5.2-2ubuntu0~16.04.9","3.5.2-2ubuntu0~16.04.10","3.5.2-2ubuntu0~16.04.11","3.5.2-2ubuntu0~16.04.12","3.5.2-2ubuntu0~16.04.13","3.5.2-2ubuntu0~16.04.13+esm1","3.5.2-2ubuntu0~16.04.13+esm2","3.5.2-2ubuntu0~16.04.13+esm3","3.5.2-2ubuntu0~16.04.13+esm5","3.5.2-2ubuntu0~16.04.13+esm6","3.5.2-2ubuntu0~16.04.13+esm7","3.5.2-2ubuntu0~16.04.13+esm8","3.5.2-2ubuntu0~16.04.13+esm9","3.5.2-2ubuntu0~16.04.13+esm10","3.5.2-2ubuntu0~16.04.13+esm11","3.5.2-2ubuntu0~16.04.13+esm12","3.5.2-2ubuntu0~16.04.13+esm13","3.5.2-2ubuntu0~16.04.13+esm14","3.5.2-2ubuntu0~16.04.13+esm15","3.5.2-2ubuntu0~16.04.13+esm16","3.5.2-2ubuntu0~16.04.13+esm17","3.5.2-2ubuntu0~16.04.13+esm18","3.5.2-2ubuntu0~16.04.13+esm19","3.5.2-2ubuntu0~16.04.13+esm20","3.5.2-2ubuntu0~16.04.13+esm21","3.5.2-2ubuntu0~16.04.13+esm22","3.5.2-2ubuntu0~16.04.13+esm23","3.5.2-2ubuntu0~16.04.13+esm24","3.5.2-2ubuntu0~16.04.13+esm25"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"jython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.5.3-6","2.5.3-7","2.5.3-8","2.5.3-9","2.5.3-9ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.7.14-2ubuntu2","2.7.14-4","2.7.14-6","2.7.14-7","2.7.14-8","2.7.15~rc1-1","2.7.15~rc1-1ubuntu0.1","2.7.15-4ubuntu4~18.04","2.7.15-4ubuntu4~18.04.1","2.7.15-4ubuntu4~18.04.2","2.7.17-1~18.04","2.7.17-1~18.04ubuntu1","2.7.17-1~18.04ubuntu1.1","2.7.17-1~18.04ubuntu1.2","2.7.17-1~18.04ubuntu1.3","2.7.17-1~18.04ubuntu1.5","2.7.17-1~18.04ubuntu1.6","2.7.17-1~18.04ubuntu1.7","2.7.17-1~18.04ubuntu1.8","2.7.17-1~18.04ubuntu1.10","2.7.17-1~18.04ubuntu1.11","2.7.17-1~18.04ubuntu1.13","2.7.17-1~18.04ubuntu1.13+esm1","2.7.17-1~18.04ubuntu1.13+esm2","2.7.17-1~18.04ubuntu1.13+esm3","2.7.17-1~18.04ubuntu1.13+esm4","2.7.17-1~18.04ubuntu1.13+esm5","2.7.17-1~18.04ubuntu1.13+esm6","2.7.17-1~18.04ubuntu1.13+esm7","2.7.17-1~18.04ubuntu1.13+esm8","2.7.17-1~18.04ubuntu1.13+esm10","2.7.17-1~18.04ubuntu1.13+esm11","2.7.17-1~18.04ubuntu1.13+esm12","2.7.17-1~18.04ubuntu1.13+esm13","2.7.17-1~18.04ubuntu1.13+esm14","2.7.17-1~18.04ubuntu1.13+esm15"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python3.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6.3-1ubuntu1","3.6.4~rc1-1","3.6.4~rc1-2","3.6.4-1","3.6.4-2","3.6.4-3build1","3.6.4-4","3.6.5~rc1-1","3.6.5-3","3.6.6-1~18.04","3.6.7-1~18.04","3.6.8-1~18.04.1","3.6.8-1~18.04.2","3.6.8-1~18.04.3","3.6.9-1~18.04","3.6.9-1~18.04ubuntu1","3.6.9-1~18.04ubuntu1.1","3.6.9-1~18.04ubuntu1.3","3.6.9-1~18.04ubuntu1.4","3.6.9-1~18.04ubuntu1.6","3.6.9-1~18.04ubuntu1.7","3.6.9-1~18.04ubuntu1.8","3.6.9-1~18.04ubuntu1.9","3.6.9-1~18.04ubuntu1.10","3.6.9-1~18.04ubuntu1.12","3.6.9-1~18.04ubuntu1.13","3.6.9-1~18.04ubuntu1.13+esm1","3.6.9-1~18.04ubuntu1.13+esm2","3.6.9-1~18.04ubuntu1.13+esm3","3.6.9-1~18.04ubuntu1.13+esm4","3.6.9-1~18.04ubuntu1.13+esm5","3.6.9-1~18.04ubuntu1.13+esm6","3.6.9-1~18.04ubuntu1.13+esm7","3.6.9-1~18.04ubuntu1.13+esm8","3.6.9-1~18.04ubuntu1.13+esm9","3.6.9-1~18.04ubuntu1.13+esm10"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"jython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.7.1+repack-2","2.7.1+repack-3","2.7.1+repack-5~18.04"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python3.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.7.0~a2-1","3.7.0~a3-1","3.7.0~a3-2","3.7.0~a3-3","3.7.0~a4-1","3.7.0~b1-1","3.7.0~b1-1build1","3.7.0~b2-1","3.7.0~b3-1","3.7.0-1~18.04","3.7.1-1~18.04","3.7.3-2~18.04.1","3.7.5-2~18.04","3.7.5-2~18.04.4","3.7.5-2ubuntu1~18.04.2","3.7.5-2ubuntu1~18.04.2+esm1","3.7.5-2ubuntu1~18.04.2+esm2","3.7.5-2ubuntu1~18.04.2+esm3","3.7.5-2ubuntu1~18.04.2+esm4","3.7.5-2ubuntu1~18.04.2+esm5","3.7.5-2ubuntu1~18.04.2+esm6","3.7.5-2ubuntu1~18.04.2+esm7","3.7.5-2ubuntu1~18.04.2+esm8","3.7.5-2ubuntu1~18.04.2+esm9","3.7.5-2ubuntu1~18.04.2+esm10","3.7.5-2ubuntu1~18.04.2+esm11"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python3.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.8.0-3~18.04","3.8.0-3~18.04.1","3.8.0-3ubuntu1~18.04.2","3.8.0-3ubuntu1~18.04.2+esm1","3.8.0-3ubuntu1~18.04.2+esm2","3.8.0-3ubuntu1~18.04.2+esm3","3.8.0-3ubuntu1~18.04.2+esm4","3.8.0-3ubuntu1~18.04.2+esm5","3.8.0-3ubuntu1~18.04.2+esm6","3.8.0-3ubuntu1~18.04.2+esm7","3.8.0-3ubuntu1~18.04.2+esm8","3.8.0-3ubuntu1~18.04.2+esm9","3.8.0-3ubuntu1~18.04.2+esm10","3.8.0-3ubuntu1~18.04.2+esm11"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"python3.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.8.0-1","3.8.0-2","3.8.0-3","3.8.0-4","3.8.0-5","3.8.1-2ubuntu3","3.8.2~rc1-1ubuntu1","3.8.2-1","3.8.2-1ubuntu1","3.8.2-1ubuntu1.1","3.8.2-1ubuntu1.2","3.8.5-1~20.04","3.8.5-1~20.04.2","3.8.5-1~20.04.3","3.8.10-0ubuntu1~20.04","3.8.10-0ubuntu1~20.04.1","3.8.10-0ubuntu1~20.04.2","3.8.10-0ubuntu1~20.04.4","3.8.10-0ubuntu1~20.04.5","3.8.10-0ubuntu1~20.04.6","3.8.10-0ubuntu1~20.04.7","3.8.10-0ubuntu1~20.04.8","3.8.10-0ubuntu1~20.04.9","3.8.10-0ubuntu1~20.04.10","3.8.10-0ubuntu1~20.04.11","3.8.10-0ubuntu1~20.04.12","3.8.10-0ubuntu1~20.04.13","3.8.10-0ubuntu1~20.04.14","3.8.10-0ubuntu1~20.04.15","3.8.10-0ubuntu1~20.04.16","3.8.10-0ubuntu1~20.04.17","3.8.10-0ubuntu1~20.04.18","3.8.10-0ubuntu1~20.04.18+esm1","3.8.10-0ubuntu1~20.04.18+esm2","3.8.10-0ubuntu1~20.04.18+esm3","3.8.10-0ubuntu1~20.04.18+esm4","3.8.10-0ubuntu1~20.04.18+esm5","3.8.10-0ubuntu1~20.04.18+esm6","3.8.10-0ubuntu1~20.04.18+esm7"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"jython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.7.1+repack1-4build1","2.7.1+repack1-4build2","2.7.2~b2+repack1-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"pypy3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.1.1+dfsg-1","7.2.0+dfsg-1","7.3.0+dfsg-1","7.3.0+dfsg-1ubuntu2","7.3.0+dfsg-1ubuntu3","7.3.1+dfsg-4","7.3.1+dfsg-4ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.7.17~rc1-1","2.7.17-1","2.7.17-1ubuntu5","2.7.17-1ubuntu6","2.7.18~rc1-2","2.7.18-1~20.04","2.7.18-1~20.04.1","2.7.18-1~20.04.1+esm1","2.7.18-1~20.04.3","2.7.18-1~20.04.3+esm1","2.7.18-1~20.04.4","2.7.18-1~20.04.4+esm1","2.7.18-1~20.04.4+esm2","2.7.18-1~20.04.4+esm3","2.7.18-1~20.04.5","2.7.18-1~20.04.5+esm1","2.7.18-1~20.04.5+esm2","2.7.18-1~20.04.6","2.7.18-1~20.04.6+esm1","2.7.18-1~20.04.7","2.7.18-1~20.04.7+esm3","2.7.18-1~20.04.7+esm4","2.7.18-1~20.04.7+esm6","2.7.18-1~20.04.7+esm7","2.7.18-1~20.04.7+esm8","2.7.18-1~20.04.7+esm9","2.7.18-1~20.04.7+esm10"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"python3.9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.9.0~rc1-1~20.04","3.9.0-5~20.04","3.9.5-3~20.04.1","3.9.5-3ubuntu0~20.04.1","3.9.5-3ubuntu0~20.04.1+esm1","3.9.5-3ubuntu0~20.04.1+esm2","3.9.5-3ubuntu0~20.04.1+esm3","3.9.5-3ubuntu0~20.04.1+esm4","3.9.5-3ubuntu0~20.04.1+esm5","3.9.5-3ubuntu0~20.04.1+esm6","3.9.5-3ubuntu0~20.04.1+esm7","3.9.5-3ubuntu0~20.04.1+esm8","3.9.5-3ubuntu0~20.04.1+esm9","3.9.5-3ubuntu0~20.04.1+esm10","3.9.5-3ubuntu0~20.04.1+esm11"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"jython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.7.2+repack1-3","2.7.2+repack1-4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"pypy3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.3.5+dfsg-2","7.3.7+dfsg-1","7.3.7+dfsg-4","7.3.7+dfsg-5","7.3.8+dfsg-2","7.3.9+dfsg-1","7.3.9+dfsg-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"python3.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.12-1~22.04.16"}]}],"versions":["3.10.0-2","3.10.0-3","3.10.0-4","3.10.0-5","3.10.0-5build1","3.10.1-1","3.10.1-2","3.10.2-1","3.10.2-5","3.10.2-7","3.10.3-1","3.10.4-3","3.10.4-3ubuntu0.1","3.10.6-1~22.04","3.10.6-1~22.04.1","3.10.6-1~22.04.2","3.10.6-1~22.04.2ubuntu1","3.10.6-1~22.04.2ubuntu1.1","3.10.12-1~22.04.2","3.10.12-1~22.04.3","3.10.12-1~22.04.4","3.10.12-1~22.04.5","3.10.12-1~22.04.6","3.10.12-1~22.04.7","3.10.12-1~22.04.8","3.10.12-1~22.04.9","3.10.12-1~22.04.10","3.10.12-1~22.04.11","3.10.12-1~22.04.12","3.10.12-1~22.04.13","3.10.12-1~22.04.14","3.10.12-1~22.04.15"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.7.18-8build1","2.7.18-13","2.7.18-13ubuntu1","2.7.18-13ubuntu1.1","2.7.18-13ubuntu1.1+esm2","2.7.18-13ubuntu1.2","2.7.18-13ubuntu1.2+esm1","2.7.18-13ubuntu1.2+esm2","2.7.18-13ubuntu1.2+esm3","2.7.18-13ubuntu1.3","2.7.18-13ubuntu1.3+esm1","2.7.18-13ubuntu1.4","2.7.18-13ubuntu1.4+esm1","2.7.18-13ubuntu1.5","2.7.18-13ubuntu1.5+esm2","2.7.18-13ubuntu1.5+esm3","2.7.18-13ubuntu1.5+esm5","2.7.18-13ubuntu1.5+esm6","2.7.18-13ubuntu1.5+esm7","2.7.18-13ubuntu1.5+esm8","2.7.18-13ubuntu1.5+esm9"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"python3.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.11.0~rc1-1~22.04","3.11.0~rc1-1~22.04.1~esm1","3.11.0~rc1-1~22.04.1~esm2","3.11.0~rc1-1~22.04.1~esm3","3.11.0~rc1-1~22.04.1~esm4","3.11.0~rc1-1~22.04.1~esm5","3.11.0~rc1-1~22.04.1~esm6","3.11.0~rc1-1~22.04.1~esm7","3.11.0~rc1-1~22.04.1~esm8","3.11.0~rc1-1~22.04.1~esm9","3.11.0~rc1-1~22.04.1","3.11.0~rc1-1~22.04.1+esm1","3.11.0~rc1-1~22.04.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"jython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.7.3+repack1-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"pypy3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.3.12+dfsg-1","7.3.13+dfsg-1","7.3.14+dfsg-1","7.3.15+dfsg-1","7.3.15+dfsg-1build2","7.3.15+dfsg-1build3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"python3.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.3-1ubuntu0.15"}]}],"versions":["3.12.0-1","3.12.0-5","3.12.0-6","3.12.0-7","3.12.1-2","3.12.2-1","3.12.2-4build3","3.12.2-4build4","3.12.2-5ubuntu3","3.12.3-1","3.12.3-1ubuntu0.1","3.12.3-1ubuntu0.2","3.12.3-1ubuntu0.3","3.12.3-1ubuntu0.4","3.12.3-1ubuntu0.5","3.12.3-1ubuntu0.6","3.12.3-1ubuntu0.7","3.12.3-1ubuntu0.8","3.12.3-1ubuntu0.9","3.12.3-1ubuntu0.10","3.12.3-1ubuntu0.11","3.12.3-1ubuntu0.12","3.12.3-1ubuntu0.13"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"jython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.7.3+repack1-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"pypy3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.3.19+dfsg-1","7.3.19+dfsg-2","7.3.20+dfsg-1","7.3.20+dfsg-3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"python3.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.13.3-1","3.13.3-2","3.13.3-4","3.13.4-1","3.13.5-1","3.13.5-2","3.13.6-1","3.13.7-1","3.13.7-1ubuntu0.1","3.13.7-1ubuntu0.2","3.13.7-1ubuntu0.3","3.13.7-1ubuntu0.4"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"python3.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.14.0~a7-0ubuntu1","3.14.0~b1-1","3.14.0~b3-1","3.14.0~rc1-1","3.14.0~rc2-1","3.14.0~rc3-1","3.14.0-1","3.14.0-1ubuntu0.1","3.14.0-1ubuntu0.2","3.14.0-1ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"jython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.7.3+repack1-1build1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"pypy3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.3.20+dfsg-4","7.3.23+dfsg-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"jython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.7.3+repack1-1","2.7.3+repack1-1build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"pypy3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.3.20+dfsg-3","7.3.20+dfsg-4"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"python3.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.4-1ubuntu0.1"}]}],"versions":["3.14.0-1","3.14.0-2","3.14.0-4","3.14.2-1","3.14.3-1","3.14.3-2","3.14.3-3","3.14.3-5","3.14.4-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"python3.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.12-1~22.04.16"}]}],"versions":["3.10.0-2","3.10.0-3","3.10.0-4","3.10.0-5","3.10.0-5build1","3.10.1-1","3.10.1-2","3.10.2-1","3.10.2-5","3.10.2-7","3.10.3-1","3.10.4-3","3.10.4-3ubuntu0.1","3.10.6-1~22.04","3.10.6-1~22.04.1","3.10.6-1~22.04.2","3.10.6-1~22.04.2ubuntu1","3.10.6-1~22.04.2ubuntu1.1","3.10.12-1~22.04.2","3.10.12-1~22.04.3","3.10.12-1~22.04.4","3.10.12-1~22.04.5","3.10.12-1~22.04.6","3.10.12-1~22.04.7","3.10.12-1~22.04.8","3.10.12-1~22.04.9","3.10.12-1~22.04.10","3.10.12-1~22.04.11","3.10.12-1~22.04.12","3.10.12-1~22.04.13","3.10.12-1~22.04.14","3.10.12-1~22.04.15"],"bundled":18},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"python3.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.3-1ubuntu0.15"}]}],"versions":["3.12.0-1","3.12.0-5","3.12.0-6","3.12.0-7","3.12.1-2","3.12.2-1","3.12.2-4build3","3.12.2-4build4","3.12.2-5ubuntu3","3.12.3-1","3.12.3-1ubuntu0.1","3.12.3-1ubuntu0.2","3.12.3-1ubuntu0.3","3.12.3-1ubuntu0.4","3.12.3-1ubuntu0.5","3.12.3-1ubuntu0.6","3.12.3-1ubuntu0.7","3.12.3-1ubuntu0.8","3.12.3-1ubuntu0.9","3.12.3-1ubuntu0.10","3.12.3-1ubuntu0.11","3.12.3-1ubuntu0.12","3.12.3-1ubuntu0.13"],"bundled":18},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"python3.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.4-1ubuntu0.1"}]}],"versions":["3.14.0-1","3.14.0-2","3.14.0-4","3.14.2-1","3.14.3-1","3.14.3-2","3.14.3-3","3.14.3-5","3.14.4-1"],"bundled":18},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.20-6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python315","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15.0~a8-3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python313","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.13-2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-6.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python312","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-6.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python314","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.6-1.1"}]}],"bundled":12},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.14-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"python313","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.14-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"python313-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.14-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"python313-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.14-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"python313-nogil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.14-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"python313-nogil-nogil-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.14-160000.1.1"}]}],"bundled":6}],"products":[{"vendor":"python software foundation","product":"cpython"}],"references":[{"url":"https://github.com/python/cpython/pull/146212","tags":["patch","web","fix","article","report"]},{"url":"https://github.com/python/cpython/issues/146211","tags":["issue-tracking","web","report","article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/2IVPAEQWUJBCTQZEJEVTYCIKSMQPGRZ3/","tags":["vendor-advisory","web","advisory","article","report"]},{"url":"https://github.com/python/cpython/commit/05ed7ce7ae9e17c23a04085b2539fe6d6d3cef69","tags":["patch","web","fix","article"]},{"url":"https://github.com/python/cpython/commit/b1cf9016335cb637c5a425032e8274a224f4b2ed","tags":["patch","web","fix"]},{"url":"https://github.com/python/cpython/commit/9e071c9b28c17f347f81b388a003d4eeb3c7a8dd","tags":["patch","web","fix"]},{"url":"https://github.com/python/cpython/commit/c00c386faa579ad71196d33408644478488e43ec","tags":["patch","web","fix"]},{"url":"https://github.com/python/cpython/commit/56b7100b04e44ea27989242b176beb8f016b2c53","tags":["patch","web","fix"]},{"url":"https://github.com/python/cpython/commit/58703ec1bdd1eb075e8b01a0c427683ce594dd3e","tags":["patch","web","fix"]},{"url":"http://www.openwall.com/lists/oss-security/2026/04/11/4","tags":["web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-1502","tags":["web","advisory"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/2IVPAEQWUJBCTQZEJEVTYCIKSMQPGRZ3"},{"url":"https://github.com/advisories/GHSA-hjxq-7w9q-2jw6"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-1502","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:10950","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-13837","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-15282","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-59375","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-6075","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-0672","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-1502","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2297","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-3644","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-4224","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-4786","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6100","tags":["report"]},{"url":"https://bugzilla.redhat.com/2395108","tags":["report"]},{"url":"https://bugzilla.redhat.com/2408891","tags":["report"]},{"url":"https://bugzilla.redhat.com/2418084","tags":["report"]},{"url":"https://bugzilla.redhat.com/2431366","tags":["report"]},{"url":"https://bugzilla.redhat.com/2431374","tags":["report"]},{"url":"https://bugzilla.redhat.com/2444691","tags":["report"]},{"url":"https://bugzilla.redhat.com/2448168","tags":["report"]},{"url":"https://bugzilla.redhat.com/2448181","tags":["report"]},{"url":"https://bugzilla.redhat.com/2457409","tags":["report"]},{"url":"https://bugzilla.redhat.com/2457932","tags":["report"]},{"url":"https://bugzilla.redhat.com/2458049","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-10950.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19019","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-0865","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-4519","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-5713","tags":["report"]},{"url":"https://bugzilla.redhat.com/2431367","tags":["report"]},{"url":"https://bugzilla.redhat.com/2449649","tags":["report"]},{"url":"https://bugzilla.redhat.com/2458239","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-19019.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19064","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-19064.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19176","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-19176.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19177","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-19177.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-1502","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1779748834.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1779788314.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1779875599.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1779886202.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/1xxx/CVE-2026-1502.json","tags":["advisory"]},{"url":"https://github.com/python/cpython","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-1502","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0455.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35072","tags":["report"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2115","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4786","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6100","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2116","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2117","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:10117","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_10117.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2457409","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-1502","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2458049","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-4786","tags":["advisory"]},{"url":"https://github.com/python/cpython/issues/148169","tags":["article"]},{"url":"https://github.com/python/cpython/pull/148170","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/JQDUNJVB4AQNTJECSUKOBDU3XCJIPSE5/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2457932","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6100","tags":["advisory"]},{"url":"https://github.com/python/cpython/commit/6a5f79c8d7bbf22b083b240910c7a8781a59437d","tags":["article"]},{"url":"https://github.com/python/cpython/commit/8fc66aef6d7b3ae58f43f5c66f9366cc8cbbfcd2","tags":["article"]},{"url":"https://github.com/python/cpython/commit/c3cf71c3366fe49acb776a639405c0eea6169c20","tags":["article"]},{"url":"https://github.com/python/cpython/issues/148395","tags":["article"]},{"url":"https://github.com/python/cpython/pull/148396","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/HTWB2Z6KT5QQX4RYEZAFININDHNOSIF3/","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2395108","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2408891","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2418084","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2431366","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2431374","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2444691","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2448168","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2448181","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_10950.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-6075","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-6075","tags":["advisory"]},{"url":"https://github.com/python/cpython/issues/136065","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/IUP5QJ6D4KK6ULHOMPC7DPNKRYQTQNLA/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-13837","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13837","tags":["advisory"]},{"url":"https://github.com/python/cpython/issues/119342","tags":["article"]},{"url":"https://github.com/python/cpython/pull/119343","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-15282","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-15282","tags":["advisory"]},{"url":"https://github.com/python/cpython/issues/143925","tags":["article"]},{"url":"https://github.com/python/cpython/pull/143926","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/X66HL7SISGJT33J53OHXMZT4DFLMHVKF/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-59375","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-59375","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2025-59375","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2025-59375","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-0672","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0672","tags":["advisory"]},{"url":"https://github.com/python/cpython/issues/143919","tags":["article"]},{"url":"https://github.com/python/cpython/pull/143920","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2297","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2297","tags":["advisory"]},{"url":"https://github.com/python/cpython/commit/482d6f8bdba9da3725d272e8bb4a2d25fb6a603e","tags":["article"]},{"url":"https://github.com/python/cpython/commit/a51b1b512de1d56b3714b65628a2eae2b07e535e","tags":["article"]},{"url":"https://github.com/python/cpython/commit/e58e9802b9bec5cdbf48fc9bf1da5f4fda482e86","tags":["article"]},{"url":"https://github.com/python/cpython/issues/145506","tags":["article"]},{"url":"https://github.com/python/cpython/pull/145507","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-3644","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3644","tags":["advisory"]},{"url":"https://github.com/python/cpython/commit/57e88c1cf95e1481b94ae57abe1010469d47a6b4","tags":["article"]},{"url":"https://github.com/python/cpython/issues/145599","tags":["article"]},{"url":"https://github.com/python/cpython/pull/145600","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/H6CADMBCDRFGWCMOXWUIHFJNV43GABJ7/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-4224","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4224","tags":["advisory"]},{"url":"https://github.com/python/cpython/commit/196edfb06a7458377d4d0f4b3cd41724c1f3bd4a","tags":["article"]},{"url":"https://github.com/python/cpython/commit/e0a8a6da90597a924b300debe045cdb4628ee1f3","tags":["article"]},{"url":"https://github.com/python/cpython/commit/eb0e8be3a7e11b87d198a2c3af1ed0eccf532768","tags":["article"]},{"url":"https://github.com/python/cpython/issues/145986","tags":["article"]},{"url":"https://github.com/python/cpython/pull/145987","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/5M7CGUW3XBRY7II4DK43KF7NQQ3TPZ6R/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2431367","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2449649","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2458239","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19019.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-0865","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0865","tags":["advisory"]},{"url":"https://github.com/python/cpython/issues/143916","tags":["article"]},{"url":"https://github.com/python/cpython/pull/143917","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/BJ6QPHNSHJTS3A7CFV6IBMCAP2DWRVNT/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-4519","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4519","tags":["advisory"]},{"url":"https://github.com/python/cpython/issues/143930","tags":["article"]},{"url":"https://github.com/python/cpython/pull/143931","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/AY5NDSS433JK56Q7Q5IS7B37QFZVVOUS/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-5713","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5713","tags":["advisory"]},{"url":"https://github.com/python/cpython/issues/148178","tags":["article"]},{"url":"https://github.com/python/cpython/pull/148187","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/OG4RHARYSNIE22GGOMVMCRH76L5HKPLM/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19064.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19176.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19177.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8822","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-1299","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-13836","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11468","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-8291","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-12084","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-15366","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-15367","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_8822.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2402342","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-8291","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-8291","tags":["advisory"]},{"url":"https://github.com/python/cpython/commit/162997bb70e067668c039700141770687bc8f267","tags":["article"]},{"url":"https://github.com/python/cpython/commit/333d4a6f4967d3ace91492a39ededbcf3faa76a6","tags":["article"]},{"url":"https://github.com/python/cpython/issues/139700","tags":["article"]},{"url":"https://github.com/python/cpython/pull/139702","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/QECOPWMTH4VPPJAXAH2BGTA4XADOP62G/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2431375","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11468","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11468","tags":["advisory"]},{"url":"https://github.com/python/cpython/issues/143935","tags":["article"]},{"url":"https://github.com/python/cpython/pull/143936","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/FELSEOLBI2QR6YLG6Q7VYF7FWSGQTKLI/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2418655","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-12084","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-12084","tags":["advisory"]},{"url":"https://github.com/python/cpython/issues/142145","tags":["article"]},{"url":"https://github.com/python/cpython/pull/142146","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2418078","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-13836","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13836","tags":["advisory"]},{"url":"https://github.com/python/cpython/issues/119451","tags":["article"]},{"url":"https://github.com/python/cpython/pull/119454","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2431368","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-15366","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-15366","tags":["advisory"]},{"url":"https://github.com/python/cpython/issues/143921","tags":["article"]},{"url":"https://github.com/python/cpython/pull/143922","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/DD7C7JZJYTBXMDOWKCEIEBJLBRU64OMR/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2431373","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-15367","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-15367","tags":["advisory"]},{"url":"https://github.com/python/cpython/issues/143923","tags":["article"]},{"url":"https://github.com/python/cpython/pull/143924","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/CBFBOWVGGUJFSGITQCCBZS4GEYYZ7ZNE/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2432437","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-1299","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-1299","tags":["advisory"]},{"url":"https://cve.org/CVERecord?id=CVE-2024-6923","tags":["article"]},{"url":"https://github.com/python/cpython/commit/052e55e7d44718fe46cbba0ca995cb8fcc359413","tags":["article"]},{"url":"https://github.com/python/cpython/issues/144125","tags":["article"]},{"url":"https://github.com/python/cpython/pull/144126","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/6ZZULGALJTITEAGEXLDJE2C6FORDXPBT/","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8824","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_8824.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9228","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_9228.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:10950","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:19019","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:19064","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:19176","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:19177","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261715-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1259611","tags":["report"]},{"url":"https://bugzilla.suse.com/1259734","tags":["report"]},{"url":"https://bugzilla.suse.com/1259735","tags":["report"]},{"url":"https://bugzilla.suse.com/1259989","tags":["report"]},{"url":"https://bugzilla.suse.com/1260026","tags":["report"]},{"url":"https://bugzilla.suse.com/1261969","tags":["report"]},{"url":"https://bugzilla.suse.com/1261970","tags":["report"]},{"url":"https://bugzilla.suse.com/1262098","tags":["report"]},{"url":"https://bugzilla.suse.com/1262319","tags":["report"]},{"url":"https://bugzilla.suse.com/1262654","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3479","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6100","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261818-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1258364","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261937-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261947-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262055-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622959-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1211301","tags":["report"]},{"url":"https://bugzilla.suse.com/1263787","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-4189","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623191-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1263083","tags":["report"]},{"url":"https://bugzilla.suse.com/1264962","tags":["report"]},{"url":"https://bugzilla.suse.com/1265268","tags":["report"]},{"url":"https://bugzilla.suse.com/1267581","tags":["report"]},{"url":"https://bugzilla.suse.com/1267821","tags":["report"]},{"url":"https://bugzilla.suse.com/1268375","tags":["report"]},{"url":"https://bugzilla.suse.com/1268977","tags":["report"]},{"url":"https://bugzilla.suse.com/1269066","tags":["report"]},{"url":"https://bugzilla.suse.com/1269788","tags":["report"]},{"url":"https://bugzilla.suse.com/1269959","tags":["report"]},{"url":"https://bugzilla.suse.com/1271192","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-15308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3276","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8328","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623212-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623743-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1259240","tags":["report"]},{"url":"https://bugzilla.suse.com/1267974","tags":["report"]},{"url":"https://bugzilla.suse.com/1276223","tags":["report"]},{"url":"https://bugzilla.suse.com/1276226","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-15806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9669","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262464-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263104-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263132-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263855-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1257599","tags":["report"]},{"url":"https://bugzilla.suse.com/1262467","tags":["report"]},{"url":"https://bugzilla.suse.com/1263442","tags":["report"]},{"url":"https://bugzilla.suse.com/1263443","tags":["report"]},{"url":"https://bugzilla.suse.com/1266669","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3219","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8643","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264534-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1276227","tags":["report"]},{"url":"https://bugzilla.suse.com/1277111","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-15310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-19672","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264580-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1218722","tags":["report"]},{"url":"https://bugzilla.suse.com/1252286","tags":["report"]},{"url":"https://bugzilla.suse.com/1254400","tags":["report"]},{"url":"https://bugzilla.suse.com/1257151","tags":["report"]},{"url":"https://bugzilla.suse.com/1262429","tags":["report"]},{"url":"https://bugzilla.suse.com/1262492","tags":["report"]},{"url":"https://bugzilla.suse.com/1262803","tags":["report"]},{"url":"https://bugzilla.suse.com/1263254","tags":["report"]},{"url":"https://bugzilla.suse.com/1263822","tags":["report"]},{"url":"https://bugzilla.suse.com/1263823","tags":["report"]},{"url":"https://bugzilla.suse.com/1265267","tags":["report"]},{"url":"https://bugzilla.suse.com/1265413","tags":["report"]},{"url":"https://bugzilla.suse.com/1266481","tags":["report"]},{"url":"https://bugzilla.suse.com/1267261","tags":["report"]},{"url":"https://bugzilla.suse.com/1267980","tags":["report"]},{"url":"https://bugzilla.suse.com/1268325","tags":["report"]},{"url":"https://bugzilla.suse.com/1268395","tags":["report"]},{"url":"https://bugzilla.suse.com/1268396","tags":["report"]},{"url":"https://bugzilla.suse.com/1268397","tags":["report"]},{"url":"https://bugzilla.suse.com/1268649","tags":["report"]},{"url":"https://bugzilla.suse.com/1268755","tags":["report"]},{"url":"https://bugzilla.suse.com/1270033","tags":["report"]},{"url":"https://bugzilla.suse.com/1270285","tags":["report"]},{"url":"https://bugzilla.suse.com/1270398","tags":["report"]},{"url":"https://bugzilla.suse.com/1270399","tags":["report"]},{"url":"https://bugzilla.suse.com/1271428","tags":["report"]},{"url":"https://bugzilla.suse.com/1271613","tags":["report"]},{"url":"https://bugzilla.suse.com/1273094","tags":["report"]},{"url":"https://bugzilla.suse.com/1273144","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-22195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-13346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41066","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49853","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49854","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49855","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264581-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264582-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264583-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1230949","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264584-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264585-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1262187","tags":["report"]},{"url":"https://bugzilla.suse.com/1263330","tags":["report"]},{"url":"https://bugzilla.suse.com/1265525","tags":["report"]},{"url":"https://bugzilla.suse.com/1265763","tags":["report"]},{"url":"https://bugzilla.suse.com/1266608","tags":["report"]},{"url":"https://bugzilla.suse.com/1267528","tags":["report"]},{"url":"https://bugzilla.suse.com/1267534","tags":["report"]},{"url":"https://bugzilla.suse.com/1267538","tags":["report"]},{"url":"https://bugzilla.suse.com/1268868","tags":["report"]},{"url":"https://bugzilla.suse.com/1269841","tags":["report"]},{"url":"https://bugzilla.suse.com/1269856","tags":["report"]},{"url":"https://bugzilla.suse.com/1269966","tags":["report"]},{"url":"https://bugzilla.suse.com/1270711","tags":["report"]},{"url":"https://bugzilla.suse.com/1271330","tags":["report"]},{"url":"https://bugzilla.suse.com/1271557","tags":["report"]},{"url":"https://bugzilla.suse.com/1272008","tags":["report"]},{"url":"https://bugzilla.suse.com/1272102","tags":["report"]},{"url":"https://bugzilla.suse.com/1272328","tags":["report"]},{"url":"https://bugzilla.suse.com/1272427","tags":["report"]},{"url":"https://bugzilla.suse.com/1274217","tags":["report"]},{"url":"https://bugzilla.suse.com/1274221","tags":["report"]},{"url":"https://bugzilla.suse.com/1275205","tags":["report"]},{"url":"https://bugzilla.suse.com/1275206","tags":["report"]},{"url":"https://bugzilla.suse.com/1275207","tags":["report"]},{"url":"https://bugzilla.suse.com/1275934","tags":["report"]},{"url":"https://bugzilla.suse.com/1276426","tags":["report"]},{"url":"https://bugzilla.suse.com/1276658","tags":["report"]},{"url":"https://bugzilla.suse.com/1276973","tags":["report"]},{"url":"https://bugzilla.suse.com/1277025","tags":["report"]},{"url":"https://bugzilla.suse.com/1278307","tags":["report"]},{"url":"https://bugzilla.suse.com/1278322","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4673","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14199","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17033","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-19197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-19475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42127","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42211","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44990","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-73501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8609","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9029","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2026-1502","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8509-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-4189","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-13462","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-69534","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-0672","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-1299","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-2297","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-3276","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-3644","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-4224","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-4519","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-4786","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-5713","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-6019","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-6100","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-7774","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-8328","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-9669","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5713","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-1502","title":"HTTP client proxy tunnel headers not validated for CR/LF","description":"CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.","status":"published","published":"2026-04-10T17:54:44.121Z","modified":"2026-08-13T00:28:30.757Z","cvss":[{"version":"4.0","score":5.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","level":"medium","assessor":"cna"}],"cwes":["CWE-93"],"updated_at":"2026-11-02T14:20:00.879257Z"}],"euvd":[{"id":"EUVD-2026-21519","description":"CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.","status":"published","published":"2026-04-10T17:54:44Z","modified":"2026-08-13T00:28:30Z","cvss":[{"version":"4.0","score":5.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T18:01:57.213133Z"}],"ghsa":[{"id":"GHSA-hjxq-7w9q-2jw6","title":"CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.","description":"CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.","status":"published","published":"2026-04-10T18:31:20Z","modified":"2026-06-30T18:32:32Z","cvss":[{"version":"4.0","score":5.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"}],"cwes":["CWE-93"],"updated_at":"2026-11-02T15:09:06.582219Z"}],"nvd":[{"id":"CVE-2026-1502","description":"CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.","status":"published","published":"2026-04-10T18:16:40.97Z","modified":"2026-10-26T21:10:00.17Z","cvss":[{"version":"4.0","score":5.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"}],"cwes":["CWE-93"],"updated_at":"2026-11-02T14:12:14.37744Z"}],"osv":[{"id":"ALPINE-CVE-2026-1502","description":"CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.","status":"published","published":"2026-04-10T18:16:40.97Z","modified":"2026-10-01T02:17:49.189418493Z","cvss":[{"version":"4.0","score":5.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"}],"updated_at":"2026-11-02T15:27:50.269992Z"},{"id":"CVE-2026-1502","title":"HTTP client proxy tunnel headers not validated for CR/LF","description":"CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.","status":"published","published":"2026-04-10T17:54:44.121Z","modified":"2026-11-04T02:47:31.705069098Z","cvss":[{"version":"4.0","score":5.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-04T02:53:45.692342Z"},{"id":"DEBIAN-CVE-2026-1502","description":"CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.","status":"published","published":"2026-04-10T18:16:40.97Z","modified":"2026-11-01T17:00:13.093061748Z","cvss":[{"version":"4.0","score":5.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"}],"updated_at":"2026-11-02T15:45:51.8748Z"},{"id":"OESA-2026-2115","title":"python3 security update","description":"Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces.\r\n\r\nSecurity Fix(es):\n\nCR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.(CVE-2026-1502)\n\nMitgation of CVE-2026-4519 was incomplete. If the URL contained \u0026quot;%action\u0026quot; the mitigation could be bypassed for certain browser types the \u0026quot;webbrowser.open()\u0026quot; API could have commands injected into the underlying shell. See CVE-2026-4519 for details.(CVE-2026-4786)\n\nUse-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `MemoryError` and the decompression instance is re-used. This scenario can be triggered if the process is under memory pressure. The fix cleans up the dangling pointer in this specific error condition.\n\nThe vulnerability is only present if the program re-uses decompressor instances across multiple decompression calls even after a `MemoryError` is raised during decompression. Using the helper functions to one-shot decompress data such as `lzma.decompress()`, `bz2.decompress()`, `gzip.decompress()`, and `zlib.decompress()` are not affected as a new decompressor instance is used per call. If the decompressor instance is not re-used after an error condition, this usage is similarly not vulnerable.(CVE-2026-6100)","status":"published","published":"2026-04-25T11:11:06Z","modified":"2026-08-18T01:19:56.433408849Z","cvss":[{"version":"4.0","score":9.1,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-2116","title":"python3 security update","description":"Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces.\r\n\r\nSecurity Fix(es):\n\nCR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.(CVE-2026-1502)\n\nMitgation of CVE-2026-4519 was incomplete. If the URL contained \u0026quot;%action\u0026quot; the mitigation could be bypassed for certain browser types the \u0026quot;webbrowser.open()\u0026quot; API could have commands injected into the underlying shell. See CVE-2026-4519 for details.(CVE-2026-4786)\n\nUse-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `MemoryError` and the decompression instance is re-used. This scenario can be triggered if the process is under memory pressure. The fix cleans up the dangling pointer in this specific error condition.\n\nThe vulnerability is only present if the program re-uses decompressor instances across multiple decompression calls even after a `MemoryError` is raised during decompression. Using the helper functions to one-shot decompress data such as `lzma.decompress()`, `bz2.decompress()`, `gzip.decompress()`, and `zlib.decompress()` are not affected as a new decompressor instance is used per call. If the decompressor instance is not re-used after an error condition, this usage is similarly not vulnerable.(CVE-2026-6100)","status":"published","published":"2026-04-25T11:11:06Z","modified":"2026-08-18T01:19:56.546879369Z","cvss":[{"version":"4.0","score":9.1,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-2117","title":"python3 security update","description":"Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces.\r\n\r\nSecurity Fix(es):\n\nCR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.(CVE-2026-1502)\n\nMitgation of CVE-2026-4519 was incomplete. If the URL contained \u0026quot;%action\u0026quot; the mitigation could be bypassed for certain browser types the \u0026quot;webbrowser.open()\u0026quot; API could have commands injected into the underlying shell. See CVE-2026-4519 for details.(CVE-2026-4786)\n\nUse-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `MemoryError` and the decompression instance is re-used. This scenario can be triggered if the process is under memory pressure. The fix cleans up the dangling pointer in this specific error condition.\n\nThe vulnerability is only present if the program re-uses decompressor instances across multiple decompression calls even after a `MemoryError` is raised during decompression. Using the helper functions to one-shot decompress data such as `lzma.decompress()`, `bz2.decompress()`, `gzip.decompress()`, and `zlib.decompress()` are not affected as a new decompressor instance is used per call. If the decompressor instance is not re-used after an error condition, this usage is similarly not vulnerable.(CVE-2026-6100)","status":"published","published":"2026-04-25T11:11:06Z","modified":"2026-08-18T01:19:49.849692052Z","cvss":[{"version":"4.0","score":9.1,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"RHSA-2026:10117","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","status":"published","published":"2026-04-24T10:06:38Z","modified":"2026-10-17T10:08:48Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.066978Z"},{"id":"RHSA-2026:10950","title":"Red Hat Security Advisory: python3.12 security update","status":"published","published":"2026-04-28T10:08:05Z","modified":"2026-10-17T10:09:00Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.066978Z"},{"id":"RHSA-2026:19019","title":"Red Hat Security Advisory: python3.14 security update","status":"published","published":"2026-05-20T10:09:36Z","modified":"2026-10-17T10:10:07Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:19064","title":"Red Hat Security Advisory: python3.12 security update","status":"published","published":"2026-05-20T10:09:48Z","modified":"2026-10-17T10:10:13Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:19176","title":"Red Hat Security Advisory: python3.14 security update","status":"published","published":"2026-05-20T10:10:11Z","modified":"2026-10-17T10:10:20Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:19177","title":"Red Hat Security Advisory: python3.12 security update","status":"published","published":"2026-05-20T10:10:11Z","modified":"2026-10-17T10:10:21Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:8822","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-04-20T10:12:15Z","modified":"2026-10-17T10:21:25Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RHSA-2026:8824","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-04-20T10:12:15Z","modified":"2026-10-17T10:21:25Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RHSA-2026:9228","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-04-22T10:11:14Z","modified":"2026-10-17T10:21:43Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"RLSA-2026:10950","title":"Important: python3.12 security update","description":"Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.\n\nSecurity Fix(es):\n\n* expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375)\n\n* python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075)\n\n* cpython: Out-of-memory when loading Plist (CVE-2025-13837)\n\n* cpython: Header injection via newlines in data URL mediatype in Python (CVE-2025-15282)\n\n* cpython: Header injection in http.cookies.Morsel in Python (CVE-2026-0672)\n\n* cpython: CPython: Logging Bypass in Legacy .pyc File Handling (CVE-2026-2297)\n\n* cpython: Incomplete control character validation in http.cookies (CVE-2026-3644)\n\n* cpython: Stack overflow parsing XML with deeply nested DTD content models (CVE-2026-4224)\n\n* python: Python: HTTP header injection via CR/LF in proxy tunnel headers (CVE-2026-1502)\n\n* python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)\n\n* python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-04-28T06:00:55.994176Z","modified":"2026-04-28T06:30:23.710127Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"RLSA-2026:19019","title":"Important: python3.14 security update","description":"Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.\n\nSecurity Fix(es):\n\n* cpython: wsgiref.headers.Headers allows header newline injection in Python (CVE-2026-0865)\n\n* cpython: CPython: Logging Bypass in Legacy .pyc File Handling (CVE-2026-2297)\n\n* cpython: Incomplete control character validation in http.cookies (CVE-2026-3644)\n\n* cpython: Stack overflow parsing XML with deeply nested DTD content models (CVE-2026-4224)\n\n* python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)\n\n* python: Python: HTTP header injection via CR/LF in proxy tunnel headers (CVE-2026-1502)\n\n* python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)\n\n* python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)\n\n* python: Python: Information disclosure and arbitrary code execution via remote debugging with a malicious process. (CVE-2026-5713)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-05-29T16:03:24.060458Z","modified":"2026-05-29T16:30:44.673482972Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"RLSA-2026:19064","title":"Important: python3.12 security update","description":"Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.\n\nSecurity Fix(es):\n\n* expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375)\n\n* python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075)\n\n* cpython: Out-of-memory when loading Plist (CVE-2025-13837)\n\n* cpython: Header injection via newlines in data URL mediatype in Python (CVE-2025-15282)\n\n* cpython: Header injection in http.cookies.Morsel in Python (CVE-2026-0672)\n\n* cpython: CPython: Logging Bypass in Legacy .pyc File Handling (CVE-2026-2297)\n\n* cpython: Incomplete control character validation in http.cookies (CVE-2026-3644)\n\n* cpython: Stack overflow parsing XML with deeply nested DTD content models (CVE-2026-4224)\n\n* python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)\n\n* python: Python: HTTP header injection via CR/LF in proxy tunnel headers (CVE-2026-1502)\n\n* python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)\n\n* python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-05-29T16:03:24.060458Z","modified":"2026-05-29T16:30:43.831339403Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"RLSA-2026:19176","title":"Important: python3.14 security update","description":"Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.\n\nSecurity Fix(es):\n\n* cpython: wsgiref.headers.Headers allows header newline injection in Python (CVE-2026-0865)\n\n* cpython: CPython: Logging Bypass in Legacy .pyc File Handling (CVE-2026-2297)\n\n* cpython: Incomplete control character validation in http.cookies (CVE-2026-3644)\n\n* cpython: Stack overflow parsing XML with deeply nested DTD content models (CVE-2026-4224)\n\n* python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)\n\n* python: Python: HTTP header injection via CR/LF in proxy tunnel headers (CVE-2026-1502)\n\n* python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)\n\n* python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)\n\n* python: Python: Information disclosure and arbitrary code execution via remote debugging with a malicious process. (CVE-2026-5713)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-05-30T18:03:01.190443Z","modified":"2026-05-30T18:25:41.729094954Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:19177","title":"Important: python3.12 security update","description":"Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.\n\nSecurity Fix(es):\n\n* expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375)\n\n* python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075)\n\n* cpython: Out-of-memory when loading Plist (CVE-2025-13837)\n\n* cpython: Header injection via newlines in data URL mediatype in Python (CVE-2025-15282)\n\n* cpython: Header injection in http.cookies.Morsel in Python (CVE-2026-0672)\n\n* cpython: CPython: Logging Bypass in Legacy .pyc File Handling (CVE-2026-2297)\n\n* cpython: Incomplete control character validation in http.cookies (CVE-2026-3644)\n\n* cpython: Stack overflow parsing XML with deeply nested DTD content models (CVE-2026-4224)\n\n* python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)\n\n* python: Python: HTTP header injection via CR/LF in proxy tunnel headers (CVE-2026-1502)\n\n* python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)\n\n* python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-05-28T15:43:06.024531Z","modified":"2026-05-28T16:00:26.699981422Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"ROOT-OS-DEBIAN-11-CVE-2026-1502","title":"CVE-2026-1502 in python3.9 - Patched by Root","description":"Root has patched CVE-2026-1502 in the python3.9 package for Root:Debian:11. Multiple fixed versions available.","status":"published","published":"2026-09-11T09:07:53Z","modified":"2026-09-11T10:15:04.245554037Z","cvss":[{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:29.631993Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2026-1502","title":"CVE-2026-1502 in python3.11 - Patched by Root","description":"Root has patched CVE-2026-1502 in the python3.11 package for Root:Debian:12. Multiple fixed versions available.","status":"withdrawn","published":"2026-09-07T12:37:46Z","modified":"2026-10-09T07:00:05.879752697Z","cvss":[{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:31.773105Z"},{"id":"ROOT-OS-DEBIAN-13-CVE-2026-1502","title":"CVE-2026-1502 in rootio-python3.13 - Patched by Root","description":"Root has patched CVE-2026-1502 in the rootio-python3.13 package for Root:Debian:13. Multiple fixed versions available.","status":"withdrawn","published":"2026-07-10T09:58:59Z","modified":"2026-07-27T14:00:18.219099505Z","cvss":[{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:33.153539Z"},{"id":"UBUNTU-CVE-2026-1502","description":"CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.","status":"published","published":"2026-04-10T18:16:00Z","modified":"2026-10-17T12:58:05.994528863Z","cvss":[{"version":"4.0","score":5.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T16:56:00.592716Z"},{"id":"ALSA-2026:10950","title":"Important: python3.12 security update","description":"Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  \n\nSecurity Fix(es):  \n\n  * expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375)\n  * python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075)\n  * cpython: Out-of-memory when loading Plist (CVE-2025-13837)\n  * cpython: Header injection via newlines in data URL mediatype in Python (CVE-2025-15282)\n  * cpython: Header injection in http.cookies.Morsel in Python (CVE-2026-0672)\n  * cpython: CPython: Logging Bypass in Legacy .pyc File Handling (CVE-2026-2297)\n  * cpython: Incomplete control character validation in http.cookies (CVE-2026-3644)\n  * cpython: Stack overflow parsing XML with deeply nested DTD content models (CVE-2026-4224)\n  * python: Python: HTTP header injection via CR/LF in proxy tunnel headers (CVE-2026-1502)\n  * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)\n  * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-04-27T00:00:00Z","modified":"2026-10-29T11:02:23.390084647Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"ALSA-2026:19019","title":"Important: python3.14 security update","description":"Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  \n\nSecurity Fix(es):  \n\n  * cpython: wsgiref.headers.Headers allows header newline injection in Python (CVE-2026-0865)\n  * cpython: CPython: Logging Bypass in Legacy .pyc File Handling (CVE-2026-2297)\n  * cpython: Incomplete control character validation in http.cookies (CVE-2026-3644)\n  * cpython: Stack overflow parsing XML with deeply nested DTD content models (CVE-2026-4224)\n  * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)\n  * python: Python: HTTP header injection via CR/LF in proxy tunnel headers (CVE-2026-1502)\n  * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)\n  * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)\n  * python: Python: Information disclosure and arbitrary code execution via remote debugging with a malicious process. (CVE-2026-5713)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-05-19T00:00:00Z","modified":"2026-10-29T11:30:15.334182788Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"ALSA-2026:19064","title":"Important: python3.12 security update","description":"Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  \n\nSecurity Fix(es):  \n\n  * expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375)\n  * python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075)\n  * cpython: Out-of-memory when loading Plist (CVE-2025-13837)\n  * cpython: Header injection via newlines in data URL mediatype in Python (CVE-2025-15282)\n  * cpython: Header injection in http.cookies.Morsel in Python (CVE-2026-0672)\n  * cpython: CPython: Logging Bypass in Legacy .pyc File Handling (CVE-2026-2297)\n  * cpython: Incomplete control character validation in http.cookies (CVE-2026-3644)\n  * cpython: Stack overflow parsing XML with deeply nested DTD content models (CVE-2026-4224)\n  * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)\n  * python: Python: HTTP header injection via CR/LF in proxy tunnel headers (CVE-2026-1502)\n  * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)\n  * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-05-19T00:00:00Z","modified":"2026-10-29T11:30:17.576467972Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"ALSA-2026:19176","title":"Important: python3.14 security update","description":"Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  \n\nSecurity Fix(es):  \n\n  * cpython: wsgiref.headers.Headers allows header newline injection in Python (CVE-2026-0865)\n  * cpython: CPython: Logging Bypass in Legacy .pyc File Handling (CVE-2026-2297)\n  * cpython: Incomplete control character validation in http.cookies (CVE-2026-3644)\n  * cpython: Stack overflow parsing XML with deeply nested DTD content models (CVE-2026-4224)\n  * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)\n  * python: Python: HTTP header injection via CR/LF in proxy tunnel headers (CVE-2026-1502)\n  * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)\n  * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)\n  * python: Python: Information disclosure and arbitrary code execution via remote debugging with a malicious process. (CVE-2026-5713)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-05-19T00:00:00Z","modified":"2026-10-29T11:32:31.022395794Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"ALSA-2026:19177","title":"Important: python3.12 security update","description":"Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  \n\nSecurity Fix(es):  \n\n  * expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375)\n  * python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075)\n  * cpython: Out-of-memory when loading Plist (CVE-2025-13837)\n  * cpython: Header injection via newlines in data URL mediatype in Python (CVE-2025-15282)\n  * cpython: Header injection in http.cookies.Morsel in Python (CVE-2026-0672)\n  * cpython: CPython: Logging Bypass in Legacy .pyc File Handling (CVE-2026-2297)\n  * cpython: Incomplete control character validation in http.cookies (CVE-2026-3644)\n  * cpython: Stack overflow parsing XML with deeply nested DTD content models (CVE-2026-4224)\n  * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)\n  * python: Python: HTTP header injection via CR/LF in proxy tunnel headers (CVE-2026-1502)\n  * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)\n  * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-05-19T00:00:00Z","modified":"2026-10-29T11:32:30.937571683Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"AZL-82899","title":"CVE-2026-1502 affecting package python3 for versions less than 3.12.9-11","description":"CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.","status":"published","published":"2026-04-10T18:16:40Z","modified":"2026-09-08T17:33:11Z","updated_at":"2026-11-02T15:28:10.335477Z"},{"id":"BELL-CVE-2026-1502","status":"published","published":"2026-04-14T06:09:36.956062Z","modified":"2026-08-26T01:10:53.992901899Z","updated_at":"2026-11-02T15:28:23.037038Z"},{"id":"BIT-libpython-2026-1502","title":"HTTP client proxy tunnel headers not validated for CR/LF","description":"CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.","status":"published","published":"2026-07-06T15:23:02.015Z","modified":"2026-08-19T09:45:14.35670036Z","updated_at":"2026-11-02T15:28:32.162822Z"},{"id":"BIT-python-2026-1502","title":"HTTP client proxy tunnel headers not validated for CR/LF","description":"CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.","status":"published","published":"2026-07-06T15:27:50.778Z","modified":"2026-08-19T09:45:25.999304891Z","updated_at":"2026-11-02T15:28:34.724063Z"},{"id":"BIT-python-min-2026-1502","title":"HTTP client proxy tunnel headers not validated for CR/LF","description":"CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.","status":"published","published":"2026-07-06T15:27:52.138Z","modified":"2026-08-19T09:45:21.825948246Z","updated_at":"2026-11-02T15:28:35.111822Z"},{"id":"CLSA-2026-1779748834","title":"python3.9: Fix of CVE-2026-1502","description":"- CVE-2026-1502: reject CR/LF in HTTP proxy tunnel host and headers","status":"published","published":"2026-05-26T08:08:20Z","modified":"2026-10-26T09:30:02.900080526Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1779788314","title":"python3.11: Fix of CVE-2026-1502","description":"- CVE-2026-1502: fix CRLF injection in http.client._tunnel() — reject control characters in the tunnel host and reject CR/LF in tunnel-request header names and values","status":"published","published":"2026-05-26T09:38:39Z","modified":"2026-10-26T09:31:05.640775994Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1779875599","title":"python3.11: Fix of CVE-2026-1502","description":"- CVE-2026-1502: reject CR/LF control characters in http.client._tunnel() host and request headers to prevent HTTP header injection","status":"published","published":"2026-05-27T09:53:23Z","modified":"2026-10-26T09:30:07.783162238Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1779886202","title":"python3.9: Fix of 4 CVEs","description":"- CVE-2026-0672: reject control characters in http.cookies.Morsel keys/values\n- CVE-2026-3644: extend control-character rejection to Morsel.update(), |=, and __setstate__\n- CVE-2026-4224: avoid unbound C recursion in pyexpat conv_content_model for deeply nested DTDs\n- CVE-2026-1502: reject CR/LF in HTTP tunnel request headers and tunnel host","status":"published","published":"2026-05-27T14:06:00Z","modified":"2026-10-26T09:43:50.839805392Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"MGASA-2026-0455","title":"Updated python3 \u0026 python-pip package fixes security vulnerabilities","description":"Please see the references for additional information about\nvulnerabilities.\n","status":"published","published":"2026-09-26T15:57:25Z","modified":"2026-09-26T16:12:22.700215778Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:10647-1","title":"python310-3.10.20-6.1 on GA media","description":"These are all security issues fixed in the python310-3.10.20-6.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-04-28T00:00:00Z","modified":"2026-04-29T08:01:48.21347Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"openSUSE-SU-2026:10648-1","title":"python315-3.15.0~a8-3.1 on GA media","description":"These are all security issues fixed in the python315-3.15.0~a8-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-04-28T00:00:00Z","modified":"2026-04-29T08:02:01.974833Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"openSUSE-SU-2026:10667-1","title":"python313-3.13.13-2.1 on GA media","description":"These are all security issues fixed in the python313-3.13.13-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-05-01T00:00:00Z","modified":"2026-05-02T08:00:25.335451Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"openSUSE-SU-2026:11068-1","title":"python311-3.11.15-6.1 on GA media","description":"These are all security issues fixed in the python311-3.11.15-6.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-06-19T00:00:00Z","modified":"2026-06-20T08:45:08.563260709Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:11100-1","title":"python312-3.12.13-6.1 on GA media","description":"These are all security issues fixed in the python312-3.12.13-6.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-06-22T00:00:00Z","modified":"2026-06-24T09:00:22.415184358Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:11181-1","title":"python314-3.14.6-1.1 on GA media","description":"These are all security issues fixed in the python314-3.14.6-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-07-02T00:00:00Z","modified":"2026-07-03T11:00:06.800628523Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:21459-1","title":"Security update for python313, python3","description":"This update for python313, python3 fixes the following issues:\n\nChanges in python313:\n\nUpdate to 3.13.14:\n\n  - Security\n\n    - gh-151159: Bumps the OpenSSL version to 3.0.21 on Android.\n    - gh-150599: Fix a possible stack buffer overflow in bz2 when\n      a bz2.BZ2Decompressor is reused after a decompression\n      error. The decompressor now becomes unusable after libbz2\n      reports an error.\n    - gh-149835: shutil.move() now resolves symlinks via\n      os.path.realpath() when checking whether the destination is\n      inside the source directory, preventing a symlink-based\n      bypass of that guard.\n    - gh-149698: Update bundled libexpat to version 2.8.1 for the\n      fix for CVE 2026-45186.\n    - gh-87451: The ftplib module’s undocumented ftpcp function\n      no longer trusts the IPv4 address value returned from the\n      source server in response to the PASV command by default,\n      completing the fix for CVE-2021-4189. As with ftplib.FTP,\n      the former behavior can be re-enabled by setting the\n      trust_server_pasv_ipv4_address attribute on the source\n      ftplib.FTP instance to True. Thanks to Qi Deng at Aurascape\n      AI for the report.\n    - gh-149486: tarfile.data_filter() now validates link targets\n      using the same normalised value that is written to disk,\n      strips trailing separators from the member name when\n      resolving a symlink’s directory, and rejects link members\n      that would replace the destination directory itself. This\n      closes several path-traversal bypasses of the data\n      extraction filter.\n    - gh-149079: Fix a potential denial of service in\n      unicodedata.normalize(). The canonical ordering step of\n      Unicode normalization used a quadratic-time insertion sort\n      for reordering combining characters, which could be\n      exploited with crafted input containing many combining\n      characters in non-canonical order. Replaced with\n      a linear-time counting sort for long runs.\n    - gh-149018: Improved protection against XML hash-flooding\n      attacks in xml.parsers.expat and xml.etree.ElementTree when\n      Python is compiled with libExpat 2.8.0 or later.\n    - gh-149017: Update bundled libexpat to version 2.8.0.\n    - gh-90309: Base64-encode values when embedding cookies to\n      JavaScript using the http.cookies.BaseCookie.js_output()\n      method to avoid injection and escaping. (bsc#1262654,\n      CVE-2026-6019)\n    - gh-148808: Added buffer boundary check when using nbytes\n      parameter with\n      asyncio.AbstractEventLoop.sock_recvfrom_into(). Only\n      relevant for Windows and the asyncio.ProactorEventLoop.\n    - gh-148395: Fix a dangling input pointer in\n      lzma.LZMADecompressor, bz2.BZ2Decompressor, and internal\n      zlib._ZlibDecompressor when memory allocation fails with\n      MemoryError, which could let a subsequent decompress() call\n      read or write through a stale pointer to the\n      already-released caller buffer. (bsc#1262098,\n      CVE-2026-6100, seems like it has been incompletely applied\n      gh#python/cpython#151605)\n    - gh-148169: A bypass in webbrowser allowed URLs prefixed\n      with %action to pass the dash-prefix safety check\n      (bsc#1262098, CVE-2026-6100).\n    - gh-146581: Fix vulnerability in shutil.unpack_archive() for\n      ZIP files on Windows which allowed to write files outside\n      of the destination tree if the patch in the archive\n      contains a Windows drive prefix. Now such invalid paths\n      will be skipped. Files containing “..” in the name (like\n      “foo..bar”) are no longer skipped.\n    - gh-146333: Fix quadratic backtracking in\n      configparser.RawConfigParser option parsing regexes (OPTCRE\n      and OPTCRE_NV). A crafted configuration line with many\n      whitespace characters could cause excessive CPU usage.\n    - gh-146211: Reject CR/LF characters in tunnel request\n      headers for the HTTPConnection.set_tunnel() method.\n      (bsc#1261969, CVE-2026-1502)\n  - Core and Builtins\n    - gh-151112: Fix a crash in the compiler that could occur\n      when running out of memory.\n    - gh-151126: Fix a crash, when there’s no memory left on\n      a device, which happened in:\n    -     code compilation - _winapi.CreateProcess()\n    - Now these places raise proper MemoryError errors.\n    - gh-150633: Fix the frozen importer accepting module names\n      with embedded null bytes, which caused it to bypass the\n      sys.modules cache and create duplicate module objects.\n    - gh-149156: Fix an intermittent crash after os.fork() when\n      perf trampoline profiling is enabled and the child returns\n      through trampoline frames inherited from the parent\n      process.\n    - gh-149449: Fix a use-after-free crash when the unicodedata\n      module was removed from sys.modules and garbage-collected\n      between calls that decode \\N{...} escapes or use the\n      namereplace codec error handler.\n    - gh-148450: Fix abc.register() so it invalidates type\n      version tags for registered classes.\n    - gh-150207: Fix a crash when a memory allocation fails\n      during tokenizer initialization. A proper MemoryError is\n      now raised instead.\n    - gh-150107: asyncio: sendfile() and sock_sendfile() event\n      loop methods now call file.seek(offset) if file has\n      a seek() method, even if offset is 0 (default value).\n    - gh-150146: Fix a crash on a complex type variable\n      substitution.\n    - from typing import TypeVar;\n      memoryview[TypeVar(\"\")][*typing.Mapping[..., ...]] used to\n      fail due to missing NULL check on _unpack_args C function\n      call.\n    - gh-149590: Fix crash when faulthandler is imported more\n      than once.\n    - gh-149738: sqlite3: Disallow removing row_factory and\n      text_factory attributes of a connection to prevent a crash\n      on a query.\n    - gh-139808: Add branch protections for AArch64 (BTI/PAC) in\n      assembly code used by -X perf_jit (Linux perf profiler\n      integration).\n    - gh-148820: Fix a race in _PyRawMutex on the free-threaded\n      build where a Py_PARK_INTR return from _PySemaphore_Wait\n      could let the waiter destroy its semaphore before the\n      unlocking thread’s _PySemaphore_Wakeup completed, causing\n      a fatal ReleaseSemaphore error.\n    - gh-148653: Forbid marshalling recursive code objects which\n      cannot be correctly unmarshalled.\n    - gh-148390: Fix an undefined behavior in memoryview when\n      using the native boolean format (?) in cast(). Previously,\n      on some common platforms, calling\n      memoryview(b).cast(\"?\").tolist() incorrectly returned\n      [False] instead of [True] for any even byte b. Patch by\n      Bénédikt Tran.\n    - gh-148418: Fix a possible reference leak in a corrupted\n      TYPE_CODE marshal stream.\n    - gh-148222: Fix vectorcall support in types.GenericAlias\n      when the underlying type does not support the vectorcall\n      protocol. Fix possible leaks in types.GenericAlias and\n      types.UnionType in case of memory error.\n    - gh-145376: Fix reference leaks in various unusual error\n      scenarios.\n\n  - C API\n\n    - gh-150907: Fix dynamic_annotations.h header file when built\n      with C++ and Valgrind: add extern \"C++\" scope for the C++\n      template. Patch by Victor Stinner.\n\n  - Build\n\n    - gh-149351: Avoid possible broken macOS framework install\n      names when DESTDIR is specified during builds.\n    - gh-146475: Block Apple Clang from being used to build the\n      JIT as it ships without required LLVM tools.\n    - gh-148535: No longer use the gcc -fprofile-update=atomic\n      flag on i686. The flag has been added to fix a random GCC\n      internal error on PGO build (gh-145801) caused by\n      corruption of profile data (.gcda files). The problem is\n      that it makes the PGO build way slower (up to 47x slower)\n      on i686. Since the GCC internal error was not seen on i686\n      so far, don’t use -fprofile-update=atomic on i686 anymore.\n      Patch by Victor Stinner.\n\n  - Library\n\n    - gh-150913: Fix sqlite3.Blob slice assignment to raise\n      TypeError and IndexError for type and size mismatches\n      respectively, even when the target slice is empty.\n    - gh-143008: Fix race conditions when re-initializing\n      a io.TextIOWrapper object.\n    - gh-150685: Update bundled pip to 26.1.2\n    - gh-150406: Fix a possible crash occurring during socket\n      module initialization when the system is out of memory on\n      platforms without a reentrant gethostbyname.\n    - gh-150372: readline: Fix a potential crash during tab\n      completion caused by an out-of-memory error during module\n      initialization.\n    - gh-150175: Fix race condition in\n      unittest.mock.ThreadingMock where concurrent calls could\n      lose increments to call_count and other attributes due to\n      a missing lock in _increment_mock_call.\n    - gh-84353: Preserve non-UTF-8 encoded filenames when\n      appending to a zipfile.ZipFile. Previously, non-ASCII names\n      stored in a legacy encoding (without the UTF-8 flag bit\n      set) could be corrupted when the central directory was\n      rewritten: they were decoded as cp437 and then re-stored as\n      UTF-8.\n    - gh-149995: Update various docstrings in typing.\n    - gh-88726: The email package now uses standard MIME charset\n      names “gb2312” and “big5” instead of non-standard names\n      “eucgb2312_cn” and “big5_tw”.\n    - gh-149571: Fix the C implementation of\n      xml.etree.ElementTree.Element.itertext(): it no longer\n      emits text for comments and processing instructions.\n    - gh-149921: Fix reference leaks in error paths of the\n      _interpchannels and _interpqueues extension modules.\n    - gh-149801: Add IANA registered names and aliases with\n      leading zeros before number (like IBM00858, CP00858,\n      IBM01140, CP01140) for corresponding codecs.\n    - gh-149701: Fix bad return code from Lib/venv/bin/activate\n      if hashing is disabled\n    - gh-112821: In the REPL, autocompletion might run arbitrary\n      code in the getter of a descriptor. If that getter raised\n      an exception, autocompletion would fail to present any\n      options for the entire object. Autocompletion now works as\n      expected for these objects.\n    - gh-149388: Make asyncio.windows_utils.PipeHandle closing\n      idempotent.\n    - gh-149489: Fix ElementTree serialization to HTML. The\n      content of elements “xmp”, “iframe”, “noembed”, “noframes”,\n      and “plaintext” is no longer escaped. The “plaintext”\n      element no longer have the closing tag.\n    - gh-149377: Update bundled pip to 26.1.1\n    - gh-149231: In tomllib, the number of parts in TOML keys is\n      now limited.\n    - gh-149117: Fix runpy.run_module() and runpy.run_path() to\n      set the name attribute on the ImportError they raise.\n    - gh-149148: ensurepip: Upgrade bundled pip to 26.1. This\n      version fixes the CVE 2026-3219 vulnerability. Patch by\n      Victor Stinner.\n    - gh-148093: Fix an out-of-bounds read of one byte in\n      binascii.a2b_uu(). Raise binascii.Error, instead of reading\n      past the buffer end.\n    - gh-148914: Fix memoization of in-band PickleBuffer in the\n      Python implementation of pickle. Previously, identical\n      PickleBuffers did not preserve identity, and empty writable\n      PickleBuffer memoized an empty bytearray object in place of\n      b'', so the following references to b'' were unpickled as\n      an empty bytearray object.\n    - gh-138907: Support RFC 9309 in urllib.robotparser.\n    - gh-148954: Fix XML injection vulnerability in\n      xmlrpc.client.dumps() where the methodname was not being\n      escaped before interpolation into the XML body.\n    - gh-148801: xml.etree.ElementTree: Fix a crash in\n      Element.__deepcopy__ on deeply nested trees.\n    - gh-148735: xml.etree.ElementTree: Fix a use-after-free in\n      Element.findtext when the element tree is mutated\n      concurrently during the search.\n    - gh-146553: Fix infinite loop in typing.get_type_hints()\n      when __wrapped__ forms a cycle. Patch by Shamil Abdulaev.\n    - gh-148508: An intermittent timing error when running SSL\n      tests on iOS has been resolved.\n    - gh-148518: If an email containing an address header that\n      ended in an open double quote was parsed with\n      a non-compat32 policy, accessing the username attribute of\n      the mailbox accessed through that header object would\n      result in an IndexError. It now correctly returns an empty\n      string as the result.\n    - gh-148370: configparser: prevent quadratic behavior when\n      a ParsingError is raised after a parser fails to parse\n      multiple lines. Patch by Bénédikt Tran.\n    - gh-148254: Use singular “sec” instead of “secs” in timeit\n      verbose output for consistency with other time units.\n    - gh-148192: email.generator.Generator._make_boundary could\n      fail to detect a duplicate boundary string if linesep was\n      not n. It now correctly detects boundary strings when\n      linesep is rn as well.\n    - gh-146313: Fix a deadlock in multiprocessing’s resource\n      tracker where the parent process could hang indefinitely in\n      os.waitpid() during interpreter shutdown if a child created\n      via os.fork() still held the resource tracker’s pipe open.\n    - gh-145831: Fix email.quoprimime.decode() leaving a stray \\r\n      when eol='\\r\\n' by stripping the full eol string instead of\n      one character.\n    - gh-145105: Fix crash in csv reader when iterating with\n      a re-entrant iterator that calls next() on the same reader\n      from within __next__.\n    - gh-130750: Restore quoting of choices in argparse error\n      messages for improved clarity and consistency with\n      documentation.\n    - gh-105936: Attempting to mutate non-field attributes of\n      dataclasses with both frozen and slots being True now\n      raises FrozenInstanceError instead of TypeError. Their\n      non-dataclass subclasses can now freely mutate non-field\n      attributes, and the original non-slotted class can be\n      garbage collected. The fix also handles the case of an\n      empty __class__ cell on a function found within the class\n      (gh-148947).\n    - gh-142516: ssl: fix reference leaks in ssl.SSLContext\n      objects. Patch by Bénédikt Tran.\n    - gh-142831: Fix a crash in the json module where\n      a use-after-free could occur if the object being encoded is\n      modified during serialization.\n    - gh-140287: The asyncio REPL now handles exceptions when\n      executing PYTHONSTARTUP scripts. Patch by Bartosz Sławecki.\n    - gh-90949: Add\n      SetBillionLaughsAttackProtectionActivationThreshold() and\n      SetBillionLaughsAttackProtectionMaximumAmplification() to\n      xmlparser objects to tune protections against billion\n      laughs attacks. Patch by Bénédikt Tran.\n    - gh-132631: Fix “I/O operation on closed file” when parsing\n      JSON Lines file with JSON CLI.\n    - gh-128110: Fix bug in the parsing of email address headers\n      that could result in extraneous spaces in the decoded text\n      when using a modern email policy. Space between pairs of\n      adjacent RFC 2047 encoded-words is now ignored, per section\n      6.2 (and consistent with existing parsing of unstructured\n      headers like Subject).\n    - gh-107398: Fix tarfile stream mode exception when process\n      the file with the gzip extra field.\n    - gh-123853: Update the table of Windows language code\n      identifiers (LCIDs) used by locale.getdefaultlocale() on\n      Windows to protocol version 16.0 (2024-04-23).\n    - gh-70039: Fixed bug where smtplib.SMTP.starttls() could\n      fail if smtplib.SMTP.connect() is called explicitly rather\n      than implicitly.\n    - gh-83281: email: improve handling trailing garbage in\n      address lists to avoid throwing AttributeError in certain\n      edge cases\n    - gh-91099: imaplib.IMAP4.login() now raises exceptions with\n      str instead of bytes. Patch by Florian Best.\n  - IDLE\n    - bpo-6699: Warn the user if a file will be overwritten when\n      saving.\n  - Documentation\n    - gh-150319: Generic builtin and standard library types now\n      document the meaning of their type parameters.\n    - gh-148663: Document that calendar.IllegalMonthError is\n      a subclass of both ValueError and IndexError since Python\n      3.12.\n    - gh-146646: Document that glob.glob(), glob.iglob(),\n      pathlib.Path.glob(), and pathlib.Path.rglob() silently\n      suppress OSError exceptions raised from scanning the\n      filesystem.\n    - gh-109503: Fix documentation for shutil.move() on usage of\n      os.rename() since nonatomic move might be used even if the\n      files are on the same filesystem. Patch by Fang Li\n  - Tests\n    - gh-151130: Add more tests for PyWeakref_* C API.\n    - gh-149776: Fix test_socket on Linux kernel 7.1 and newer:\n      skip UDP Lite tests if it’s not supported. Patch by Victor\n      Stinner.\n\n- Keep unversioned Python 3 development entry points in\n  python3-devel: python313-devel no longer provides python3-devel\n  and no longer owns libpython3.so, python3-config, python3.pc,\n  or python3-embed.pc. Do not package versioned GIL pkg-config\n  files in nogil-devel. Also, fix regular expressions in\n  rpmlintrc.\n\n- Improve testing for the support of IPPROTO_UDPLITE, which could be\n  not present although header files are. (bsc#1263787,\n  gh#python/cpython!149081)\n\n- Add missing BR `crypto-policies-scripts` (need for the fix of\n  bsc#1211301).\n\n- CVE-2026-6019: protect against HTML injection by\n  Base64-encoding cookie values embedded in JS (bsc#1262654,\n  gh#python/cpython#90309)\n\n- CVE-2026-1502: reject CR/LF in HTTP tunnel request headers\n  (bsc#1261969, gh#python/cpython#146211)\n\n- CVE-2026-4786: fix webbrowser %action substitution bypass of\n  dash-prefix check (bsc#1262319, gh#python/cpython#148169)\n\n- CVE-2026-6100: prevent dangling pointer, which can end in the\n  use-after-free error (bsc#1262098, gh#python/cpython#148395)\n\nChanges in python3:\n\n- Provide explicitly also file dependencies /usr/bin/python3 and\n  /usr/bin/pydoc3.\n\nbreak bootstrap build dependency cycle on primary python\n\nBreak the cyclic build dependency loop between `python3` and\n`python313` during version upgrades (such as 3.13.13 to 3.13.14).\n\nPreviously, `python3.spec` required `BuildRequires:\n%{primary_python}` (the versioned non-base interpreter package)\nand queried its version via `rpm -q` during spec file parsing.\nDuring upgrades, this blocked the build of `python3` because\n`%{primary_python}` (non-base) depended on `python3-base`, which\ndemanded the new `python313-base` version.\n\nSince the unversioned compatibility package `python3` only\ncreates unversioned symlinks (like `/usr/bin/python3`) and owns\ngeneric RPM macros, it does not actually require the versioned\nstandard library modules (the non-base flavor) to build.\n\nThis change allows `python3` to build successfully against the\nalready built `python313-base` and `python313-devel` packages,\nbreaking the circular dependency and enabling a clean upgrade\npath.\n\n- Let python3-devel explicitly provide pkgconfig(python3) and\n  pkgconfig(python3-embed), matching its ownership of the unversioned\n  pkg-config files.\n\n- Complete the transition of the unversioned python3 namespace\n  (jsc#PED-16123, bsc#1258364).\n- Add missing Provides/Obsoletes for generic names.\n- Add macros.python3 (moved from python313).\n\n- Add BuildIgnore: gdb\n  BuildRequires: python313-devel → python313-devel owns\n  /usr/share/gdb/auto-load/...libpython3.13...-gdb.py → the\n  currently published version of that file has #!/usr/bin/python3\n  → RPM auto-generated Requires: python3-base on gdb → OBS tries\n  to install gdb into the build root and fails because\n  python3-base is the package being built.\n- Correct the logic in the %pre scripts.\n- version of the package must be equal to the version of\n  %primary_python\n\n- Initial packaging effort for the python3 superpackage.\n\npython3 is shipped as new package.\n","status":"published","published":"2026-07-28T09:32:02Z","modified":"2026-07-30T18:24:15.428270943Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"PSF-2026-15","description":"CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.","status":"published","published":"2026-04-10T17:54:44.121Z","modified":"2026-07-06T16:11:37.230967085Z","updated_at":"2026-11-02T15:52:50.667197Z"},{"id":"SUSE-SU-2026:1715-1","title":"Security update for python3","description":"This update for python3 fixes the following issues:\n\n- CVE-2025-13462: incorrect parsing of TarInfo when GNU long name and type AREGTYPE are combined can lead to\n  misinterpretation of tar archives (bsc#1259611).\n- CVE-2026-1502: HTTP client proxy tunnel headers not validated for CR/LF (bsc#1261969).\n- CVE-2026-3446: base64 decoding stops at first padded quad by default and ignores other information that could be\n  processed (bsc#1261970).\n- CVE-2026-3479: improper resource argument validation in `pkgutil.get_data()` can lead to path traversal (bsc#1259989).\n- CVE-2026-3644: incomplete control character validation in http.cookies can lead to input validation bypass\n  (bsc#1259734).\n- CVE-2026-4224: parsing XML with deeply nested DTD content models can lead to C stack overflow (bsc#1259735).\n- CVE-2026-4519: failure to sanitize leading dashes in URLs in the `webbrowser.open()` API can lead to web browser\n  command line option injection (bsc#1260026).\n- CVE-2026-4786: URLs prefixed with `%action` can pass the dash-prefix safety check and allow for command injection\n  (bsc#1262319).\n- CVE-2026-6019: `BaseCookie.js_output()` does not neutralize characters in cookie values embedded in JS (bsc#1262654).\n- CVE-2026-6100: use-after-free in `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when process is\n  under memory pressure(bsc#1262098).\n","status":"published","published":"2026-05-06T12:09:50Z","modified":"2026-05-07T08:46:35.871228Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"SUSE-SU-2026:1818-1","title":"Security update for python39","description":"This update for python39 fixes the following issues:\n\nSecurity issues fixed:\n    \n- CVE-2026-1502: HTTP client proxy tunnel headers not validated for CR/LF (bsc#1261969).\n- CVE-2026-3446: base64 decoding stops at first padded quad by default and ignores other information that could be\n  processed (bsc#1261970).\n- CVE-2026-3479: improper resource argument validation in `pkgutil.get_data()` can lead to path traversal (bsc#1259989).\n- CVE-2026-4786: URLs prefixed with `%action` can pass the dash-prefix safety check and allow for command injection\n  (bsc#1262319).\n- CVE-2026-6019: `BaseCookie.js_output()` does not neutralize characters in cookie values embedded in JS (bsc#1262654).\n- CVE-2026-6100: use-after-free in `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when process is\n  under memory pressure(bsc#1262098).\n    \nOther updates and bugfixes:\n    \n- Rewrite structure of Python interpreter packages. `python3*` symbols should be now provided by real python3 packages\n  and its subpackages instead of the virtual provides (bsc#1258364).\n","status":"published","published":"2026-05-12T07:58:54Z","modified":"2026-05-14T08:15:17.778732Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"SUSE-SU-2026:1937-1","title":"Security update for python3","description":"This update for python3 fixes the following issue:\n\n- CVE-2026-1502: HTTP client proxy tunnel headers not validated for CR/LF (bsc#1261969).\n- CVE-2026-3446: base64 decoding stops at first padded quad by default and ignores other information that could be\n  processed (bsc#1261970).\n- CVE-2026-4786: URLs prefixed with `%action` can pass the dash-prefix safety check and allow for command injection\n  (bsc#1262319).\n- CVE-2026-6019: `BaseCookie.js_output()` does not neutralize characters in cookie values embedded in JS (bsc#1262654).\n- CVE-2026-6100: use-after-free in `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when process is\n  under memory pressure(bsc#1262098).\n","status":"published","published":"2026-05-18T07:41:58Z","modified":"2026-05-19T08:45:08.170230725Z","updated_at":"2026-11-02T15:54:01.610851Z"}]},"sources_more":{"osv":18}}