https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:04:54.634852+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-09516 bdu:2026-09516 2026-10-02T11:04:54.893582+00:00 bdu:2026-09516 https://cve.radiocsirt.org/vuln/bell-cve-2025-13462 BELL-CVE-2025-13462 2026-10-02T11:04:54.893629+00:00

Affected: Alpaquita:23: python3, Alpaquita:25: python3, Alpaquita:stream: python3, BellSoft Hardened Containers:23: python3, BellSoft Hardened Containers:25: python3, BellSoft Hardened Containers:stream: python3

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0285 certfr-2026-avi-0285 — Une vulnérabilité a été découverte dans Python. Elle permet à un attaquant de provoquer un problème de sécurité non spé… 2026-10-02T11:04:54.893667+00:00 certfr-2026-avi-0285 https://cve.radiocsirt.org/vuln/euvd-2026-351838 EUVD-2026-351838 2026-10-02T11:04:54.893685+00:00 EUVD-2026-351838 https://cve.radiocsirt.org/vuln/fkie_cve-2025-13462 fkie_cve-2025-13462 2026-10-02T11:04:54.893695+00:00

The "tarfile" module would still apply normalization of AREGTYPE (\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other implementations.

 https://cve.radiocsirt.org/vuln/ghsa-9qpv-486p-2v4h GHSA-9qpv-486p-2v4h 2026-10-02T11:04:54.893720+00:00

The "tarfile" module would still apply normalization of AREGTYPE (\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other implementations.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-13462 msrc_CVE-2025-13462 — tarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handling 2026-10-02T11:04:54.893735+00:00 msrc_CVE-2025-13462 https://cve.radiocsirt.org/vuln/oesa-2026-1899 OESA-2026-1899 — python3 security update 2026-10-02T11:04:54.893751+00:00

Affected: openEuler:24.03-LTS: python3

Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces. Security Fix(es):

The "tarfile" module would still apply normalization of AREGTYPE (\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other implementations.(CVE-2025-13462)

DISPUTED: The project has clarified that the documentation was incorrect, and that pkgutil.get_data() has the same security model as open(). The documentation has been updated to clarify this point. There is no vulnerability in the function if following the intended security model.

pkgutil.get_data() did not validate the resource argument as documented, allowing path traversals.(CVE-2026-3479)

The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additiona…

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10477-1 openSUSE-SU-2026:10477-1 — python310-3.10.20-3.1 on GA media 2026-10-02T11:04:54.893789+00:00

python310-3.10.20-3.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:10118 RHSA-2026:10118 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update 2026-10-02T11:04:54.893808+00:00

cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issues python: Python base64: Incomplete data decoding due to premature stop at padding python: Python pkgutil.get_data(): Path Traversal via improper resource argument validation

 https://cve.radiocsirt.org/vuln/suse-su-2026:1206-1 SUSE-SU-2026:1206-1 — Security update for python 2026-10-02T11:04:54.893827+00:00

Security update for python

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-13462 UBUNTU-CVE-2025-13462 2026-10-02T11:04:54.893843+00:00

Affected: Ubuntu:Pro:14.04:LTS: python2.7, Ubuntu:Pro:14.04:LTS: python3.4, Ubuntu:Pro:14.04:LTS: python3.5, Ubuntu:Pro:16.04:LTS: python2.7, Ubuntu:Pro:16.04:LTS: python3.5, Ubuntu:Pro:18.04:LTS: python2.7, Ubuntu:Pro:18.04:LTS: python3.6, Ubuntu:Pro:18.04:LTS: python3.7, Ubuntu:Pro:18.04:LTS: python3.8, Ubuntu:Pro:20.04:LTS: python3.8 and 8 more

The "tarfile" module would still apply normalization of AREGTYPE (\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other implementations.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0722 WID-SEC-W-2026-0722 — CPython: Schwachstelle ermöglicht Manipulation von Dateien 2026-10-02T11:04:54.893886+00:00

Ein lokaler Angreifer kann eine Schwachstelle in CPython ausnutzen, um Dateien zu manipulieren.