BIT-libpython-2023-41105

See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/libpython/BIT-libpython-2023-41105.json
JSON Data
https://api.test.osv.dev/v1/vulns/BIT-libpython-2023-41105
Aliases
Published
2025-08-11T13:52:29Z
Modified
2025-08-11T14:44:40Z
Summary
[none]
Details

An issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed to os.path.normpath(), the path will be truncated unexpectedly at the first '\0' byte. There are plausible cases in which an application would have rejected a filename for security reasons in Python 3.10.x or earlier, but that filename is no longer rejected in Python 3.11.x.

Database specific 
{
    "cpes":  [
        "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"
    ],
    "severity":  "High"
}
References

Affected packages

Bitnami / libpython

Package

Name
libpython
Purl
pkg:bitnami/libpython

Affected ranges

Type
SEMVER
Events
Introduced
3.11.0
Fixed
3.11.5

Database specific

source 
"https://github.com/bitnami/vulndb/tree/main/data/libpython/BIT-libpython-2023-41105.json"