CGA-j3w5-3rfq-jx9c
- Source
- https://images.chainguard.dev/security/CGA-j3w5-3rfq-jx9c
- Import Source
- https://advisories.cgr.dev/chainguard/v3/osv/CGA-j3w5-3rfq-jx9c.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CGA-j3w5-3rfq-jx9c
- Upstream
- Published
- 2025-10-30T22:09:36Z
- Modified
- 2026-07-17T19:04:42Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
- References
-
- https://gist.github.com/sethmlarson/1716ac5b82b73dbcbf23ad2eff8b33e1
- http://www.openwall.com/lists/oss-security/2025/07/28/1
- http://www.openwall.com/lists/oss-security/2025/07/28/2
- https://github.com/python/cpython/issues/130577
- https://github.com/python/cpython/commit/57f5981d6260ed21266e0c26951b8564cc252bc2
- https://github.com/python/cpython/commit/7040aa54f14676938970e10c5f74ea93cd56aa38
- https://github.com/python/cpython/commit/73f03e4808206f71eb6b92c579505a220942ef19
- https://github.com/python/cpython/commit/c9d9f78feb1467e73fd29356c040bde1c104f29f
- https://github.com/python/cpython/commit/fbc2a0ca9ac8aff6887f8ddf79b87b4510277227
- https://github.com/python/cpython/pull/137027
- https://github.com/python/cpython/commit/b4ec17488eedec36d3c05fec127df71c0071f6cb
- https://github.com/python/cpython/commit/cdae923ffe187d6ef916c0f665a31249619193fe
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/8xxx/CVE-2025-8194.json
- https://mail.python.org/archives/list/security-announce@python.org/thread/ZULLF3IZ726XP5EY7XJ7YIN3K5MDYR2D/
- https://nvd.nist.gov/vuln/detail/CVE-2025-8194
- https://github.com/python/cpython
Affected packages
Chainguard / python-3.13
Package
- Name
- python-3.13
- Purl
- pkg:apk/chainguard/python-3.13?arch=aarch64
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed3.13.6-r0
Ecosystem specific
{
"components": [
{
"architecture": "aarch64",
"component_location": "/.PKGINFO",
"component_name": "python-3.13",
"component_purl": "pkg:apk/python-3.13@3.13.5-r4",
"component_type": "apk",
"component_version": "3.13.5-r4",
"latest_event_status": "fixed",
"latest_event_timestamp": "2025-08-12T19:52:48Z"
}
]
}
Wolfi / python-3.13
Package
- Name
- python-3.13
- Purl
- pkg:apk/wolfi/python-3.13?arch=aarch64
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed3.13.6-r0
Ecosystem specific
{
"components": [
{
"architecture": "aarch64",
"component_location": "/.PKGINFO",
"component_name": "python-3.13",
"component_purl": "pkg:apk/python-3.13@3.13.5-r4",
"component_type": "apk",
"component_version": "3.13.5-r4",
"latest_event_status": "fixed",
"latest_event_timestamp": "2025-08-12T19:52:48Z"
}
]
}