CLSA-2026-1779213441
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1779213441.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CLSA-2026-1779213441
- Upstream
- Published
- 2026-05-19T17:57:25Z
- Modified
- 2026-05-27T11:33:12.940843784Z
- Summary
- python3.11: Fix of 11 CVEs
- Details
-
- CVE-2026-4224: avoid unbound C recursion in convcontentmodel in pyexpat
- CVE-2026-3644: reject control characters in http.cookies.Morsel.update()
- CVE-2026-0672: reject control characters in http.cookies.Morsel
- CVE-2025-8291: check consistency of zip64 end of central directory record
- CVE-2025-6069: fix quadratic complexity in processing special input in HTMLParser
- CVE-2025-4516: fix use-after-free in the unicode-escape decoder with error handler
- CVE-2025-15282: reject control characters in data URL mediatypes
- CVE-2025-11468: preserve parenthesis when folding email comments
- CVE-2026-3479: reject invalid resource arguments in pkgutil.get_data()
- CVE-2026-2297: ensure SourcelessFileLoader uses io.open_code
- CVE-2024-5642: disallow setting an empty list for ssl NPN protocols
- References