Search for packages
| purl | pkg:deb/debian/python3.14@3.14.3-4?distro=sid |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-1pr1-jkqa-43g6 | cpython: CPython: Logging Bypass in Legacy .pyc File Handling |
CVE-2026-2297
|
| VCID-9vcx-2fts-gkfw | cpython: Stack overflow parsing XML with deeply nested DTD content models |
CVE-2026-4224
|
| VCID-gqzt-rh1w-jkfu | cpython: Incomplete control character validation in http.cookies |
CVE-2026-3644
|
| VCID-n4au-q9bs-kucb | The "tarfile" module would still apply normalization of AREGTYPE (\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other implementations. |
CVE-2025-13462
|
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-23T05:41:52.539312+00:00 | Debian Importer | Fixing | VCID-9vcx-2fts-gkfw | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-23T05:41:52.512619+00:00 | Debian Importer | Fixing | VCID-gqzt-rh1w-jkfu | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-23T05:41:52.431576+00:00 | Debian Importer | Fixing | VCID-1pr1-jkqa-43g6 | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-23T05:41:52.170971+00:00 | Debian Importer | Fixing | VCID-n4au-q9bs-kucb | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-03T07:51:01.607326+00:00 | Debian Importer | Fixing | VCID-9vcx-2fts-gkfw | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |
| 2026-04-03T07:51:01.579818+00:00 | Debian Importer | Fixing | VCID-gqzt-rh1w-jkfu | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |
| 2026-04-03T07:51:01.542892+00:00 | Debian Importer | Fixing | VCID-1pr1-jkqa-43g6 | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |
| 2026-04-03T07:51:01.220025+00:00 | Debian Importer | Fixing | VCID-n4au-q9bs-kucb | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |