https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T10:05:54.191244+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/bell-cve-2026-15310 BELL-CVE-2026-15310 2026-10-01T10:05:54.251353+00:00

Affected: Alpaquita:23: python3, Alpaquita:25: python3, Alpaquita:stream: python3, BellSoft Hardened Containers:23: python3, BellSoft Hardened Containers:25: python3, BellSoft Hardened Containers:stream: python3

 https://vulnerability.circl.lu/vuln/bit-libpython-2026-15310 BIT-libpython-2026-15310 — zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits 2026-10-01T10:05:54.251469+00:00

Affected: Bitnami: libpython

When decompressing crafted zip files using the bzip/LZMA/Zstandard

compressions, Python could use an attacker-controlled size to

pre-allocate memory, possibly resulting in memory exhaustion.

 https://vulnerability.circl.lu/vuln/certfr-2026-avi-1087 certfr-2026-avi-1087 — Une vulnérabilité a été découverte dans CPython. Elle permet à un attaquant de provoquer un déni de service à distance. 2026-10-01T10:05:54.251526+00:00 certfr-2026-avi-1087 https://vulnerability.circl.lu/vuln/fkie_cve-2026-15310 fkie_cve-2026-15310 2026-10-01T10:05:54.251562+00:00

When decompressing crafted zip files using the bzip/LZMA/Zstandard

compressions, Python could use an attacker-controlled size to

pre-allocate memory, possibly resulting in memory exhaustion.

 https://vulnerability.circl.lu/vuln/ghsa-xj79-6hh5-9w6q GHSA-xj79-6hh5-9w6q 2026-10-01T10:05:54.251607+00:00

When decompressing crafted zip files using the bzip/LZMA/Zstandard

compressions, Python could use an attacker-controlled size to

pre-allocate memory, possibly resulting in memory exhaustion.

 https://vulnerability.circl.lu/vuln/msrc_cve-2026-15310 msrc_CVE-2026-15310 — zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits 2026-10-01T10:05:54.251637+00:00 msrc_CVE-2026-15310 https://vulnerability.circl.lu/vuln/oesa-2026-3755 OESA-2026-3755 — python3 security update 2026-10-01T10:05:54.251671+00:00

Affected: openEuler:24.03-LTS-SP4: python3

Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces. Security Fix(es):

When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion.(CVE-2026-15310)

 https://vulnerability.circl.lu/vuln/opensuse-su-2026:11868-1 openSUSE-SU-2026:11868-1 — python314-3.14.7-2.1 on GA media 2026-10-01T10:05:54.251720+00:00

python314-3.14.7-2.1 on GA media

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-15310 UBUNTU-CVE-2026-15310 2026-10-01T10:05:54.251752+00:00

Affected: Ubuntu:Pro:14.04:LTS: python2.7, Ubuntu:Pro:14.04:LTS: python3.4, Ubuntu:Pro:14.04:LTS: python3.5, Ubuntu:Pro:16.04:LTS: python2.7, Ubuntu:Pro:16.04:LTS: python3.5, Ubuntu:Pro:18.04:LTS: python2.7, Ubuntu:Pro:18.04:LTS: python3.6, Ubuntu:Pro:18.04:LTS: python3.7, Ubuntu:Pro:18.04:LTS: python3.8, Ubuntu:Pro:20.04:LTS: python3.8 and 7 more

When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion.