{"schema_version":"2","view":"grouped","data":[{"id":77233,"cve_ids":["CVE-2026-17084"],"payload":{"kind":"advisory","title":"MINI-22r3-8vpm-rhm7","summary":"MINI-22r3-8vpm-rhm7","evidence":"osv:MINI-22r3-8vpm-rhm7","products":[{"name":{"value":"python-3.12","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.12.15-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.12-base","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.12.15-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.12-base-dev","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.12.15-r0","evidence":"/affected/2/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.12-dev","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.12.15-r0","evidence":"/affected/3/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.12-doc","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.12.15-r0","evidence":"/affected/4/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.12-tk","evidence":"/affected/5/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.12.15-r0","evidence":"/affected/5/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-22r3-8vpm-rhm7","aliases":["MINI-22r3-8vpm-rhm7"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.15-r0"}]}],"package":{"name":"python-3.12","purl":"pkg:apk/minimos/python-3.12","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-22r3-8vpm-rhm7.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.15-r0"}]}],"package":{"name":"python-3.12-base","purl":"pkg:apk/minimos/python-3.12-base","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-22r3-8vpm-rhm7.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.15-r0"}]}],"package":{"name":"python-3.12-base-dev","purl":"pkg:apk/minimos/python-3.12-base-dev","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-22r3-8vpm-rhm7.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.15-r0"}]}],"package":{"name":"python-3.12-dev","purl":"pkg:apk/minimos/python-3.12-dev","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-22r3-8vpm-rhm7.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.15-r0"}]}],"package":{"name":"python-3.12-doc","purl":"pkg:apk/minimos/python-3.12-doc","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-22r3-8vpm-rhm7.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.15-r0"}]}],"package":{"name":"python-3.12-tk","purl":"pkg:apk/minimos/python-3.12-tk","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-22r3-8vpm-rhm7.json"}}],"modified":"2026-10-06T03:15:03.077697779Z","provider":"osv","upstream":["CVE-2026-17084","GHSA-w246-x8qv-r8f5"],"references":[]},"related_cves":[{"value":"CVE-2026-17084","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:6895475b-43ed-467e-b30d-769e3fb5a28e","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-17084","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":6,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"libpython","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-libpython-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"python","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"python-min","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-min-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-22r3-8vpm-rhm7","advisory_id":"6895475b-43ed-467e-b30d-769e3fb5a28e","event_types":["advisory"],"published_at":"2026-10-27T04:06:48.286208+00:00","technologies":["core-osv","python-3-12","python-3-12-base","python-3-12-base-dev","python-3-12-dev","python-3-12-doc","python-3-12-tk"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T20:12:22+00:00","detail_url":"/advisories/advisory%3A6895475b-43ed-467e-b30d-769e3fb5a28e","group":{"id":"advisory:6895475b-43ed-467e-b30d-769e3fb5a28e","revision":1,"primary_event_id":86011,"change":"published","superseded_by":[],"changed":{"id":86011,"cve_ids":["CVE-2026-17084"],"payload":{"kind":"advisory","title":"MINI-22r3-8vpm-rhm7","summary":"MINI-22r3-8vpm-rhm7","evidence":"osv:MINI-22r3-8vpm-rhm7","products":[{"name":{"value":"python-3.12","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.12.15-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.12-base","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.12.15-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.12-base-dev","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.12.15-r0","evidence":"/affected/2/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.12-dev","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.12.15-r0","evidence":"/affected/3/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.12-doc","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.12.15-r0","evidence":"/affected/4/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.12-tk","evidence":"/affected/5/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.12.15-r0","evidence":"/affected/5/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-22r3-8vpm-rhm7","aliases":["MINI-22r3-8vpm-rhm7"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.15-r0"}]}],"package":{"name":"python-3.12","purl":"pkg:apk/minimos/python-3.12","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-22r3-8vpm-rhm7.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.15-r0"}]}],"package":{"name":"python-3.12-base","purl":"pkg:apk/minimos/python-3.12-base","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-22r3-8vpm-rhm7.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.15-r0"}]}],"package":{"name":"python-3.12-base-dev","purl":"pkg:apk/minimos/python-3.12-base-dev","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-22r3-8vpm-rhm7.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.15-r0"}]}],"package":{"name":"python-3.12-dev","purl":"pkg:apk/minimos/python-3.12-dev","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-22r3-8vpm-rhm7.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.15-r0"}]}],"package":{"name":"python-3.12-doc","purl":"pkg:apk/minimos/python-3.12-doc","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-22r3-8vpm-rhm7.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.15-r0"}]}],"package":{"name":"python-3.12-tk","purl":"pkg:apk/minimos/python-3.12-tk","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-22r3-8vpm-rhm7.json"}}],"modified":"2026-10-06T03:15:03.077697779Z","provider":"osv","upstream":["CVE-2026-17084","GHSA-w246-x8qv-r8f5"],"references":[]},"related_cves":[{"value":"CVE-2026-17084","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:6895475b-43ed-467e-b30d-769e3fb5a28e","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-17084","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":6,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"libpython","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-libpython-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"python","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"python-min","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-min-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-22r3-8vpm-rhm7","advisory_id":"6895475b-43ed-467e-b30d-769e3fb5a28e","event_types":["advisory"],"published_at":"2026-10-27T04:06:48.286208+00:00","technologies":["core-osv","python-3-12","python-3-12-base","python-3-12-base-dev","python-3-12-dev","python-3-12-doc","python-3-12-tk"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T20:12:22+00:00","detail_url":"/events/86011"},"members":[{"id":86011,"cve_ids":["CVE-2026-17084"],"payload":{"kind":"advisory","title":"MINI-22r3-8vpm-rhm7","summary":"MINI-22r3-8vpm-rhm7","evidence":"osv:MINI-22r3-8vpm-rhm7","products":[{"name":{"value":"python-3.12","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.12.15-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.12-base","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.12.15-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.12-base-dev","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.12.15-r0","evidence":"/affected/2/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.12-dev","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.12.15-r0","evidence":"/affected/3/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.12-doc","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.12.15-r0","evidence":"/affected/4/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.12-tk","evidence":"/affected/5/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.12.15-r0","evidence":"/affected/5/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-22r3-8vpm-rhm7","aliases":["MINI-22r3-8vpm-rhm7"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.15-r0"}]}],"package":{"name":"python-3.12","purl":"pkg:apk/minimos/python-3.12","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-22r3-8vpm-rhm7.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.15-r0"}]}],"package":{"name":"python-3.12-base","purl":"pkg:apk/minimos/python-3.12-base","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-22r3-8vpm-rhm7.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.15-r0"}]}],"package":{"name":"python-3.12-base-dev","purl":"pkg:apk/minimos/python-3.12-base-dev","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-22r3-8vpm-rhm7.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.15-r0"}]}],"package":{"name":"python-3.12-dev","purl":"pkg:apk/minimos/python-3.12-dev","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-22r3-8vpm-rhm7.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.15-r0"}]}],"package":{"name":"python-3.12-doc","purl":"pkg:apk/minimos/python-3.12-doc","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-22r3-8vpm-rhm7.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.15-r0"}]}],"package":{"name":"python-3.12-tk","purl":"pkg:apk/minimos/python-3.12-tk","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-22r3-8vpm-rhm7.json"}}],"modified":"2026-10-06T03:15:03.077697779Z","provider":"osv","upstream":["CVE-2026-17084","GHSA-w246-x8qv-r8f5"],"references":[]},"related_cves":[{"value":"CVE-2026-17084","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:6895475b-43ed-467e-b30d-769e3fb5a28e","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-17084","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":6,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"libpython","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-libpython-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"python","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"python-min","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-min-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-22r3-8vpm-rhm7","advisory_id":"6895475b-43ed-467e-b30d-769e3fb5a28e","event_types":["advisory"],"published_at":"2026-10-27T04:06:48.286208+00:00","technologies":["core-osv","python-3-12","python-3-12-base","python-3-12-base-dev","python-3-12-dev","python-3-12-doc","python-3-12-tk"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T20:12:22+00:00","detail_url":"/events/86011"}]}},{"id":76318,"cve_ids":["CVE-2026-17084"],"payload":{"kind":"advisory","title":"stringprep.map_table_b2() deviates from RFC 3454 Table B.2","summary":"The \"stringprep\" module didn't process characters from RFC 3454 tables B.2 or B.3 correctly: the latest Unicode codepoint attributes were used instead of the specified Unicode 3.2.0. This behavior would cause mismatches when processing domain names using IDNA 2003 (the \"idna\" codec) and the in_table_b2() function of the \"stringprep\" module. This only affects domain names containing characters that were not previously registered or had their Unicode attributes such as case-folding behavior updated since Unicode 3.2.0.","evidence":"osv:BIT-python-min-2026-17084","products":[{"name":{"value":"python-min","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"BIT-python-min-2026-17084","aliases":["BIT-libpython-2026-17084","BIT-python-2026-17084","BIT-python-min-2026-17084","CVE-2026-17084","PSF-2026-37"],"affected":[{"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.10.22"},{"introduced":"3.11.0"},{"fixed":"3.11.17"},{"introduced":"3.12.0"},{"fixed":"3.12.15"},{"introduced":"3.13.0"},{"fixed":"3.13.16"},{"introduced":"3.14.0"},{"fixed":"3.14.8"}]}],"package":{"name":"python-min","purl":"pkg:bitnami/python-min","ecosystem":"Bitnami"},"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"}],"database_specific":{"source":"https://github.com/bitnami/vulndb/tree/main/data/python-min/BIT-python-min-2026-17084.json"}}],"modified":"2026-10-05T14:30:06.378801440Z","provider":"osv","references":["https://github.com/python/cpython/commit/1e54caa096678a38afcabecabb1ff72400dd6bae","https://github.com/python/cpython/commit/5181304bcec9cfc3c15311741c9154cdff2e3fd7","https://github.com/python/cpython/commit/7e109d084d55e7eb25837a5f3b47ef9beee547bc","https://github.com/python/cpython/commit/c016c2535b74227fddf2cf7334dbfead6c930214","https://github.com/python/cpython/issues/155292","https://github.com/python/cpython/pull/155293","https://mail.python.org/archives/list/security-announce@python.org/thread/EUHHTC6EV7HCLSUHP25C5VHSV4V2MUZN/","https://nvd.nist.gov/vuln/detail/CVE-2026-17084","https://github.com/python/cpython/commit/c28b121a4f0b975937c8b5a1b4934bb361d84296","https://github.com/python/cpython/commit/c42790b34f634051750e5da340d17c7da19e4784","https://github.com/python/cpython/commit/69f92ebaec681e9149dfd70fd02d4ed52d2a6296","https://github.com/python/cpython/commit/d397a4979cfc80a8cd6c73838aa10e9c8cf5ef72"],"provider_metadata":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"severity":"Medium"}},"related_cves":[{"value":"CVE-2026-17084","evidence":"/aliases"}],"security_relevant":true,"severity_evidence":"/database_specific/severity"},"group_id":"advisory:3f9c2338-85ec-41bd-b88d-8a8793c2e37e","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-17084","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":6,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/aliases"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"libpython","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-libpython-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/aliases"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"python","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/aliases"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-min-2026-17084","advisory_id":"3f9c2338-85ec-41bd-b88d-8a8793c2e37e","event_types":["advisory"],"published_at":"2026-10-26T22:36:29.044416+00:00","technologies":["core-osv","python-min"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-11T05:56:24.965+00:00","detail_url":"/advisories/advisory%3A3f9c2338-85ec-41bd-b88d-8a8793c2e37e","group":{"id":"advisory:3f9c2338-85ec-41bd-b88d-8a8793c2e37e","revision":1,"primary_event_id":84119,"change":"published","superseded_by":[],"changed":{"id":84119,"cve_ids":["CVE-2026-17084"],"payload":{"kind":"advisory","title":"stringprep.map_table_b2() deviates from RFC 3454 Table B.2","summary":"The \"stringprep\" module didn't process characters from RFC 3454 tables B.2 or B.3 correctly: the latest Unicode codepoint attributes were used instead of the specified Unicode 3.2.0. This behavior would cause mismatches when processing domain names using IDNA 2003 (the \"idna\" codec) and the in_table_b2() function of the \"stringprep\" module. This only affects domain names containing characters that were not previously registered or had their Unicode attributes such as case-folding behavior updated since Unicode 3.2.0.","evidence":"osv:BIT-python-min-2026-17084","products":[{"name":{"value":"python-min","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"BIT-python-min-2026-17084","aliases":["BIT-libpython-2026-17084","BIT-python-2026-17084","BIT-python-min-2026-17084","CVE-2026-17084","PSF-2026-37"],"affected":[{"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.10.22"},{"introduced":"3.11.0"},{"fixed":"3.11.17"},{"introduced":"3.12.0"},{"fixed":"3.12.15"},{"introduced":"3.13.0"},{"fixed":"3.13.16"},{"introduced":"3.14.0"},{"fixed":"3.14.8"}]}],"package":{"name":"python-min","purl":"pkg:bitnami/python-min","ecosystem":"Bitnami"},"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"}],"database_specific":{"source":"https://github.com/bitnami/vulndb/tree/main/data/python-min/BIT-python-min-2026-17084.json"}}],"modified":"2026-10-05T14:30:06.378801440Z","provider":"osv","references":["https://github.com/python/cpython/commit/1e54caa096678a38afcabecabb1ff72400dd6bae","https://github.com/python/cpython/commit/5181304bcec9cfc3c15311741c9154cdff2e3fd7","https://github.com/python/cpython/commit/7e109d084d55e7eb25837a5f3b47ef9beee547bc","https://github.com/python/cpython/commit/c016c2535b74227fddf2cf7334dbfead6c930214","https://github.com/python/cpython/issues/155292","https://github.com/python/cpython/pull/155293","https://mail.python.org/archives/list/security-announce@python.org/thread/EUHHTC6EV7HCLSUHP25C5VHSV4V2MUZN/","https://nvd.nist.gov/vuln/detail/CVE-2026-17084","https://github.com/python/cpython/commit/c28b121a4f0b975937c8b5a1b4934bb361d84296","https://github.com/python/cpython/commit/c42790b34f634051750e5da340d17c7da19e4784","https://github.com/python/cpython/commit/69f92ebaec681e9149dfd70fd02d4ed52d2a6296","https://github.com/python/cpython/commit/d397a4979cfc80a8cd6c73838aa10e9c8cf5ef72"],"provider_metadata":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"severity":"Medium"}},"related_cves":[{"value":"CVE-2026-17084","evidence":"/aliases"}],"security_relevant":true,"severity_evidence":"/database_specific/severity"},"group_id":"advisory:3f9c2338-85ec-41bd-b88d-8a8793c2e37e","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-17084","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":6,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/aliases"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"libpython","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-libpython-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/aliases"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"python","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/aliases"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-min-2026-17084","advisory_id":"3f9c2338-85ec-41bd-b88d-8a8793c2e37e","event_types":["advisory"],"published_at":"2026-10-26T22:36:29.044416+00:00","technologies":["core-osv","python-min"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-11T05:56:24.965+00:00","detail_url":"/events/84119"},"members":[{"id":84119,"cve_ids":["CVE-2026-17084"],"payload":{"kind":"advisory","title":"stringprep.map_table_b2() deviates from RFC 3454 Table B.2","summary":"The \"stringprep\" module didn't process characters from RFC 3454 tables B.2 or B.3 correctly: the latest Unicode codepoint attributes were used instead of the specified Unicode 3.2.0. This behavior would cause mismatches when processing domain names using IDNA 2003 (the \"idna\" codec) and the in_table_b2() function of the \"stringprep\" module. This only affects domain names containing characters that were not previously registered or had their Unicode attributes such as case-folding behavior updated since Unicode 3.2.0.","evidence":"osv:BIT-python-min-2026-17084","products":[{"name":{"value":"python-min","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"BIT-python-min-2026-17084","aliases":["BIT-libpython-2026-17084","BIT-python-2026-17084","BIT-python-min-2026-17084","CVE-2026-17084","PSF-2026-37"],"affected":[{"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.10.22"},{"introduced":"3.11.0"},{"fixed":"3.11.17"},{"introduced":"3.12.0"},{"fixed":"3.12.15"},{"introduced":"3.13.0"},{"fixed":"3.13.16"},{"introduced":"3.14.0"},{"fixed":"3.14.8"}]}],"package":{"name":"python-min","purl":"pkg:bitnami/python-min","ecosystem":"Bitnami"},"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"}],"database_specific":{"source":"https://github.com/bitnami/vulndb/tree/main/data/python-min/BIT-python-min-2026-17084.json"}}],"modified":"2026-10-05T14:30:06.378801440Z","provider":"osv","references":["https://github.com/python/cpython/commit/1e54caa096678a38afcabecabb1ff72400dd6bae","https://github.com/python/cpython/commit/5181304bcec9cfc3c15311741c9154cdff2e3fd7","https://github.com/python/cpython/commit/7e109d084d55e7eb25837a5f3b47ef9beee547bc","https://github.com/python/cpython/commit/c016c2535b74227fddf2cf7334dbfead6c930214","https://github.com/python/cpython/issues/155292","https://github.com/python/cpython/pull/155293","https://mail.python.org/archives/list/security-announce@python.org/thread/EUHHTC6EV7HCLSUHP25C5VHSV4V2MUZN/","https://nvd.nist.gov/vuln/detail/CVE-2026-17084","https://github.com/python/cpython/commit/c28b121a4f0b975937c8b5a1b4934bb361d84296","https://github.com/python/cpython/commit/c42790b34f634051750e5da340d17c7da19e4784","https://github.com/python/cpython/commit/69f92ebaec681e9149dfd70fd02d4ed52d2a6296","https://github.com/python/cpython/commit/d397a4979cfc80a8cd6c73838aa10e9c8cf5ef72"],"provider_metadata":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"severity":"Medium"}},"related_cves":[{"value":"CVE-2026-17084","evidence":"/aliases"}],"security_relevant":true,"severity_evidence":"/database_specific/severity"},"group_id":"advisory:3f9c2338-85ec-41bd-b88d-8a8793c2e37e","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-17084","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":6,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/aliases"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"libpython","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-libpython-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/aliases"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"python","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/aliases"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-min-2026-17084","advisory_id":"3f9c2338-85ec-41bd-b88d-8a8793c2e37e","event_types":["advisory"],"published_at":"2026-10-26T22:36:29.044416+00:00","technologies":["core-osv","python-min"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-11T05:56:24.965+00:00","detail_url":"/events/84119"}]}},{"id":76310,"cve_ids":["CVE-2026-17084"],"payload":{"kind":"advisory","title":"stringprep.map_table_b2() deviates from RFC 3454 Table B.2","summary":"The \"stringprep\" module didn't process characters from RFC 3454 tables B.2 or B.3 correctly: the latest Unicode codepoint attributes were used instead of the specified Unicode 3.2.0. This behavior would cause mismatches when processing domain names using IDNA 2003 (the \"idna\" codec) and the in_table_b2() function of the \"stringprep\" module. This only affects domain names containing characters that were not previously registered or had their Unicode attributes such as case-folding behavior updated since Unicode 3.2.0.","evidence":"osv:BIT-python-2026-17084","products":[{"name":{"value":"python","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"BIT-python-2026-17084","aliases":["BIT-libpython-2026-17084","BIT-python-2026-17084","BIT-python-min-2026-17084","CVE-2026-17084","PSF-2026-37"],"affected":[{"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.10.22"},{"introduced":"3.11.0"},{"fixed":"3.11.17"},{"introduced":"3.12.0"},{"fixed":"3.12.15"},{"introduced":"3.13.0"},{"fixed":"3.13.16"},{"introduced":"3.14.0"},{"fixed":"3.14.8"}]}],"package":{"name":"python","purl":"pkg:bitnami/python","ecosystem":"Bitnami"},"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"}],"database_specific":{"source":"https://github.com/bitnami/vulndb/tree/main/data/python/BIT-python-2026-17084.json"}}],"modified":"2026-10-05T14:30:06.075890190Z","provider":"osv","references":["https://github.com/python/cpython/commit/1e54caa096678a38afcabecabb1ff72400dd6bae","https://github.com/python/cpython/commit/5181304bcec9cfc3c15311741c9154cdff2e3fd7","https://github.com/python/cpython/commit/7e109d084d55e7eb25837a5f3b47ef9beee547bc","https://github.com/python/cpython/commit/c016c2535b74227fddf2cf7334dbfead6c930214","https://github.com/python/cpython/issues/155292","https://github.com/python/cpython/pull/155293","https://mail.python.org/archives/list/security-announce@python.org/thread/EUHHTC6EV7HCLSUHP25C5VHSV4V2MUZN/","https://nvd.nist.gov/vuln/detail/CVE-2026-17084","https://github.com/python/cpython/commit/c28b121a4f0b975937c8b5a1b4934bb361d84296","https://github.com/python/cpython/commit/c42790b34f634051750e5da340d17c7da19e4784","https://github.com/python/cpython/commit/69f92ebaec681e9149dfd70fd02d4ed52d2a6296","https://github.com/python/cpython/commit/d397a4979cfc80a8cd6c73838aa10e9c8cf5ef72"],"provider_metadata":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"severity":"Medium"}},"related_cves":[{"value":"CVE-2026-17084","evidence":"/aliases"}],"security_relevant":true,"severity_evidence":"/database_specific/severity"},"group_id":"advisory:2146ce21-32a8-478b-a2b1-006eba857cef","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-17084","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":6,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/aliases"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"libpython","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-libpython-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/aliases"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"python-min","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-min-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/aliases"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":2,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-2026-17084","advisory_id":"2146ce21-32a8-478b-a2b1-006eba857cef","event_types":["advisory"],"published_at":"2026-10-26T22:36:24.622257+00:00","technologies":["core-osv","python"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-11T05:56:25.239+00:00","detail_url":"/advisories/advisory%3A2146ce21-32a8-478b-a2b1-006eba857cef","group":{"id":"advisory:2146ce21-32a8-478b-a2b1-006eba857cef","revision":1,"primary_event_id":84120,"change":"published","superseded_by":[],"changed":{"id":84089,"cve_ids":["CVE-2026-17084"],"payload":{"kind":"advisory","title":"stringprep.map_table_b2() deviates from RFC 3454 Table B.2","summary":"The \"stringprep\" module didn't process characters from RFC 3454 tables B.2 or B.3 correctly: the latest Unicode codepoint attributes were used instead of the specified Unicode 3.2.0. This behavior would cause mismatches when processing domain names using IDNA 2003 (the \"idna\" codec) and the in_table_b2() function of the \"stringprep\" module. This only affects domain names containing characters that were not previously registered or had their Unicode attributes such as case-folding behavior updated since Unicode 3.2.0.","evidence":"osv:BIT-python-2026-17084","products":[{"name":{"value":"python","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"BIT-python-2026-17084","aliases":["BIT-libpython-2026-17084","BIT-python-2026-17084","BIT-python-min-2026-17084","CVE-2026-17084","PSF-2026-37"],"affected":[{"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.10.22"},{"introduced":"3.11.0"},{"fixed":"3.11.17"},{"introduced":"3.12.0"},{"fixed":"3.12.15"},{"introduced":"3.13.0"},{"fixed":"3.13.16"},{"introduced":"3.14.0"},{"fixed":"3.14.8"}]}],"package":{"name":"python","purl":"pkg:bitnami/python","ecosystem":"Bitnami"},"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"}],"database_specific":{"source":"https://github.com/bitnami/vulndb/tree/main/data/python/BIT-python-2026-17084.json"}}],"modified":"2026-10-05T14:30:06.075890190Z","provider":"osv","references":["https://github.com/python/cpython/commit/1e54caa096678a38afcabecabb1ff72400dd6bae","https://github.com/python/cpython/commit/5181304bcec9cfc3c15311741c9154cdff2e3fd7","https://github.com/python/cpython/commit/7e109d084d55e7eb25837a5f3b47ef9beee547bc","https://github.com/python/cpython/commit/c016c2535b74227fddf2cf7334dbfead6c930214","https://github.com/python/cpython/issues/155292","https://github.com/python/cpython/pull/155293","https://mail.python.org/archives/list/security-announce@python.org/thread/EUHHTC6EV7HCLSUHP25C5VHSV4V2MUZN/","https://nvd.nist.gov/vuln/detail/CVE-2026-17084","https://github.com/python/cpython/commit/c28b121a4f0b975937c8b5a1b4934bb361d84296","https://github.com/python/cpython/commit/c42790b34f634051750e5da340d17c7da19e4784","https://github.com/python/cpython/commit/69f92ebaec681e9149dfd70fd02d4ed52d2a6296","https://github.com/python/cpython/commit/d397a4979cfc80a8cd6c73838aa10e9c8cf5ef72"],"provider_metadata":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"severity":"Medium"}},"related_cves":[{"value":"CVE-2026-17084","evidence":"/aliases"}],"security_relevant":true,"severity_evidence":"/database_specific/severity"},"group_id":"advisory:2146ce21-32a8-478b-a2b1-006eba857cef","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-17084","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":6,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/aliases"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"libpython","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-libpython-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/aliases"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-2026-17084","advisory_id":"2146ce21-32a8-478b-a2b1-006eba857cef","event_types":["advisory"],"published_at":"2026-10-26T22:36:24.622257+00:00","technologies":["core-osv","python"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-11T05:56:25.239+00:00","detail_url":"/events/84089"},"members":[{"id":84120,"cve_ids":["CVE-2026-17084"],"payload":{"kind":"advisory","title":"stringprep.map_table_b2() deviates from RFC 3454 Table B.2","summary":"The \"stringprep\" module didn't process characters from RFC 3454 tables B.2 or B.3 correctly: the latest Unicode codepoint attributes were used instead of the specified Unicode 3.2.0. This behavior would cause mismatches when processing domain names using IDNA 2003 (the \"idna\" codec) and the in_table_b2() function of the \"stringprep\" module. This only affects domain names containing characters that were not previously registered or had their Unicode attributes such as case-folding behavior updated since Unicode 3.2.0.","evidence":"osv:BIT-python-2026-17084","products":[{"name":{"value":"python","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"BIT-python-2026-17084","aliases":["BIT-libpython-2026-17084","BIT-python-2026-17084","BIT-python-min-2026-17084","CVE-2026-17084","PSF-2026-37"],"affected":[{"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.10.22"},{"introduced":"3.11.0"},{"fixed":"3.11.17"},{"introduced":"3.12.0"},{"fixed":"3.12.15"},{"introduced":"3.13.0"},{"fixed":"3.13.16"},{"introduced":"3.14.0"},{"fixed":"3.14.8"}]}],"package":{"name":"python","purl":"pkg:bitnami/python","ecosystem":"Bitnami"},"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"}],"database_specific":{"source":"https://github.com/bitnami/vulndb/tree/main/data/python/BIT-python-2026-17084.json"}}],"modified":"2026-10-05T14:30:06.075890190Z","provider":"osv","references":["https://github.com/python/cpython/commit/1e54caa096678a38afcabecabb1ff72400dd6bae","https://github.com/python/cpython/commit/5181304bcec9cfc3c15311741c9154cdff2e3fd7","https://github.com/python/cpython/commit/7e109d084d55e7eb25837a5f3b47ef9beee547bc","https://github.com/python/cpython/commit/c016c2535b74227fddf2cf7334dbfead6c930214","https://github.com/python/cpython/issues/155292","https://github.com/python/cpython/pull/155293","https://mail.python.org/archives/list/security-announce@python.org/thread/EUHHTC6EV7HCLSUHP25C5VHSV4V2MUZN/","https://nvd.nist.gov/vuln/detail/CVE-2026-17084","https://github.com/python/cpython/commit/c28b121a4f0b975937c8b5a1b4934bb361d84296","https://github.com/python/cpython/commit/c42790b34f634051750e5da340d17c7da19e4784","https://github.com/python/cpython/commit/69f92ebaec681e9149dfd70fd02d4ed52d2a6296","https://github.com/python/cpython/commit/d397a4979cfc80a8cd6c73838aa10e9c8cf5ef72"],"provider_metadata":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"severity":"Medium"}},"related_cves":[{"value":"CVE-2026-17084","evidence":"/aliases"}],"security_relevant":true,"severity_evidence":"/database_specific/severity"},"group_id":"advisory:2146ce21-32a8-478b-a2b1-006eba857cef","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-17084","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":6,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/aliases"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"libpython","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-libpython-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/aliases"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"python-min","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-min-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/aliases"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":2,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-2026-17084","advisory_id":"2146ce21-32a8-478b-a2b1-006eba857cef","event_types":["advisory"],"published_at":"2026-10-26T22:36:29.044416+00:00","technologies":["core-osv","python"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-09-11T05:56:25.239+00:00","detail_url":"/events/84120"}]}},{"id":76294,"cve_ids":["CVE-2026-17084"],"payload":{"kind":"advisory","title":"stringprep.map_table_b2() deviates from RFC 3454 Table B.2","summary":"The \"stringprep\" module didn't process characters from RFC 3454 tables B.2 or B.3 correctly: the latest Unicode codepoint attributes were used instead of the specified Unicode 3.2.0. This behavior would cause mismatches when processing domain names using IDNA 2003 (the \"idna\" codec) and the in_table_b2() function of the \"stringprep\" module. This only affects domain names containing characters that were not previously registered or had their Unicode attributes such as case-folding behavior updated since Unicode 3.2.0.","evidence":"osv:BIT-libpython-2026-17084","products":[{"name":{"value":"libpython","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"BIT-libpython-2026-17084","aliases":["BIT-libpython-2026-17084","BIT-python-2026-17084","BIT-python-min-2026-17084","CVE-2026-17084","PSF-2026-37"],"affected":[{"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.10.22"},{"introduced":"3.11.0"},{"fixed":"3.11.17"},{"introduced":"3.12.0"},{"fixed":"3.12.15"},{"introduced":"3.13.0"},{"fixed":"3.13.16"},{"introduced":"3.14.0"},{"fixed":"3.14.8"}]}],"package":{"name":"libpython","purl":"pkg:bitnami/libpython","ecosystem":"Bitnami"},"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"}],"database_specific":{"source":"https://github.com/bitnami/vulndb/tree/main/data/libpython/BIT-libpython-2026-17084.json"}}],"modified":"2026-10-05T14:30:04.546956888Z","provider":"osv","references":["https://github.com/python/cpython/commit/1e54caa096678a38afcabecabb1ff72400dd6bae","https://github.com/python/cpython/commit/5181304bcec9cfc3c15311741c9154cdff2e3fd7","https://github.com/python/cpython/commit/7e109d084d55e7eb25837a5f3b47ef9beee547bc","https://github.com/python/cpython/commit/c016c2535b74227fddf2cf7334dbfead6c930214","https://github.com/python/cpython/issues/155292","https://github.com/python/cpython/pull/155293","https://mail.python.org/archives/list/security-announce@python.org/thread/EUHHTC6EV7HCLSUHP25C5VHSV4V2MUZN/","https://nvd.nist.gov/vuln/detail/CVE-2026-17084","https://github.com/python/cpython/commit/c28b121a4f0b975937c8b5a1b4934bb361d84296","https://github.com/python/cpython/commit/c42790b34f634051750e5da340d17c7da19e4784","https://github.com/python/cpython/commit/69f92ebaec681e9149dfd70fd02d4ed52d2a6296","https://github.com/python/cpython/commit/d397a4979cfc80a8cd6c73838aa10e9c8cf5ef72"],"provider_metadata":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"severity":"Medium"}},"related_cves":[{"value":"CVE-2026-17084","evidence":"/aliases"}],"security_relevant":true,"severity_evidence":"/database_specific/severity"},"group_id":"advisory:9edca1e8-d938-43c3-9270-7c6ff9b35b54","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-17084","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":6,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/aliases"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"python","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/aliases"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"python-min","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-min-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/aliases"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":3,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-libpython-2026-17084","advisory_id":"9edca1e8-d938-43c3-9270-7c6ff9b35b54","event_types":["advisory"],"published_at":"2026-10-26T22:36:10.61774+00:00","technologies":["core-osv","libpython"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-11T05:48:23.581+00:00","detail_url":"/advisories/advisory%3A9edca1e8-d938-43c3-9270-7c6ff9b35b54","group":{"id":"advisory:9edca1e8-d938-43c3-9270-7c6ff9b35b54","revision":1,"primary_event_id":84121,"change":"published","superseded_by":[],"changed":{"id":83999,"cve_ids":["CVE-2026-17084"],"payload":{"kind":"advisory","title":"stringprep.map_table_b2() deviates from RFC 3454 Table B.2","summary":"The \"stringprep\" module didn't process characters from RFC 3454 tables B.2 or B.3 correctly: the latest Unicode codepoint attributes were used instead of the specified Unicode 3.2.0. This behavior would cause mismatches when processing domain names using IDNA 2003 (the \"idna\" codec) and the in_table_b2() function of the \"stringprep\" module. This only affects domain names containing characters that were not previously registered or had their Unicode attributes such as case-folding behavior updated since Unicode 3.2.0.","evidence":"osv:BIT-libpython-2026-17084","products":[{"name":{"value":"libpython","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"BIT-libpython-2026-17084","aliases":["BIT-libpython-2026-17084","BIT-python-2026-17084","BIT-python-min-2026-17084","CVE-2026-17084","PSF-2026-37"],"affected":[{"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.10.22"},{"introduced":"3.11.0"},{"fixed":"3.11.17"},{"introduced":"3.12.0"},{"fixed":"3.12.15"},{"introduced":"3.13.0"},{"fixed":"3.13.16"},{"introduced":"3.14.0"},{"fixed":"3.14.8"}]}],"package":{"name":"libpython","purl":"pkg:bitnami/libpython","ecosystem":"Bitnami"},"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"}],"database_specific":{"source":"https://github.com/bitnami/vulndb/tree/main/data/libpython/BIT-libpython-2026-17084.json"}}],"modified":"2026-10-05T14:30:04.546956888Z","provider":"osv","references":["https://github.com/python/cpython/commit/1e54caa096678a38afcabecabb1ff72400dd6bae","https://github.com/python/cpython/commit/5181304bcec9cfc3c15311741c9154cdff2e3fd7","https://github.com/python/cpython/commit/7e109d084d55e7eb25837a5f3b47ef9beee547bc","https://github.com/python/cpython/commit/c016c2535b74227fddf2cf7334dbfead6c930214","https://github.com/python/cpython/issues/155292","https://github.com/python/cpython/pull/155293","https://mail.python.org/archives/list/security-announce@python.org/thread/EUHHTC6EV7HCLSUHP25C5VHSV4V2MUZN/","https://nvd.nist.gov/vuln/detail/CVE-2026-17084","https://github.com/python/cpython/commit/c28b121a4f0b975937c8b5a1b4934bb361d84296","https://github.com/python/cpython/commit/c42790b34f634051750e5da340d17c7da19e4784","https://github.com/python/cpython/commit/69f92ebaec681e9149dfd70fd02d4ed52d2a6296","https://github.com/python/cpython/commit/d397a4979cfc80a8cd6c73838aa10e9c8cf5ef72"],"provider_metadata":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"severity":"Medium"}},"related_cves":[{"value":"CVE-2026-17084","evidence":"/aliases"}],"security_relevant":true,"severity_evidence":"/database_specific/severity"},"group_id":"advisory:9edca1e8-d938-43c3-9270-7c6ff9b35b54","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-17084","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":6,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/aliases"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-libpython-2026-17084","advisory_id":"9edca1e8-d938-43c3-9270-7c6ff9b35b54","event_types":["advisory"],"published_at":"2026-10-26T22:36:10.61774+00:00","technologies":["core-osv","libpython"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-11T05:48:23.581+00:00","detail_url":"/events/83999"},"members":[{"id":84121,"cve_ids":["CVE-2026-17084"],"payload":{"kind":"advisory","title":"stringprep.map_table_b2() deviates from RFC 3454 Table B.2","summary":"The \"stringprep\" module didn't process characters from RFC 3454 tables B.2 or B.3 correctly: the latest Unicode codepoint attributes were used instead of the specified Unicode 3.2.0. This behavior would cause mismatches when processing domain names using IDNA 2003 (the \"idna\" codec) and the in_table_b2() function of the \"stringprep\" module. This only affects domain names containing characters that were not previously registered or had their Unicode attributes such as case-folding behavior updated since Unicode 3.2.0.","evidence":"osv:BIT-libpython-2026-17084","products":[{"name":{"value":"libpython","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"BIT-libpython-2026-17084","aliases":["BIT-libpython-2026-17084","BIT-python-2026-17084","BIT-python-min-2026-17084","CVE-2026-17084","PSF-2026-37"],"affected":[{"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.10.22"},{"introduced":"3.11.0"},{"fixed":"3.11.17"},{"introduced":"3.12.0"},{"fixed":"3.12.15"},{"introduced":"3.13.0"},{"fixed":"3.13.16"},{"introduced":"3.14.0"},{"fixed":"3.14.8"}]}],"package":{"name":"libpython","purl":"pkg:bitnami/libpython","ecosystem":"Bitnami"},"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"}],"database_specific":{"source":"https://github.com/bitnami/vulndb/tree/main/data/libpython/BIT-libpython-2026-17084.json"}}],"modified":"2026-10-05T14:30:04.546956888Z","provider":"osv","references":["https://github.com/python/cpython/commit/1e54caa096678a38afcabecabb1ff72400dd6bae","https://github.com/python/cpython/commit/5181304bcec9cfc3c15311741c9154cdff2e3fd7","https://github.com/python/cpython/commit/7e109d084d55e7eb25837a5f3b47ef9beee547bc","https://github.com/python/cpython/commit/c016c2535b74227fddf2cf7334dbfead6c930214","https://github.com/python/cpython/issues/155292","https://github.com/python/cpython/pull/155293","https://mail.python.org/archives/list/security-announce@python.org/thread/EUHHTC6EV7HCLSUHP25C5VHSV4V2MUZN/","https://nvd.nist.gov/vuln/detail/CVE-2026-17084","https://github.com/python/cpython/commit/c28b121a4f0b975937c8b5a1b4934bb361d84296","https://github.com/python/cpython/commit/c42790b34f634051750e5da340d17c7da19e4784","https://github.com/python/cpython/commit/69f92ebaec681e9149dfd70fd02d4ed52d2a6296","https://github.com/python/cpython/commit/d397a4979cfc80a8cd6c73838aa10e9c8cf5ef72"],"provider_metadata":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"severity":"Medium"}},"related_cves":[{"value":"CVE-2026-17084","evidence":"/aliases"}],"security_relevant":true,"severity_evidence":"/database_specific/severity"},"group_id":"advisory:9edca1e8-d938-43c3-9270-7c6ff9b35b54","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-17084","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":6,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/aliases"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"python","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/aliases"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"python-min","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-min-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/aliases"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":3,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-libpython-2026-17084","advisory_id":"9edca1e8-d938-43c3-9270-7c6ff9b35b54","event_types":["advisory"],"published_at":"2026-10-26T22:36:29.044416+00:00","technologies":["core-osv","libpython"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-09-11T05:48:23.581+00:00","detail_url":"/events/84121"}]}},{"id":75094,"cve_ids":["CVE-2026-17084"],"payload":{"kind":"advisory","title":"BELL-CVE-2026-17084","summary":"BELL-CVE-2026-17084","evidence":"osv:BELL-CVE-2026-17084","products":[{"name":{"value":"python3","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.11.17-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"python3","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.12.15-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]},{"name":{"value":"python3","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.14.8-r3","evidence":"/affected/2/ranges"}],"affected_versions":[]},{"name":{"value":"python3","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.11.17-r0","evidence":"/affected/3/ranges"}],"affected_versions":[]},{"name":{"value":"python3","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.12.15-r0","evidence":"/affected/4/ranges"}],"affected_versions":[]},{"name":{"value":"python3","evidence":"/affected/5/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.14.8-r3","evidence":"/affected/5/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"BELL-CVE-2026-17084","aliases":["BELL-CVE-2026-17084"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.11.3-r0"},{"fixed":"3.11.17-r0"}]}],"package":{"name":"python3","purl":"pkg:apk/alpaquita/python3?arch=source&distro=23","ecosystem":"Alpaquita:23"},"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-17084.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.12.10-r1"},{"fixed":"3.12.15-r0"}]}],"package":{"name":"python3","purl":"pkg:apk/alpaquita/python3?arch=source&distro=25","ecosystem":"Alpaquita:25"},"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-17084.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.11.4-r0"},{"fixed":"3.14.8-r3"}]}],"package":{"name":"python3","purl":"pkg:apk/alpaquita/python3?arch=source&distro=stream","ecosystem":"Alpaquita:stream"},"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-17084.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.11.3-r0"},{"fixed":"3.11.17-r0"}]}],"package":{"name":"python3","purl":"pkg:apk/bellsoft-hardened-containers/python3?arch=source&distro=23","ecosystem":"BellSoft Hardened Containers:23"},"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-17084.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.12.10-r1"},{"fixed":"3.12.15-r0"}]}],"package":{"name":"python3","purl":"pkg:apk/bellsoft-hardened-containers/python3?arch=source&distro=25","ecosystem":"BellSoft Hardened Containers:25"},"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-17084.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.11.4-r0"},{"fixed":"3.14.8-r3"}]}],"package":{"name":"python3","purl":"pkg:apk/bellsoft-hardened-containers/python3?arch=source&distro=stream","ecosystem":"BellSoft Hardened Containers:stream"},"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-17084.json"}}],"modified":"2026-10-04T07:15:03.520127464Z","provider":"osv","upstream":["CVE-2026-17084"],"references":["https://docs.bell-sw.com/security/cves/CVE-2026-17084"]},"related_cves":[{"value":"CVE-2026-17084","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:da219d27-57c2-4839-8917-ae71a1bffab6","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-17084","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":6,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"libpython","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-libpython-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"python","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"python-min","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-min-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":4,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BELL-CVE-2026-17084","advisory_id":"da219d27-57c2-4839-8917-ae71a1bffab6","event_types":["advisory"],"published_at":"2026-10-26T15:56:17.279259+00:00","technologies":["core-osv","python3"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-08-20T06:06:25.191+00:00","detail_url":"/advisories/advisory%3Ada219d27-57c2-4839-8917-ae71a1bffab6","group":{"id":"advisory:da219d27-57c2-4839-8917-ae71a1bffab6","revision":1,"primary_event_id":84125,"change":"published","superseded_by":[],"changed":{"id":81484,"cve_ids":["CVE-2026-17084"],"payload":{"kind":"advisory","title":"BELL-CVE-2026-17084","summary":"BELL-CVE-2026-17084","evidence":"osv:BELL-CVE-2026-17084","products":[{"name":{"value":"python3","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.11.17-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"python3","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.12.15-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]},{"name":{"value":"python3","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.14.8-r3","evidence":"/affected/2/ranges"}],"affected_versions":[]},{"name":{"value":"python3","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.11.17-r0","evidence":"/affected/3/ranges"}],"affected_versions":[]},{"name":{"value":"python3","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.12.15-r0","evidence":"/affected/4/ranges"}],"affected_versions":[]},{"name":{"value":"python3","evidence":"/affected/5/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.14.8-r3","evidence":"/affected/5/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"BELL-CVE-2026-17084","aliases":["BELL-CVE-2026-17084"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.11.3-r0"},{"fixed":"3.11.17-r0"}]}],"package":{"name":"python3","purl":"pkg:apk/alpaquita/python3?arch=source&distro=23","ecosystem":"Alpaquita:23"},"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-17084.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.12.10-r1"},{"fixed":"3.12.15-r0"}]}],"package":{"name":"python3","purl":"pkg:apk/alpaquita/python3?arch=source&distro=25","ecosystem":"Alpaquita:25"},"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-17084.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.11.4-r0"},{"fixed":"3.14.8-r3"}]}],"package":{"name":"python3","purl":"pkg:apk/alpaquita/python3?arch=source&distro=stream","ecosystem":"Alpaquita:stream"},"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-17084.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.11.3-r0"},{"fixed":"3.11.17-r0"}]}],"package":{"name":"python3","purl":"pkg:apk/bellsoft-hardened-containers/python3?arch=source&distro=23","ecosystem":"BellSoft Hardened Containers:23"},"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-17084.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.12.10-r1"},{"fixed":"3.12.15-r0"}]}],"package":{"name":"python3","purl":"pkg:apk/bellsoft-hardened-containers/python3?arch=source&distro=25","ecosystem":"BellSoft Hardened Containers:25"},"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-17084.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.11.4-r0"},{"fixed":"3.14.8-r3"}]}],"package":{"name":"python3","purl":"pkg:apk/bellsoft-hardened-containers/python3?arch=source&distro=stream","ecosystem":"BellSoft Hardened Containers:stream"},"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-17084.json"}}],"modified":"2026-10-04T07:15:03.520127464Z","provider":"osv","upstream":["CVE-2026-17084"],"references":["https://docs.bell-sw.com/security/cves/CVE-2026-17084"]},"related_cves":[{"value":"CVE-2026-17084","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:da219d27-57c2-4839-8917-ae71a1bffab6","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-17084","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":6,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BELL-CVE-2026-17084","advisory_id":"da219d27-57c2-4839-8917-ae71a1bffab6","event_types":["advisory"],"published_at":"2026-10-26T15:56:17.279259+00:00","technologies":["core-osv","python3"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-08-20T06:06:25.191+00:00","detail_url":"/events/81484"},"members":[{"id":84125,"cve_ids":["CVE-2026-17084"],"payload":{"kind":"advisory","title":"BELL-CVE-2026-17084","summary":"BELL-CVE-2026-17084","evidence":"osv:BELL-CVE-2026-17084","products":[{"name":{"value":"python3","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.11.17-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"python3","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.12.15-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]},{"name":{"value":"python3","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.14.8-r3","evidence":"/affected/2/ranges"}],"affected_versions":[]},{"name":{"value":"python3","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.11.17-r0","evidence":"/affected/3/ranges"}],"affected_versions":[]},{"name":{"value":"python3","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.12.15-r0","evidence":"/affected/4/ranges"}],"affected_versions":[]},{"name":{"value":"python3","evidence":"/affected/5/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.14.8-r3","evidence":"/affected/5/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"BELL-CVE-2026-17084","aliases":["BELL-CVE-2026-17084"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.11.3-r0"},{"fixed":"3.11.17-r0"}]}],"package":{"name":"python3","purl":"pkg:apk/alpaquita/python3?arch=source&distro=23","ecosystem":"Alpaquita:23"},"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-17084.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.12.10-r1"},{"fixed":"3.12.15-r0"}]}],"package":{"name":"python3","purl":"pkg:apk/alpaquita/python3?arch=source&distro=25","ecosystem":"Alpaquita:25"},"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-17084.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.11.4-r0"},{"fixed":"3.14.8-r3"}]}],"package":{"name":"python3","purl":"pkg:apk/alpaquita/python3?arch=source&distro=stream","ecosystem":"Alpaquita:stream"},"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-17084.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.11.3-r0"},{"fixed":"3.11.17-r0"}]}],"package":{"name":"python3","purl":"pkg:apk/bellsoft-hardened-containers/python3?arch=source&distro=23","ecosystem":"BellSoft Hardened Containers:23"},"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-17084.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.12.10-r1"},{"fixed":"3.12.15-r0"}]}],"package":{"name":"python3","purl":"pkg:apk/bellsoft-hardened-containers/python3?arch=source&distro=25","ecosystem":"BellSoft Hardened Containers:25"},"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-17084.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.11.4-r0"},{"fixed":"3.14.8-r3"}]}],"package":{"name":"python3","purl":"pkg:apk/bellsoft-hardened-containers/python3?arch=source&distro=stream","ecosystem":"BellSoft Hardened Containers:stream"},"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-17084.json"}}],"modified":"2026-10-04T07:15:03.520127464Z","provider":"osv","upstream":["CVE-2026-17084"],"references":["https://docs.bell-sw.com/security/cves/CVE-2026-17084"]},"related_cves":[{"value":"CVE-2026-17084","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:da219d27-57c2-4839-8917-ae71a1bffab6","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-17084","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":6,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"libpython","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-libpython-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"python","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"python-min","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-min-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":4,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BELL-CVE-2026-17084","advisory_id":"da219d27-57c2-4839-8917-ae71a1bffab6","event_types":["advisory"],"published_at":"2026-10-26T22:36:29.044416+00:00","technologies":["core-osv","python3"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-08-20T06:06:25.191+00:00","detail_url":"/events/84125"}]}},{"id":74460,"cve_ids":["CVE-2026-17084"],"payload":{"kind":"advisory","title":"MINI-x6cv-hqqw-46m6","summary":"MINI-x6cv-hqqw-46m6","evidence":"osv:MINI-x6cv-hqqw-46m6","products":[{"name":{"value":"python-3.11","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.11.17-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.11-base","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.11.17-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.11-base-dev","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.11.17-r0","evidence":"/affected/2/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.11-dev","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.11.17-r0","evidence":"/affected/3/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.11-doc","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.11.17-r0","evidence":"/affected/4/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-x6cv-hqqw-46m6","aliases":["MINI-x6cv-hqqw-46m6"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.17-r0"}]}],"package":{"name":"python-3.11","purl":"pkg:apk/minimos/python-3.11","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6cv-hqqw-46m6.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.17-r0"}]}],"package":{"name":"python-3.11-base","purl":"pkg:apk/minimos/python-3.11-base","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6cv-hqqw-46m6.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.17-r0"}]}],"package":{"name":"python-3.11-base-dev","purl":"pkg:apk/minimos/python-3.11-base-dev","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6cv-hqqw-46m6.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.17-r0"}]}],"package":{"name":"python-3.11-dev","purl":"pkg:apk/minimos/python-3.11-dev","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6cv-hqqw-46m6.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.17-r0"}]}],"package":{"name":"python-3.11-doc","purl":"pkg:apk/minimos/python-3.11-doc","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6cv-hqqw-46m6.json"}}],"modified":"2026-10-03T17:23:24.725776075Z","provider":"osv","upstream":["CVE-2026-17084","GHSA-w246-x8qv-r8f5"],"references":[]},"related_cves":[{"value":"CVE-2026-17084","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e7f1a797-b237-42e9-920b-5e2c4bbdf351","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-17084","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":6,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"libpython","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-libpython-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"python","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"python-min","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-min-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":4,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-x6cv-hqqw-46m6","advisory_id":"e7f1a797-b237-42e9-920b-5e2c4bbdf351","event_types":["advisory"],"published_at":"2026-10-26T10:52:18.448796+00:00","technologies":["core-osv","python-3-11","python-3-11-base","python-3-11-base-dev","python-3-11-dev","python-3-11-doc"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-03T15:33:42+00:00","detail_url":"/advisories/advisory%3Ae7f1a797-b237-42e9-920b-5e2c4bbdf351","group":{"id":"advisory:e7f1a797-b237-42e9-920b-5e2c4bbdf351","revision":1,"primary_event_id":84124,"change":"published","superseded_by":[],"changed":{"id":79615,"cve_ids":["CVE-2026-17084"],"payload":{"kind":"advisory","title":"MINI-x6cv-hqqw-46m6","summary":"MINI-x6cv-hqqw-46m6","evidence":"osv:MINI-x6cv-hqqw-46m6","products":[{"name":{"value":"python-3.11","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.11.17-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.11-base","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.11.17-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.11-base-dev","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.11.17-r0","evidence":"/affected/2/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.11-dev","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.11.17-r0","evidence":"/affected/3/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.11-doc","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.11.17-r0","evidence":"/affected/4/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-x6cv-hqqw-46m6","aliases":["MINI-x6cv-hqqw-46m6"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.17-r0"}]}],"package":{"name":"python-3.11","purl":"pkg:apk/minimos/python-3.11","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6cv-hqqw-46m6.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.17-r0"}]}],"package":{"name":"python-3.11-base","purl":"pkg:apk/minimos/python-3.11-base","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6cv-hqqw-46m6.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.17-r0"}]}],"package":{"name":"python-3.11-base-dev","purl":"pkg:apk/minimos/python-3.11-base-dev","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6cv-hqqw-46m6.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.17-r0"}]}],"package":{"name":"python-3.11-dev","purl":"pkg:apk/minimos/python-3.11-dev","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6cv-hqqw-46m6.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.17-r0"}]}],"package":{"name":"python-3.11-doc","purl":"pkg:apk/minimos/python-3.11-doc","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6cv-hqqw-46m6.json"}}],"modified":"2026-10-03T17:23:24.725776075Z","provider":"osv","upstream":["CVE-2026-17084","GHSA-w246-x8qv-r8f5"],"references":[]},"related_cves":[{"value":"CVE-2026-17084","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e7f1a797-b237-42e9-920b-5e2c4bbdf351","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-17084","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":6,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-x6cv-hqqw-46m6","advisory_id":"e7f1a797-b237-42e9-920b-5e2c4bbdf351","event_types":["advisory"],"published_at":"2026-10-26T10:52:18.448796+00:00","technologies":["core-osv","python-3-11","python-3-11-base","python-3-11-base-dev","python-3-11-dev","python-3-11-doc"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-03T15:33:42+00:00","detail_url":"/events/79615"},"members":[{"id":84124,"cve_ids":["CVE-2026-17084"],"payload":{"kind":"advisory","title":"MINI-x6cv-hqqw-46m6","summary":"MINI-x6cv-hqqw-46m6","evidence":"osv:MINI-x6cv-hqqw-46m6","products":[{"name":{"value":"python-3.11","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.11.17-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.11-base","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.11.17-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.11-base-dev","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.11.17-r0","evidence":"/affected/2/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.11-dev","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.11.17-r0","evidence":"/affected/3/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.11-doc","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.11.17-r0","evidence":"/affected/4/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-x6cv-hqqw-46m6","aliases":["MINI-x6cv-hqqw-46m6"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.17-r0"}]}],"package":{"name":"python-3.11","purl":"pkg:apk/minimos/python-3.11","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6cv-hqqw-46m6.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.17-r0"}]}],"package":{"name":"python-3.11-base","purl":"pkg:apk/minimos/python-3.11-base","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6cv-hqqw-46m6.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.17-r0"}]}],"package":{"name":"python-3.11-base-dev","purl":"pkg:apk/minimos/python-3.11-base-dev","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6cv-hqqw-46m6.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.17-r0"}]}],"package":{"name":"python-3.11-dev","purl":"pkg:apk/minimos/python-3.11-dev","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6cv-hqqw-46m6.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.17-r0"}]}],"package":{"name":"python-3.11-doc","purl":"pkg:apk/minimos/python-3.11-doc","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6cv-hqqw-46m6.json"}}],"modified":"2026-10-03T17:23:24.725776075Z","provider":"osv","upstream":["CVE-2026-17084","GHSA-w246-x8qv-r8f5"],"references":[]},"related_cves":[{"value":"CVE-2026-17084","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e7f1a797-b237-42e9-920b-5e2c4bbdf351","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-17084","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":6,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"libpython","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-libpython-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"python","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"python-min","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-min-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":4,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-x6cv-hqqw-46m6","advisory_id":"e7f1a797-b237-42e9-920b-5e2c4bbdf351","event_types":["advisory"],"published_at":"2026-10-26T22:36:29.044416+00:00","technologies":["core-osv","python-3-11","python-3-11-base","python-3-11-base-dev","python-3-11-dev","python-3-11-doc"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-10-03T15:33:42+00:00","detail_url":"/events/84124"}]}},{"id":74425,"cve_ids":["CVE-2026-17084"],"payload":{"kind":"advisory","title":"MINI-gm76-4qxc-mwwv","summary":"MINI-gm76-4qxc-mwwv","evidence":"osv:MINI-gm76-4qxc-mwwv","products":[{"name":{"value":"python-3.10","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.10-base","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.10-base-dev","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22-r0","evidence":"/affected/2/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.10-dev","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22-r0","evidence":"/affected/3/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.10-doc","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22-r0","evidence":"/affected/4/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-gm76-4qxc-mwwv","aliases":["MINI-gm76-4qxc-mwwv"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.22-r0"}]}],"package":{"name":"python-3.10","purl":"pkg:apk/minimos/python-3.10","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-gm76-4qxc-mwwv.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.22-r0"}]}],"package":{"name":"python-3.10-base","purl":"pkg:apk/minimos/python-3.10-base","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-gm76-4qxc-mwwv.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.22-r0"}]}],"package":{"name":"python-3.10-base-dev","purl":"pkg:apk/minimos/python-3.10-base-dev","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-gm76-4qxc-mwwv.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.22-r0"}]}],"package":{"name":"python-3.10-dev","purl":"pkg:apk/minimos/python-3.10-dev","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-gm76-4qxc-mwwv.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.22-r0"}]}],"package":{"name":"python-3.10-doc","purl":"pkg:apk/minimos/python-3.10-doc","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-gm76-4qxc-mwwv.json"}}],"modified":"2026-10-03T17:23:22.009142644Z","provider":"osv","upstream":["CVE-2026-17084","GHSA-w246-x8qv-r8f5"],"references":[]},"related_cves":[{"value":"CVE-2026-17084","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:bdc02bb4-d016-4875-8dca-96738a698d34","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-17084","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":6,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"libpython","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-libpython-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"python","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"python-min","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-min-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":4,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-gm76-4qxc-mwwv","advisory_id":"bdc02bb4-d016-4875-8dca-96738a698d34","event_types":["advisory"],"published_at":"2026-10-26T10:47:30.125186+00:00","technologies":["core-osv","python-3-10","python-3-10-base","python-3-10-base-dev","python-3-10-dev","python-3-10-doc"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-03T15:33:42+00:00","detail_url":"/advisories/advisory%3Abdc02bb4-d016-4875-8dca-96738a698d34","group":{"id":"advisory:bdc02bb4-d016-4875-8dca-96738a698d34","revision":1,"primary_event_id":84123,"change":"published","superseded_by":[],"changed":{"id":79558,"cve_ids":["CVE-2026-17084"],"payload":{"kind":"advisory","title":"MINI-gm76-4qxc-mwwv","summary":"MINI-gm76-4qxc-mwwv","evidence":"osv:MINI-gm76-4qxc-mwwv","products":[{"name":{"value":"python-3.10","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.10-base","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.10-base-dev","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22-r0","evidence":"/affected/2/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.10-dev","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22-r0","evidence":"/affected/3/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.10-doc","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22-r0","evidence":"/affected/4/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-gm76-4qxc-mwwv","aliases":["MINI-gm76-4qxc-mwwv"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.22-r0"}]}],"package":{"name":"python-3.10","purl":"pkg:apk/minimos/python-3.10","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-gm76-4qxc-mwwv.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.22-r0"}]}],"package":{"name":"python-3.10-base","purl":"pkg:apk/minimos/python-3.10-base","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-gm76-4qxc-mwwv.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.22-r0"}]}],"package":{"name":"python-3.10-base-dev","purl":"pkg:apk/minimos/python-3.10-base-dev","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-gm76-4qxc-mwwv.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.22-r0"}]}],"package":{"name":"python-3.10-dev","purl":"pkg:apk/minimos/python-3.10-dev","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-gm76-4qxc-mwwv.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.22-r0"}]}],"package":{"name":"python-3.10-doc","purl":"pkg:apk/minimos/python-3.10-doc","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-gm76-4qxc-mwwv.json"}}],"modified":"2026-10-03T17:23:22.009142644Z","provider":"osv","upstream":["CVE-2026-17084","GHSA-w246-x8qv-r8f5"],"references":[]},"related_cves":[{"value":"CVE-2026-17084","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:bdc02bb4-d016-4875-8dca-96738a698d34","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-17084","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":6,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-gm76-4qxc-mwwv","advisory_id":"bdc02bb4-d016-4875-8dca-96738a698d34","event_types":["advisory"],"published_at":"2026-10-26T10:47:30.125186+00:00","technologies":["core-osv","python-3-10","python-3-10-base","python-3-10-base-dev","python-3-10-dev","python-3-10-doc"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-03T15:33:42+00:00","detail_url":"/events/79558"},"members":[{"id":84123,"cve_ids":["CVE-2026-17084"],"payload":{"kind":"advisory","title":"MINI-gm76-4qxc-mwwv","summary":"MINI-gm76-4qxc-mwwv","evidence":"osv:MINI-gm76-4qxc-mwwv","products":[{"name":{"value":"python-3.10","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.10-base","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.10-base-dev","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22-r0","evidence":"/affected/2/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.10-dev","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22-r0","evidence":"/affected/3/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.10-doc","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22-r0","evidence":"/affected/4/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-gm76-4qxc-mwwv","aliases":["MINI-gm76-4qxc-mwwv"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.22-r0"}]}],"package":{"name":"python-3.10","purl":"pkg:apk/minimos/python-3.10","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-gm76-4qxc-mwwv.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.22-r0"}]}],"package":{"name":"python-3.10-base","purl":"pkg:apk/minimos/python-3.10-base","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-gm76-4qxc-mwwv.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.22-r0"}]}],"package":{"name":"python-3.10-base-dev","purl":"pkg:apk/minimos/python-3.10-base-dev","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-gm76-4qxc-mwwv.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.22-r0"}]}],"package":{"name":"python-3.10-dev","purl":"pkg:apk/minimos/python-3.10-dev","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-gm76-4qxc-mwwv.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.22-r0"}]}],"package":{"name":"python-3.10-doc","purl":"pkg:apk/minimos/python-3.10-doc","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-gm76-4qxc-mwwv.json"}}],"modified":"2026-10-03T17:23:22.009142644Z","provider":"osv","upstream":["CVE-2026-17084","GHSA-w246-x8qv-r8f5"],"references":[]},"related_cves":[{"value":"CVE-2026-17084","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:bdc02bb4-d016-4875-8dca-96738a698d34","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-17084","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":6,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"libpython","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-libpython-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"python","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"python-min","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-min-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":4,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-gm76-4qxc-mwwv","advisory_id":"bdc02bb4-d016-4875-8dca-96738a698d34","event_types":["advisory"],"published_at":"2026-10-26T22:36:29.044416+00:00","technologies":["core-osv","python-3-10","python-3-10-base","python-3-10-base-dev","python-3-10-dev","python-3-10-doc"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-10-03T15:33:42+00:00","detail_url":"/events/84123"}]}},{"id":67655,"cve_ids":["CVE-2026-15806","CVE-2026-17084","CVE-2026-18503","CVE-2026-19672","CVE-2026-6879","CVE-2026-9669"],"payload":{"kind":"advisory","title":"Security update for python","summary":"This update for python fixes the following issues: - CVE-2026-6879: quadratic behavior in `xml.etree.ElementPath` index predicates can lead to a denial of service via high CPU usage (bsc#1273148). - CVE-2026-9669: crafted input can cause a stack buffer overflow (bsc#1267974). - CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). - CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226). - CVE-2026-18503: attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU (bsc#1274683). - CVE-2026-19672: The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and retu (bsc#1276227). Changes for python: - Update bundled setuptools wheels to setuptools-40.6.2-py2.py3-none-any.whl (bsc#1276903)","evidence":"osv:SUSE-SU-2026:4411-1","products":[{"name":{"value":"python","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.7.18-150000.133.1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"python-base","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.7.18-150000.133.1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"SUSE-SU-2026:4411-1","aliases":["SUSE-SU-2026:4411-1"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-150000.133.1"}]}],"package":{"name":"python","purl":"pkg:rpm/suse/python&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP7","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4411-1.json"},"ecosystem_specific":{"binaries":[{"python":"2.7.18-150000.133.1","python-xml":"2.7.18-150000.133.1","python-base":"2.7.18-150000.133.1","python-gdbm":"2.7.18-150000.133.1","python-curses":"2.7.18-150000.133.1","libpython2_7-1_0":"2.7.18-150000.133.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-150000.133.1"}]}],"package":{"name":"python-base","purl":"pkg:rpm/suse/python-base&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP7","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4411-1.json"},"ecosystem_specific":{"binaries":[{"python":"2.7.18-150000.133.1","python-xml":"2.7.18-150000.133.1","python-base":"2.7.18-150000.133.1","python-gdbm":"2.7.18-150000.133.1","python-curses":"2.7.18-150000.133.1","libpython2_7-1_0":"2.7.18-150000.133.1"}]}}],"modified":"2026-10-02T11:30:04.071737814Z","provider":"osv","upstream":["CVE-2026-15806","CVE-2026-17084","CVE-2026-18503","CVE-2026-19672","CVE-2026-6879","CVE-2026-9669"],"references":["https://www.suse.com/support/update/announcement/2026/suse-su-20264411-1/","https://bugzilla.suse.com/1267974","https://bugzilla.suse.com/1273148","https://bugzilla.suse.com/1274683","https://bugzilla.suse.com/1276223","https://bugzilla.suse.com/1276226","https://bugzilla.suse.com/1276227","https://bugzilla.suse.com/1276903","https://www.suse.com/security/cve/CVE-2026-15806","https://www.suse.com/security/cve/CVE-2026-17084","https://www.suse.com/security/cve/CVE-2026-18503","https://www.suse.com/security/cve/CVE-2026-19672","https://www.suse.com/security/cve/CVE-2026-6879","https://www.suse.com/security/cve/CVE-2026-9669"]},"related_cves":[{"value":"CVE-2026-15806","evidence":"/upstream"},{"value":"CVE-2026-17084","evidence":"/upstream"},{"value":"CVE-2026-18503","evidence":"/upstream"},{"value":"CVE-2026-19672","evidence":"/upstream"},{"value":"CVE-2026-6879","evidence":"/upstream"},{"value":"CVE-2026-9669","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:38d0dc25-9bef-4b79-b1c3-9ca5cd6cc4e5","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-15806","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":6,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-15806","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-15806","metrics":[],"products":[{"name":{"value":"libpython","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-libpython-2026-15806","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-15806","metrics":[],"products":[{"name":{"value":"python","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-2026-15806","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-15806","metrics":[],"products":[{"name":{"value":"python-min","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-min-2026-15806","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-17084","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":6,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"libpython","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-libpython-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"python","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"python-min","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-min-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-18503","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":2.4,"Automatable":"NOT_DEFINED","attackVector":"LOCAL","baseSeverity":"LOW","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"low","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-18503","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-19672","metrics":[],"products":[{"name":{"value":"libpython","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-libpython-2026-19672","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-19672","metrics":[],"products":[{"name":{"value":"python","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-2026-19672","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-19672","metrics":[],"products":[{"name":{"value":"python-min","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-min-2026-19672","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":10,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/SUSE-SU-2026%3A4411-1","advisory_id":"38d0dc25-9bef-4b79-b1c3-9ca5cd6cc4e5","event_types":["advisory"],"published_at":"2026-10-25T21:20:20.94062+00:00","technologies":["core-osv","python","python-base"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:38:59+00:00","detail_url":"/advisories/advisory%3A38d0dc25-9bef-4b79-b1c3-9ca5cd6cc4e5","group":{"id":"advisory:38d0dc25-9bef-4b79-b1c3-9ca5cd6cc4e5","revision":1,"primary_event_id":84219,"change":"published","superseded_by":[],"changed":{"id":68025,"cve_ids":["CVE-2026-15806","CVE-2026-17084","CVE-2026-18503","CVE-2026-19672","CVE-2026-6879","CVE-2026-9669"],"payload":{"kind":"advisory","title":"Security update for python","summary":"This update for python fixes the following issues: - CVE-2026-6879: quadratic behavior in `xml.etree.ElementPath` index predicates can lead to a denial of service via high CPU usage (bsc#1273148). - CVE-2026-9669: crafted input can cause a stack buffer overflow (bsc#1267974). - CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). - CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226). - CVE-2026-18503: attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU (bsc#1274683). - CVE-2026-19672: The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and retu (bsc#1276227). Changes for python: - Update bundled setuptools wheels to setuptools-40.6.2-py2.py3-none-any.whl (bsc#1276903)","evidence":"osv:SUSE-SU-2026:4411-1","products":[{"name":{"value":"python","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.7.18-150000.133.1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"python-base","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.7.18-150000.133.1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"SUSE-SU-2026:4411-1","aliases":["SUSE-SU-2026:4411-1"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-150000.133.1"}]}],"package":{"name":"python","purl":"pkg:rpm/suse/python&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP7","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4411-1.json"},"ecosystem_specific":{"binaries":[{"python":"2.7.18-150000.133.1","python-xml":"2.7.18-150000.133.1","python-base":"2.7.18-150000.133.1","python-gdbm":"2.7.18-150000.133.1","python-curses":"2.7.18-150000.133.1","libpython2_7-1_0":"2.7.18-150000.133.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-150000.133.1"}]}],"package":{"name":"python-base","purl":"pkg:rpm/suse/python-base&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP7","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4411-1.json"},"ecosystem_specific":{"binaries":[{"python":"2.7.18-150000.133.1","python-xml":"2.7.18-150000.133.1","python-base":"2.7.18-150000.133.1","python-gdbm":"2.7.18-150000.133.1","python-curses":"2.7.18-150000.133.1","libpython2_7-1_0":"2.7.18-150000.133.1"}]}}],"modified":"2026-10-02T11:30:04.071737814Z","provider":"osv","upstream":["CVE-2026-15806","CVE-2026-17084","CVE-2026-18503","CVE-2026-19672","CVE-2026-6879","CVE-2026-9669"],"references":["https://www.suse.com/support/update/announcement/2026/suse-su-20264411-1/","https://bugzilla.suse.com/1267974","https://bugzilla.suse.com/1273148","https://bugzilla.suse.com/1274683","https://bugzilla.suse.com/1276223","https://bugzilla.suse.com/1276226","https://bugzilla.suse.com/1276227","https://bugzilla.suse.com/1276903","https://www.suse.com/security/cve/CVE-2026-15806","https://www.suse.com/security/cve/CVE-2026-17084","https://www.suse.com/security/cve/CVE-2026-18503","https://www.suse.com/security/cve/CVE-2026-19672","https://www.suse.com/security/cve/CVE-2026-6879","https://www.suse.com/security/cve/CVE-2026-9669"]},"related_cves":[{"value":"CVE-2026-15806","evidence":"/upstream"},{"value":"CVE-2026-17084","evidence":"/upstream"},{"value":"CVE-2026-18503","evidence":"/upstream"},{"value":"CVE-2026-19672","evidence":"/upstream"},{"value":"CVE-2026-6879","evidence":"/upstream"},{"value":"CVE-2026-9669","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:38d0dc25-9bef-4b79-b1c3-9ca5cd6cc4e5","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-15806","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":6,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-15806","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-17084","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":6,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-18503","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":2.4,"Automatable":"NOT_DEFINED","attackVector":"LOCAL","baseSeverity":"LOW","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"low","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-18503","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/SUSE-SU-2026%3A4411-1","advisory_id":"38d0dc25-9bef-4b79-b1c3-9ca5cd6cc4e5","event_types":["advisory"],"published_at":"2026-10-25T21:20:20.94062+00:00","technologies":["core-osv","python","python-base"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:38:59+00:00","detail_url":"/events/68025"},"members":[{"id":84219,"cve_ids":["CVE-2026-15806","CVE-2026-17084","CVE-2026-18503","CVE-2026-19672","CVE-2026-6879","CVE-2026-9669"],"payload":{"kind":"advisory","title":"Security update for python","summary":"This update for python fixes the following issues: - CVE-2026-6879: quadratic behavior in `xml.etree.ElementPath` index predicates can lead to a denial of service via high CPU usage (bsc#1273148). - CVE-2026-9669: crafted input can cause a stack buffer overflow (bsc#1267974). - CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). - CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226). - CVE-2026-18503: attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU (bsc#1274683). - CVE-2026-19672: The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and retu (bsc#1276227). Changes for python: - Update bundled setuptools wheels to setuptools-40.6.2-py2.py3-none-any.whl (bsc#1276903)","evidence":"osv:SUSE-SU-2026:4411-1","products":[{"name":{"value":"python","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.7.18-150000.133.1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"python-base","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.7.18-150000.133.1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"SUSE-SU-2026:4411-1","aliases":["SUSE-SU-2026:4411-1"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-150000.133.1"}]}],"package":{"name":"python","purl":"pkg:rpm/suse/python&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP7","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4411-1.json"},"ecosystem_specific":{"binaries":[{"python":"2.7.18-150000.133.1","python-xml":"2.7.18-150000.133.1","python-base":"2.7.18-150000.133.1","python-gdbm":"2.7.18-150000.133.1","python-curses":"2.7.18-150000.133.1","libpython2_7-1_0":"2.7.18-150000.133.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-150000.133.1"}]}],"package":{"name":"python-base","purl":"pkg:rpm/suse/python-base&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP7","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4411-1.json"},"ecosystem_specific":{"binaries":[{"python":"2.7.18-150000.133.1","python-xml":"2.7.18-150000.133.1","python-base":"2.7.18-150000.133.1","python-gdbm":"2.7.18-150000.133.1","python-curses":"2.7.18-150000.133.1","libpython2_7-1_0":"2.7.18-150000.133.1"}]}}],"modified":"2026-10-02T11:30:04.071737814Z","provider":"osv","upstream":["CVE-2026-15806","CVE-2026-17084","CVE-2026-18503","CVE-2026-19672","CVE-2026-6879","CVE-2026-9669"],"references":["https://www.suse.com/support/update/announcement/2026/suse-su-20264411-1/","https://bugzilla.suse.com/1267974","https://bugzilla.suse.com/1273148","https://bugzilla.suse.com/1274683","https://bugzilla.suse.com/1276223","https://bugzilla.suse.com/1276226","https://bugzilla.suse.com/1276227","https://bugzilla.suse.com/1276903","https://www.suse.com/security/cve/CVE-2026-15806","https://www.suse.com/security/cve/CVE-2026-17084","https://www.suse.com/security/cve/CVE-2026-18503","https://www.suse.com/security/cve/CVE-2026-19672","https://www.suse.com/security/cve/CVE-2026-6879","https://www.suse.com/security/cve/CVE-2026-9669"]},"related_cves":[{"value":"CVE-2026-15806","evidence":"/upstream"},{"value":"CVE-2026-17084","evidence":"/upstream"},{"value":"CVE-2026-18503","evidence":"/upstream"},{"value":"CVE-2026-19672","evidence":"/upstream"},{"value":"CVE-2026-6879","evidence":"/upstream"},{"value":"CVE-2026-9669","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:38d0dc25-9bef-4b79-b1c3-9ca5cd6cc4e5","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-15806","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":6,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-15806","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-15806","metrics":[],"products":[{"name":{"value":"libpython","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-libpython-2026-15806","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-15806","metrics":[],"products":[{"name":{"value":"python","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-2026-15806","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-15806","metrics":[],"products":[{"name":{"value":"python-min","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-min-2026-15806","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-17084","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":6,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"libpython","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-libpython-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"python","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-17084","metrics":[],"products":[{"name":{"value":"python-min","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-min-2026-17084","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-18503","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":2.4,"Automatable":"NOT_DEFINED","attackVector":"LOCAL","baseSeverity":"LOW","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"low","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-18503","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-19672","metrics":[],"products":[{"name":{"value":"libpython","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-libpython-2026-19672","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-19672","metrics":[],"products":[{"name":{"value":"python","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-2026-19672","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-19672","metrics":[],"products":[{"name":{"value":"python-min","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22","evidence":"/affected/0/ranges"},{"value":"3.11.17","evidence":"/affected/0/ranges"},{"value":"3.12.15","evidence":"/affected/0/ranges"},{"value":"3.13.16","evidence":"/affected/0/ranges"},{"value":"3.14.8","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-python-min-2026-19672","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":10,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/SUSE-SU-2026%3A4411-1","advisory_id":"38d0dc25-9bef-4b79-b1c3-9ca5cd6cc4e5","event_types":["advisory"],"published_at":"2026-10-26T22:38:34.395971+00:00","technologies":["core-osv","python","python-base"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-10-01T15:38:59+00:00","detail_url":"/events/84219"}]}}],"next_after":77233,"next_before":67655}