{"schema_version":"2","view":"grouped","data":[{"id":72889,"cve_ids":["CVE-2026-87910"],"payload":{"kind":"advisory","title":"CGA-cpwj-2p69-2gq7","summary":"CGA-cpwj-2p69-2gq7","evidence":"osv:CGA-cpwj-2p69-2gq7","products":[{"name":{"value":"python-3.11","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.11.17-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.11","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.11.17-r1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-cpwj-2p69-2gq7","aliases":["CGA-cpwj-2p69-2gq7"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.17-r1"}]}],"package":{"name":"python-3.11","purl":"pkg:apk/chainguard/python-3.11?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cpwj-2p69-2gq7.json"},"ecosystem_specific":{"components":[{"component_name":"python-3.11","component_purl":"pkg:apk/python-3.11@3.11.16-r7","component_type":"apk","component_version":"3.11.16-r7","component_location":"/.PKGINFO","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T22:13:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.17-r1"}]}],"package":{"name":"python-3.11","purl":"pkg:apk/wolfi/python-3.11?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cpwj-2p69-2gq7.json"},"ecosystem_specific":{"components":[{"component_name":"python-3.11","component_purl":"pkg:apk/python-3.11@3.11.16-r7","component_type":"apk","component_version":"3.11.16-r7","component_location":"/.PKGINFO","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T22:13:07Z"}]}}],"modified":"2026-10-03T10:32:39.210368695Z","provider":"osv","upstream":["CVE-2026-87910","GHSA-rj44-3777-mh5x"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/87xxx/CVE-2026-87910.json","https://mail.python.org/archives/list/security-announce@python.org/thread/57TBTLL2W6APMZR3A25B2YV7GL3EPTDJ/","https://nvd.nist.gov/vuln/detail/CVE-2026-87910","https://github.com/python/cpython/issues/157265","https://github.com/python/cpython/commit/d9565e54b1fc6d63c5be9afd58114499128fa57b","https://github.com/python/cpython/commit/fb2f0bbc3b35264f09cc2cb2934b7987527a6bc2","https://github.com/python/cpython/pull/157266","https://github.com/python/cpython","https://github.com/python/cpython/commit/9c17bace90f88dfba6d0e2fe23c8e7ae35f83955","https://github.com/python/cpython/commit/2eb0c2f1dc71847731b6ab30aebefd058d482a7f","https://github.com/python/cpython/commit/764fd0af8d9e19d3684a58d2e58bf770f0605036","https://github.com/python/cpython/commit/c1f106d240c4ffcb3608ed0a20e8aba6c865f6d3","https://github.com/python/cpython/commit/3105a3498aaf681ce128cf5baf83c2e5574267c5","https://github.com/python/cpython/commit/a4919937a4e1e69a0d178909c6f20557eca5d1d0"]},"related_cves":[{"value":"CVE-2026-87910","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b9bed9ee-900c-494d-b28a-8530a9755a51","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-87910","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":5.7,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"ACTIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-87910","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-cpwj-2p69-2gq7","advisory_id":"b9bed9ee-900c-494d-b28a-8530a9755a51","event_types":["advisory"],"published_at":"2026-10-26T01:28:05.561611+00:00","technologies":["core-osv","python-3-11"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-15T19:09:58+00:00","detail_url":"/advisories/advisory%3Ab9bed9ee-900c-494d-b28a-8530a9755a51","group":{"id":"advisory:b9bed9ee-900c-494d-b28a-8530a9755a51","revision":1,"primary_event_id":73856,"change":"published","superseded_by":[],"changed":{"id":73856,"cve_ids":["CVE-2026-87910"],"payload":{"kind":"advisory","title":"CGA-cpwj-2p69-2gq7","summary":"CGA-cpwj-2p69-2gq7","evidence":"osv:CGA-cpwj-2p69-2gq7","products":[{"name":{"value":"python-3.11","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.11.17-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.11","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.11.17-r1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-cpwj-2p69-2gq7","aliases":["CGA-cpwj-2p69-2gq7"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.17-r1"}]}],"package":{"name":"python-3.11","purl":"pkg:apk/chainguard/python-3.11?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cpwj-2p69-2gq7.json"},"ecosystem_specific":{"components":[{"component_name":"python-3.11","component_purl":"pkg:apk/python-3.11@3.11.16-r7","component_type":"apk","component_version":"3.11.16-r7","component_location":"/.PKGINFO","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T22:13:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.17-r1"}]}],"package":{"name":"python-3.11","purl":"pkg:apk/wolfi/python-3.11?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cpwj-2p69-2gq7.json"},"ecosystem_specific":{"components":[{"component_name":"python-3.11","component_purl":"pkg:apk/python-3.11@3.11.16-r7","component_type":"apk","component_version":"3.11.16-r7","component_location":"/.PKGINFO","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T22:13:07Z"}]}}],"modified":"2026-10-03T10:32:39.210368695Z","provider":"osv","upstream":["CVE-2026-87910","GHSA-rj44-3777-mh5x"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/87xxx/CVE-2026-87910.json","https://mail.python.org/archives/list/security-announce@python.org/thread/57TBTLL2W6APMZR3A25B2YV7GL3EPTDJ/","https://nvd.nist.gov/vuln/detail/CVE-2026-87910","https://github.com/python/cpython/issues/157265","https://github.com/python/cpython/commit/d9565e54b1fc6d63c5be9afd58114499128fa57b","https://github.com/python/cpython/commit/fb2f0bbc3b35264f09cc2cb2934b7987527a6bc2","https://github.com/python/cpython/pull/157266","https://github.com/python/cpython","https://github.com/python/cpython/commit/9c17bace90f88dfba6d0e2fe23c8e7ae35f83955","https://github.com/python/cpython/commit/2eb0c2f1dc71847731b6ab30aebefd058d482a7f","https://github.com/python/cpython/commit/764fd0af8d9e19d3684a58d2e58bf770f0605036","https://github.com/python/cpython/commit/c1f106d240c4ffcb3608ed0a20e8aba6c865f6d3","https://github.com/python/cpython/commit/3105a3498aaf681ce128cf5baf83c2e5574267c5","https://github.com/python/cpython/commit/a4919937a4e1e69a0d178909c6f20557eca5d1d0"]},"related_cves":[{"value":"CVE-2026-87910","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b9bed9ee-900c-494d-b28a-8530a9755a51","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-87910","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":5.7,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"ACTIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-87910","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-cpwj-2p69-2gq7","advisory_id":"b9bed9ee-900c-494d-b28a-8530a9755a51","event_types":["advisory"],"published_at":"2026-10-26T01:28:05.561611+00:00","technologies":["core-osv","python-3-11"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-15T19:09:58+00:00","detail_url":"/events/73856"},"members":[{"id":73856,"cve_ids":["CVE-2026-87910"],"payload":{"kind":"advisory","title":"CGA-cpwj-2p69-2gq7","summary":"CGA-cpwj-2p69-2gq7","evidence":"osv:CGA-cpwj-2p69-2gq7","products":[{"name":{"value":"python-3.11","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.11.17-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.11","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.11.17-r1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-cpwj-2p69-2gq7","aliases":["CGA-cpwj-2p69-2gq7"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.17-r1"}]}],"package":{"name":"python-3.11","purl":"pkg:apk/chainguard/python-3.11?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cpwj-2p69-2gq7.json"},"ecosystem_specific":{"components":[{"component_name":"python-3.11","component_purl":"pkg:apk/python-3.11@3.11.16-r7","component_type":"apk","component_version":"3.11.16-r7","component_location":"/.PKGINFO","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T22:13:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.17-r1"}]}],"package":{"name":"python-3.11","purl":"pkg:apk/wolfi/python-3.11?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cpwj-2p69-2gq7.json"},"ecosystem_specific":{"components":[{"component_name":"python-3.11","component_purl":"pkg:apk/python-3.11@3.11.16-r7","component_type":"apk","component_version":"3.11.16-r7","component_location":"/.PKGINFO","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T22:13:07Z"}]}}],"modified":"2026-10-03T10:32:39.210368695Z","provider":"osv","upstream":["CVE-2026-87910","GHSA-rj44-3777-mh5x"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/87xxx/CVE-2026-87910.json","https://mail.python.org/archives/list/security-announce@python.org/thread/57TBTLL2W6APMZR3A25B2YV7GL3EPTDJ/","https://nvd.nist.gov/vuln/detail/CVE-2026-87910","https://github.com/python/cpython/issues/157265","https://github.com/python/cpython/commit/d9565e54b1fc6d63c5be9afd58114499128fa57b","https://github.com/python/cpython/commit/fb2f0bbc3b35264f09cc2cb2934b7987527a6bc2","https://github.com/python/cpython/pull/157266","https://github.com/python/cpython","https://github.com/python/cpython/commit/9c17bace90f88dfba6d0e2fe23c8e7ae35f83955","https://github.com/python/cpython/commit/2eb0c2f1dc71847731b6ab30aebefd058d482a7f","https://github.com/python/cpython/commit/764fd0af8d9e19d3684a58d2e58bf770f0605036","https://github.com/python/cpython/commit/c1f106d240c4ffcb3608ed0a20e8aba6c865f6d3","https://github.com/python/cpython/commit/3105a3498aaf681ce128cf5baf83c2e5574267c5","https://github.com/python/cpython/commit/a4919937a4e1e69a0d178909c6f20557eca5d1d0"]},"related_cves":[{"value":"CVE-2026-87910","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b9bed9ee-900c-494d-b28a-8530a9755a51","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-87910","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":5.7,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"ACTIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-87910","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-cpwj-2p69-2gq7","advisory_id":"b9bed9ee-900c-494d-b28a-8530a9755a51","event_types":["advisory"],"published_at":"2026-10-26T01:28:05.561611+00:00","technologies":["core-osv","python-3-11"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-15T19:09:58+00:00","detail_url":"/events/73856"}]}},{"id":71992,"cve_ids":["CVE-2026-87910"],"payload":{"kind":"advisory","title":"CGA-vqqv-v9rx-4q4x","summary":"CGA-vqqv-v9rx-4q4x","evidence":"osv:CGA-vqqv-v9rx-4q4x","products":[{"name":{"value":"python-3.11","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.11.17-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.11","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.11.17-r1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-vqqv-v9rx-4q4x","aliases":["CGA-vqqv-v9rx-4q4x"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.17-r1"}]}],"package":{"name":"python-3.11","purl":"pkg:apk/chainguard/python-3.11?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vqqv-v9rx-4q4x.json"},"ecosystem_specific":{"components":[{"component_name":"python-3.11","component_purl":"pkg:apk/python-3.11@3.11.16-r7","component_type":"apk","component_version":"3.11.16-r7","component_location":"/.PKGINFO","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T20:11:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.17-r1"}]}],"package":{"name":"python-3.11","purl":"pkg:apk/wolfi/python-3.11?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vqqv-v9rx-4q4x.json"},"ecosystem_specific":{"components":[{"component_name":"python-3.11","component_purl":"pkg:apk/python-3.11@3.11.16-r7","component_type":"apk","component_version":"3.11.16-r7","component_location":"/.PKGINFO","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T20:11:07Z"}]}}],"modified":"2026-10-02T23:01:49.074961226Z","provider":"osv","upstream":["CVE-2026-87910","GHSA-rj44-3777-mh5x"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/87xxx/CVE-2026-87910.json","https://mail.python.org/archives/list/security-announce@python.org/thread/57TBTLL2W6APMZR3A25B2YV7GL3EPTDJ/","https://nvd.nist.gov/vuln/detail/CVE-2026-87910","https://github.com/python/cpython/issues/157265","https://github.com/python/cpython/commit/d9565e54b1fc6d63c5be9afd58114499128fa57b","https://github.com/python/cpython/commit/fb2f0bbc3b35264f09cc2cb2934b7987527a6bc2","https://github.com/python/cpython/pull/157266","https://github.com/python/cpython","https://github.com/python/cpython/commit/9c17bace90f88dfba6d0e2fe23c8e7ae35f83955","https://github.com/python/cpython/commit/2eb0c2f1dc71847731b6ab30aebefd058d482a7f","https://github.com/python/cpython/commit/764fd0af8d9e19d3684a58d2e58bf770f0605036","https://github.com/python/cpython/commit/c1f106d240c4ffcb3608ed0a20e8aba6c865f6d3"]},"related_cves":[{"value":"CVE-2026-87910","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:34743d57-3fee-4d3d-b157-299eef2c2d93","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-87910","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":5.7,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"ACTIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-87910","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-vqqv-v9rx-4q4x","advisory_id":"34743d57-3fee-4d3d-b157-299eef2c2d93","event_types":["advisory"],"published_at":"2026-10-26T00:04:28.659234+00:00","technologies":["core-osv","python-3-11"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-15T19:42:43+00:00","detail_url":"/advisories/advisory%3A34743d57-3fee-4d3d-b157-299eef2c2d93","group":{"id":"advisory:34743d57-3fee-4d3d-b157-299eef2c2d93","revision":1,"primary_event_id":72570,"change":"published","superseded_by":[],"changed":{"id":72570,"cve_ids":["CVE-2026-87910"],"payload":{"kind":"advisory","title":"CGA-vqqv-v9rx-4q4x","summary":"CGA-vqqv-v9rx-4q4x","evidence":"osv:CGA-vqqv-v9rx-4q4x","products":[{"name":{"value":"python-3.11","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.11.17-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.11","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.11.17-r1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-vqqv-v9rx-4q4x","aliases":["CGA-vqqv-v9rx-4q4x"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.17-r1"}]}],"package":{"name":"python-3.11","purl":"pkg:apk/chainguard/python-3.11?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vqqv-v9rx-4q4x.json"},"ecosystem_specific":{"components":[{"component_name":"python-3.11","component_purl":"pkg:apk/python-3.11@3.11.16-r7","component_type":"apk","component_version":"3.11.16-r7","component_location":"/.PKGINFO","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T20:11:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.17-r1"}]}],"package":{"name":"python-3.11","purl":"pkg:apk/wolfi/python-3.11?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vqqv-v9rx-4q4x.json"},"ecosystem_specific":{"components":[{"component_name":"python-3.11","component_purl":"pkg:apk/python-3.11@3.11.16-r7","component_type":"apk","component_version":"3.11.16-r7","component_location":"/.PKGINFO","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T20:11:07Z"}]}}],"modified":"2026-10-02T23:01:49.074961226Z","provider":"osv","upstream":["CVE-2026-87910","GHSA-rj44-3777-mh5x"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/87xxx/CVE-2026-87910.json","https://mail.python.org/archives/list/security-announce@python.org/thread/57TBTLL2W6APMZR3A25B2YV7GL3EPTDJ/","https://nvd.nist.gov/vuln/detail/CVE-2026-87910","https://github.com/python/cpython/issues/157265","https://github.com/python/cpython/commit/d9565e54b1fc6d63c5be9afd58114499128fa57b","https://github.com/python/cpython/commit/fb2f0bbc3b35264f09cc2cb2934b7987527a6bc2","https://github.com/python/cpython/pull/157266","https://github.com/python/cpython","https://github.com/python/cpython/commit/9c17bace90f88dfba6d0e2fe23c8e7ae35f83955","https://github.com/python/cpython/commit/2eb0c2f1dc71847731b6ab30aebefd058d482a7f","https://github.com/python/cpython/commit/764fd0af8d9e19d3684a58d2e58bf770f0605036","https://github.com/python/cpython/commit/c1f106d240c4ffcb3608ed0a20e8aba6c865f6d3"]},"related_cves":[{"value":"CVE-2026-87910","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:34743d57-3fee-4d3d-b157-299eef2c2d93","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-87910","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":5.7,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"ACTIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-87910","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-vqqv-v9rx-4q4x","advisory_id":"34743d57-3fee-4d3d-b157-299eef2c2d93","event_types":["advisory"],"published_at":"2026-10-26T00:04:28.659234+00:00","technologies":["core-osv","python-3-11"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-15T19:42:43+00:00","detail_url":"/events/72570"},"members":[{"id":72570,"cve_ids":["CVE-2026-87910"],"payload":{"kind":"advisory","title":"CGA-vqqv-v9rx-4q4x","summary":"CGA-vqqv-v9rx-4q4x","evidence":"osv:CGA-vqqv-v9rx-4q4x","products":[{"name":{"value":"python-3.11","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.11.17-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.11","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.11.17-r1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-vqqv-v9rx-4q4x","aliases":["CGA-vqqv-v9rx-4q4x"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.17-r1"}]}],"package":{"name":"python-3.11","purl":"pkg:apk/chainguard/python-3.11?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vqqv-v9rx-4q4x.json"},"ecosystem_specific":{"components":[{"component_name":"python-3.11","component_purl":"pkg:apk/python-3.11@3.11.16-r7","component_type":"apk","component_version":"3.11.16-r7","component_location":"/.PKGINFO","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T20:11:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.17-r1"}]}],"package":{"name":"python-3.11","purl":"pkg:apk/wolfi/python-3.11?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vqqv-v9rx-4q4x.json"},"ecosystem_specific":{"components":[{"component_name":"python-3.11","component_purl":"pkg:apk/python-3.11@3.11.16-r7","component_type":"apk","component_version":"3.11.16-r7","component_location":"/.PKGINFO","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T20:11:07Z"}]}}],"modified":"2026-10-02T23:01:49.074961226Z","provider":"osv","upstream":["CVE-2026-87910","GHSA-rj44-3777-mh5x"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/87xxx/CVE-2026-87910.json","https://mail.python.org/archives/list/security-announce@python.org/thread/57TBTLL2W6APMZR3A25B2YV7GL3EPTDJ/","https://nvd.nist.gov/vuln/detail/CVE-2026-87910","https://github.com/python/cpython/issues/157265","https://github.com/python/cpython/commit/d9565e54b1fc6d63c5be9afd58114499128fa57b","https://github.com/python/cpython/commit/fb2f0bbc3b35264f09cc2cb2934b7987527a6bc2","https://github.com/python/cpython/pull/157266","https://github.com/python/cpython","https://github.com/python/cpython/commit/9c17bace90f88dfba6d0e2fe23c8e7ae35f83955","https://github.com/python/cpython/commit/2eb0c2f1dc71847731b6ab30aebefd058d482a7f","https://github.com/python/cpython/commit/764fd0af8d9e19d3684a58d2e58bf770f0605036","https://github.com/python/cpython/commit/c1f106d240c4ffcb3608ed0a20e8aba6c865f6d3"]},"related_cves":[{"value":"CVE-2026-87910","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:34743d57-3fee-4d3d-b157-299eef2c2d93","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-87910","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":5.7,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"ACTIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-87910","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-vqqv-v9rx-4q4x","advisory_id":"34743d57-3fee-4d3d-b157-299eef2c2d93","event_types":["advisory"],"published_at":"2026-10-26T00:04:28.659234+00:00","technologies":["core-osv","python-3-11"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-15T19:42:43+00:00","detail_url":"/events/72570"}]}},{"id":71870,"cve_ids":["CVE-2026-87910"],"payload":{"kind":"advisory","title":"CGA-hqv4-hqc6-4464","summary":"CGA-hqv4-hqc6-4464","evidence":"osv:CGA-hqv4-hqc6-4464","products":[{"name":{"value":"python-3.10","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.10","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22-r1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-hqv4-hqc6-4464","aliases":["CGA-hqv4-hqc6-4464"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.22-r1"}]}],"package":{"name":"python-3.10","purl":"pkg:apk/chainguard/python-3.10?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hqv4-hqc6-4464.json"},"ecosystem_specific":{"components":[{"component_name":"python-3.10","component_purl":"pkg:apk/python-3.10@3.10.21-r6","component_type":"apk","component_version":"3.10.21-r6","component_location":"/.PKGINFO","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:48:06Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.22-r1"}]}],"package":{"name":"python-3.10","purl":"pkg:apk/wolfi/python-3.10?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hqv4-hqc6-4464.json"},"ecosystem_specific":{"components":[{"component_name":"python-3.10","component_purl":"pkg:apk/python-3.10@3.10.21-r6","component_type":"apk","component_version":"3.10.21-r6","component_location":"/.PKGINFO","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:48:06Z"}]}}],"modified":"2026-10-02T23:01:34.982190939Z","provider":"osv","upstream":["CVE-2026-87910","GHSA-rj44-3777-mh5x"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/87xxx/CVE-2026-87910.json","https://mail.python.org/archives/list/security-announce@python.org/thread/57TBTLL2W6APMZR3A25B2YV7GL3EPTDJ/","https://nvd.nist.gov/vuln/detail/CVE-2026-87910","https://github.com/python/cpython/issues/157265","https://github.com/python/cpython/commit/d9565e54b1fc6d63c5be9afd58114499128fa57b","https://github.com/python/cpython/commit/fb2f0bbc3b35264f09cc2cb2934b7987527a6bc2","https://github.com/python/cpython/pull/157266","https://github.com/python/cpython","https://github.com/python/cpython/commit/9c17bace90f88dfba6d0e2fe23c8e7ae35f83955","https://github.com/python/cpython/commit/2eb0c2f1dc71847731b6ab30aebefd058d482a7f","https://github.com/python/cpython/commit/764fd0af8d9e19d3684a58d2e58bf770f0605036","https://github.com/python/cpython/commit/c1f106d240c4ffcb3608ed0a20e8aba6c865f6d3"]},"related_cves":[{"value":"CVE-2026-87910","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:da2c2c3f-7055-4d4f-a78b-2664df537357","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-87910","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":5.7,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"ACTIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-87910","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hqv4-hqc6-4464","advisory_id":"da2c2c3f-7055-4d4f-a78b-2664df537357","event_types":["advisory"],"published_at":"2026-10-25T23:46:28.271081+00:00","technologies":["core-osv","python-3-10"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-15T18:53:02+00:00","detail_url":"/advisories/advisory%3Ada2c2c3f-7055-4d4f-a78b-2664df537357","group":{"id":"advisory:da2c2c3f-7055-4d4f-a78b-2664df537357","revision":1,"primary_event_id":72368,"change":"published","superseded_by":[],"changed":{"id":72368,"cve_ids":["CVE-2026-87910"],"payload":{"kind":"advisory","title":"CGA-hqv4-hqc6-4464","summary":"CGA-hqv4-hqc6-4464","evidence":"osv:CGA-hqv4-hqc6-4464","products":[{"name":{"value":"python-3.10","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.10","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22-r1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-hqv4-hqc6-4464","aliases":["CGA-hqv4-hqc6-4464"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.22-r1"}]}],"package":{"name":"python-3.10","purl":"pkg:apk/chainguard/python-3.10?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hqv4-hqc6-4464.json"},"ecosystem_specific":{"components":[{"component_name":"python-3.10","component_purl":"pkg:apk/python-3.10@3.10.21-r6","component_type":"apk","component_version":"3.10.21-r6","component_location":"/.PKGINFO","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:48:06Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.22-r1"}]}],"package":{"name":"python-3.10","purl":"pkg:apk/wolfi/python-3.10?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hqv4-hqc6-4464.json"},"ecosystem_specific":{"components":[{"component_name":"python-3.10","component_purl":"pkg:apk/python-3.10@3.10.21-r6","component_type":"apk","component_version":"3.10.21-r6","component_location":"/.PKGINFO","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:48:06Z"}]}}],"modified":"2026-10-02T23:01:34.982190939Z","provider":"osv","upstream":["CVE-2026-87910","GHSA-rj44-3777-mh5x"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/87xxx/CVE-2026-87910.json","https://mail.python.org/archives/list/security-announce@python.org/thread/57TBTLL2W6APMZR3A25B2YV7GL3EPTDJ/","https://nvd.nist.gov/vuln/detail/CVE-2026-87910","https://github.com/python/cpython/issues/157265","https://github.com/python/cpython/commit/d9565e54b1fc6d63c5be9afd58114499128fa57b","https://github.com/python/cpython/commit/fb2f0bbc3b35264f09cc2cb2934b7987527a6bc2","https://github.com/python/cpython/pull/157266","https://github.com/python/cpython","https://github.com/python/cpython/commit/9c17bace90f88dfba6d0e2fe23c8e7ae35f83955","https://github.com/python/cpython/commit/2eb0c2f1dc71847731b6ab30aebefd058d482a7f","https://github.com/python/cpython/commit/764fd0af8d9e19d3684a58d2e58bf770f0605036","https://github.com/python/cpython/commit/c1f106d240c4ffcb3608ed0a20e8aba6c865f6d3"]},"related_cves":[{"value":"CVE-2026-87910","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:da2c2c3f-7055-4d4f-a78b-2664df537357","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-87910","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":5.7,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"ACTIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-87910","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hqv4-hqc6-4464","advisory_id":"da2c2c3f-7055-4d4f-a78b-2664df537357","event_types":["advisory"],"published_at":"2026-10-25T23:46:28.271081+00:00","technologies":["core-osv","python-3-10"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-15T18:53:02+00:00","detail_url":"/events/72368"},"members":[{"id":72368,"cve_ids":["CVE-2026-87910"],"payload":{"kind":"advisory","title":"CGA-hqv4-hqc6-4464","summary":"CGA-hqv4-hqc6-4464","evidence":"osv:CGA-hqv4-hqc6-4464","products":[{"name":{"value":"python-3.10","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.10","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.10.22-r1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-hqv4-hqc6-4464","aliases":["CGA-hqv4-hqc6-4464"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.22-r1"}]}],"package":{"name":"python-3.10","purl":"pkg:apk/chainguard/python-3.10?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hqv4-hqc6-4464.json"},"ecosystem_specific":{"components":[{"component_name":"python-3.10","component_purl":"pkg:apk/python-3.10@3.10.21-r6","component_type":"apk","component_version":"3.10.21-r6","component_location":"/.PKGINFO","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:48:06Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.22-r1"}]}],"package":{"name":"python-3.10","purl":"pkg:apk/wolfi/python-3.10?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hqv4-hqc6-4464.json"},"ecosystem_specific":{"components":[{"component_name":"python-3.10","component_purl":"pkg:apk/python-3.10@3.10.21-r6","component_type":"apk","component_version":"3.10.21-r6","component_location":"/.PKGINFO","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:48:06Z"}]}}],"modified":"2026-10-02T23:01:34.982190939Z","provider":"osv","upstream":["CVE-2026-87910","GHSA-rj44-3777-mh5x"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/87xxx/CVE-2026-87910.json","https://mail.python.org/archives/list/security-announce@python.org/thread/57TBTLL2W6APMZR3A25B2YV7GL3EPTDJ/","https://nvd.nist.gov/vuln/detail/CVE-2026-87910","https://github.com/python/cpython/issues/157265","https://github.com/python/cpython/commit/d9565e54b1fc6d63c5be9afd58114499128fa57b","https://github.com/python/cpython/commit/fb2f0bbc3b35264f09cc2cb2934b7987527a6bc2","https://github.com/python/cpython/pull/157266","https://github.com/python/cpython","https://github.com/python/cpython/commit/9c17bace90f88dfba6d0e2fe23c8e7ae35f83955","https://github.com/python/cpython/commit/2eb0c2f1dc71847731b6ab30aebefd058d482a7f","https://github.com/python/cpython/commit/764fd0af8d9e19d3684a58d2e58bf770f0605036","https://github.com/python/cpython/commit/c1f106d240c4ffcb3608ed0a20e8aba6c865f6d3"]},"related_cves":[{"value":"CVE-2026-87910","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:da2c2c3f-7055-4d4f-a78b-2664df537357","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-87910","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":5.7,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"ACTIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-87910","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hqv4-hqc6-4464","advisory_id":"da2c2c3f-7055-4d4f-a78b-2664df537357","event_types":["advisory"],"published_at":"2026-10-25T23:46:28.271081+00:00","technologies":["core-osv","python-3-10"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-15T18:53:02+00:00","detail_url":"/events/72368"}]}},{"id":71607,"cve_ids":["CVE-2026-87910"],"payload":{"kind":"advisory","title":"CGA-hrv7-pwqg-466j","summary":"CGA-hrv7-pwqg-466j","evidence":"osv:CGA-hrv7-pwqg-466j","products":[{"name":{"value":"python-3.13","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.13.16_git20261002-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.13","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.13.16_git20261002-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-hrv7-pwqg-466j","aliases":["CGA-hrv7-pwqg-466j"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.16_git20261002-r0"}]}],"package":{"name":"python-3.13","purl":"pkg:apk/chainguard/python-3.13?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hrv7-pwqg-466j.json"},"ecosystem_specific":{"components":[{"component_name":"python-3.13","component_purl":"pkg:apk/python-3.13@3.13.15_git20260917-r0","component_type":"apk","component_version":"3.13.15_git20260917-r0","component_location":"/.PKGINFO","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:27:56Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.16_git20261002-r0"}]}],"package":{"name":"python-3.13","purl":"pkg:apk/wolfi/python-3.13?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hrv7-pwqg-466j.json"},"ecosystem_specific":{"components":[{"component_name":"python-3.13","component_purl":"pkg:apk/python-3.13@3.13.15_git20260917-r0","component_type":"apk","component_version":"3.13.15_git20260917-r0","component_location":"/.PKGINFO","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:27:56Z"}]}}],"modified":"2026-10-02T23:01:09.295705553Z","provider":"osv","upstream":["CVE-2026-87910","GHSA-rj44-3777-mh5x"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/87xxx/CVE-2026-87910.json","https://mail.python.org/archives/list/security-announce@python.org/thread/57TBTLL2W6APMZR3A25B2YV7GL3EPTDJ/","https://nvd.nist.gov/vuln/detail/CVE-2026-87910","https://github.com/python/cpython/issues/157265","https://github.com/python/cpython/commit/d9565e54b1fc6d63c5be9afd58114499128fa57b","https://github.com/python/cpython/commit/fb2f0bbc3b35264f09cc2cb2934b7987527a6bc2","https://github.com/python/cpython/pull/157266","https://github.com/python/cpython","https://github.com/python/cpython/commit/9c17bace90f88dfba6d0e2fe23c8e7ae35f83955","https://github.com/python/cpython/commit/2eb0c2f1dc71847731b6ab30aebefd058d482a7f","https://github.com/python/cpython/commit/764fd0af8d9e19d3684a58d2e58bf770f0605036","https://github.com/python/cpython/commit/c1f106d240c4ffcb3608ed0a20e8aba6c865f6d3"]},"related_cves":[{"value":"CVE-2026-87910","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f451c6e5-ee40-43f6-86d5-28b0d8062014","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-87910","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":5.7,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"ACTIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-87910","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hrv7-pwqg-466j","advisory_id":"f451c6e5-ee40-43f6-86d5-28b0d8062014","event_types":["advisory"],"published_at":"2026-10-25T23:22:31.63264+00:00","technologies":["core-osv","python-3-13"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-17T23:59:59+00:00","detail_url":"/advisories/advisory%3Af451c6e5-ee40-43f6-86d5-28b0d8062014","group":{"id":"advisory:f451c6e5-ee40-43f6-86d5-28b0d8062014","revision":1,"primary_event_id":72028,"change":"published","superseded_by":[],"changed":{"id":72028,"cve_ids":["CVE-2026-87910"],"payload":{"kind":"advisory","title":"CGA-hrv7-pwqg-466j","summary":"CGA-hrv7-pwqg-466j","evidence":"osv:CGA-hrv7-pwqg-466j","products":[{"name":{"value":"python-3.13","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.13.16_git20261002-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.13","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.13.16_git20261002-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-hrv7-pwqg-466j","aliases":["CGA-hrv7-pwqg-466j"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.16_git20261002-r0"}]}],"package":{"name":"python-3.13","purl":"pkg:apk/chainguard/python-3.13?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hrv7-pwqg-466j.json"},"ecosystem_specific":{"components":[{"component_name":"python-3.13","component_purl":"pkg:apk/python-3.13@3.13.15_git20260917-r0","component_type":"apk","component_version":"3.13.15_git20260917-r0","component_location":"/.PKGINFO","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:27:56Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.16_git20261002-r0"}]}],"package":{"name":"python-3.13","purl":"pkg:apk/wolfi/python-3.13?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hrv7-pwqg-466j.json"},"ecosystem_specific":{"components":[{"component_name":"python-3.13","component_purl":"pkg:apk/python-3.13@3.13.15_git20260917-r0","component_type":"apk","component_version":"3.13.15_git20260917-r0","component_location":"/.PKGINFO","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:27:56Z"}]}}],"modified":"2026-10-02T23:01:09.295705553Z","provider":"osv","upstream":["CVE-2026-87910","GHSA-rj44-3777-mh5x"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/87xxx/CVE-2026-87910.json","https://mail.python.org/archives/list/security-announce@python.org/thread/57TBTLL2W6APMZR3A25B2YV7GL3EPTDJ/","https://nvd.nist.gov/vuln/detail/CVE-2026-87910","https://github.com/python/cpython/issues/157265","https://github.com/python/cpython/commit/d9565e54b1fc6d63c5be9afd58114499128fa57b","https://github.com/python/cpython/commit/fb2f0bbc3b35264f09cc2cb2934b7987527a6bc2","https://github.com/python/cpython/pull/157266","https://github.com/python/cpython","https://github.com/python/cpython/commit/9c17bace90f88dfba6d0e2fe23c8e7ae35f83955","https://github.com/python/cpython/commit/2eb0c2f1dc71847731b6ab30aebefd058d482a7f","https://github.com/python/cpython/commit/764fd0af8d9e19d3684a58d2e58bf770f0605036","https://github.com/python/cpython/commit/c1f106d240c4ffcb3608ed0a20e8aba6c865f6d3"]},"related_cves":[{"value":"CVE-2026-87910","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f451c6e5-ee40-43f6-86d5-28b0d8062014","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-87910","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":5.7,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"ACTIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-87910","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hrv7-pwqg-466j","advisory_id":"f451c6e5-ee40-43f6-86d5-28b0d8062014","event_types":["advisory"],"published_at":"2026-10-25T23:22:31.63264+00:00","technologies":["core-osv","python-3-13"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-17T23:59:59+00:00","detail_url":"/events/72028"},"members":[{"id":72028,"cve_ids":["CVE-2026-87910"],"payload":{"kind":"advisory","title":"CGA-hrv7-pwqg-466j","summary":"CGA-hrv7-pwqg-466j","evidence":"osv:CGA-hrv7-pwqg-466j","products":[{"name":{"value":"python-3.13","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.13.16_git20261002-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.13","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.13.16_git20261002-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-hrv7-pwqg-466j","aliases":["CGA-hrv7-pwqg-466j"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.16_git20261002-r0"}]}],"package":{"name":"python-3.13","purl":"pkg:apk/chainguard/python-3.13?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hrv7-pwqg-466j.json"},"ecosystem_specific":{"components":[{"component_name":"python-3.13","component_purl":"pkg:apk/python-3.13@3.13.15_git20260917-r0","component_type":"apk","component_version":"3.13.15_git20260917-r0","component_location":"/.PKGINFO","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:27:56Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.16_git20261002-r0"}]}],"package":{"name":"python-3.13","purl":"pkg:apk/wolfi/python-3.13?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hrv7-pwqg-466j.json"},"ecosystem_specific":{"components":[{"component_name":"python-3.13","component_purl":"pkg:apk/python-3.13@3.13.15_git20260917-r0","component_type":"apk","component_version":"3.13.15_git20260917-r0","component_location":"/.PKGINFO","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:27:56Z"}]}}],"modified":"2026-10-02T23:01:09.295705553Z","provider":"osv","upstream":["CVE-2026-87910","GHSA-rj44-3777-mh5x"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/87xxx/CVE-2026-87910.json","https://mail.python.org/archives/list/security-announce@python.org/thread/57TBTLL2W6APMZR3A25B2YV7GL3EPTDJ/","https://nvd.nist.gov/vuln/detail/CVE-2026-87910","https://github.com/python/cpython/issues/157265","https://github.com/python/cpython/commit/d9565e54b1fc6d63c5be9afd58114499128fa57b","https://github.com/python/cpython/commit/fb2f0bbc3b35264f09cc2cb2934b7987527a6bc2","https://github.com/python/cpython/pull/157266","https://github.com/python/cpython","https://github.com/python/cpython/commit/9c17bace90f88dfba6d0e2fe23c8e7ae35f83955","https://github.com/python/cpython/commit/2eb0c2f1dc71847731b6ab30aebefd058d482a7f","https://github.com/python/cpython/commit/764fd0af8d9e19d3684a58d2e58bf770f0605036","https://github.com/python/cpython/commit/c1f106d240c4ffcb3608ed0a20e8aba6c865f6d3"]},"related_cves":[{"value":"CVE-2026-87910","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f451c6e5-ee40-43f6-86d5-28b0d8062014","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-87910","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":5.7,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"ACTIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-87910","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hrv7-pwqg-466j","advisory_id":"f451c6e5-ee40-43f6-86d5-28b0d8062014","event_types":["advisory"],"published_at":"2026-10-25T23:22:31.63264+00:00","technologies":["core-osv","python-3-13"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-17T23:59:59+00:00","detail_url":"/events/72028"}]}},{"id":71060,"cve_ids":["CVE-2026-87910"],"payload":{"kind":"advisory","title":"CGA-w3w8-6cvm-f8mf","summary":"CGA-w3w8-6cvm-f8mf","evidence":"osv:CGA-w3w8-6cvm-f8mf","products":[{"name":{"value":"python-3.13","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.13.16_git20261002-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.13","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.13.16_git20261002-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-w3w8-6cvm-f8mf","aliases":["CGA-w3w8-6cvm-f8mf"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.16_git20261002-r0"}]}],"package":{"name":"python-3.13","purl":"pkg:apk/chainguard/python-3.13?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w3w8-6cvm-f8mf.json"},"ecosystem_specific":{"components":[{"component_name":"python-3.13","component_purl":"pkg:apk/python-3.13@3.13.15_git20260917-r0","component_type":"apk","component_version":"3.13.15_git20260917-r0","component_location":"/.PKGINFO","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:10:44Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.16_git20261002-r0"}]}],"package":{"name":"python-3.13","purl":"pkg:apk/wolfi/python-3.13?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w3w8-6cvm-f8mf.json"},"ecosystem_specific":{"components":[{"component_name":"python-3.13","component_purl":"pkg:apk/python-3.13@3.13.15_git20260917-r0","component_type":"apk","component_version":"3.13.15_git20260917-r0","component_location":"/.PKGINFO","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:10:44Z"}]}}],"modified":"2026-10-02T23:00:11.624634211Z","provider":"osv","upstream":["CVE-2026-87910","GHSA-rj44-3777-mh5x"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/87xxx/CVE-2026-87910.json","https://mail.python.org/archives/list/security-announce@python.org/thread/57TBTLL2W6APMZR3A25B2YV7GL3EPTDJ/","https://nvd.nist.gov/vuln/detail/CVE-2026-87910","https://github.com/python/cpython/issues/157265","https://github.com/python/cpython/commit/d9565e54b1fc6d63c5be9afd58114499128fa57b","https://github.com/python/cpython/commit/fb2f0bbc3b35264f09cc2cb2934b7987527a6bc2","https://github.com/python/cpython/pull/157266","https://github.com/python/cpython","https://github.com/python/cpython/commit/9c17bace90f88dfba6d0e2fe23c8e7ae35f83955","https://github.com/python/cpython/commit/2eb0c2f1dc71847731b6ab30aebefd058d482a7f","https://github.com/python/cpython/commit/764fd0af8d9e19d3684a58d2e58bf770f0605036","https://github.com/python/cpython/commit/c1f106d240c4ffcb3608ed0a20e8aba6c865f6d3"]},"related_cves":[{"value":"CVE-2026-87910","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:6346a19e-b559-43e8-a68b-ef19bc1afc28","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-87910","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":5.7,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"ACTIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-87910","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-w3w8-6cvm-f8mf","advisory_id":"6346a19e-b559-43e8-a68b-ef19bc1afc28","event_types":["advisory"],"published_at":"2026-10-25T22:48:59.116563+00:00","technologies":["core-osv","python-3-13"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-17T21:55:07+00:00","detail_url":"/advisories/advisory%3A6346a19e-b559-43e8-a68b-ef19bc1afc28","group":{"id":"advisory:6346a19e-b559-43e8-a68b-ef19bc1afc28","revision":1,"primary_event_id":71434,"change":"published","superseded_by":[],"changed":{"id":71434,"cve_ids":["CVE-2026-87910"],"payload":{"kind":"advisory","title":"CGA-w3w8-6cvm-f8mf","summary":"CGA-w3w8-6cvm-f8mf","evidence":"osv:CGA-w3w8-6cvm-f8mf","products":[{"name":{"value":"python-3.13","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.13.16_git20261002-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.13","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.13.16_git20261002-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-w3w8-6cvm-f8mf","aliases":["CGA-w3w8-6cvm-f8mf"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.16_git20261002-r0"}]}],"package":{"name":"python-3.13","purl":"pkg:apk/chainguard/python-3.13?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w3w8-6cvm-f8mf.json"},"ecosystem_specific":{"components":[{"component_name":"python-3.13","component_purl":"pkg:apk/python-3.13@3.13.15_git20260917-r0","component_type":"apk","component_version":"3.13.15_git20260917-r0","component_location":"/.PKGINFO","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:10:44Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.16_git20261002-r0"}]}],"package":{"name":"python-3.13","purl":"pkg:apk/wolfi/python-3.13?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w3w8-6cvm-f8mf.json"},"ecosystem_specific":{"components":[{"component_name":"python-3.13","component_purl":"pkg:apk/python-3.13@3.13.15_git20260917-r0","component_type":"apk","component_version":"3.13.15_git20260917-r0","component_location":"/.PKGINFO","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:10:44Z"}]}}],"modified":"2026-10-02T23:00:11.624634211Z","provider":"osv","upstream":["CVE-2026-87910","GHSA-rj44-3777-mh5x"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/87xxx/CVE-2026-87910.json","https://mail.python.org/archives/list/security-announce@python.org/thread/57TBTLL2W6APMZR3A25B2YV7GL3EPTDJ/","https://nvd.nist.gov/vuln/detail/CVE-2026-87910","https://github.com/python/cpython/issues/157265","https://github.com/python/cpython/commit/d9565e54b1fc6d63c5be9afd58114499128fa57b","https://github.com/python/cpython/commit/fb2f0bbc3b35264f09cc2cb2934b7987527a6bc2","https://github.com/python/cpython/pull/157266","https://github.com/python/cpython","https://github.com/python/cpython/commit/9c17bace90f88dfba6d0e2fe23c8e7ae35f83955","https://github.com/python/cpython/commit/2eb0c2f1dc71847731b6ab30aebefd058d482a7f","https://github.com/python/cpython/commit/764fd0af8d9e19d3684a58d2e58bf770f0605036","https://github.com/python/cpython/commit/c1f106d240c4ffcb3608ed0a20e8aba6c865f6d3"]},"related_cves":[{"value":"CVE-2026-87910","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:6346a19e-b559-43e8-a68b-ef19bc1afc28","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-87910","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":5.7,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"ACTIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-87910","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-w3w8-6cvm-f8mf","advisory_id":"6346a19e-b559-43e8-a68b-ef19bc1afc28","event_types":["advisory"],"published_at":"2026-10-25T22:48:59.116563+00:00","technologies":["core-osv","python-3-13"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-17T21:55:07+00:00","detail_url":"/events/71434"},"members":[{"id":71434,"cve_ids":["CVE-2026-87910"],"payload":{"kind":"advisory","title":"CGA-w3w8-6cvm-f8mf","summary":"CGA-w3w8-6cvm-f8mf","evidence":"osv:CGA-w3w8-6cvm-f8mf","products":[{"name":{"value":"python-3.13","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.13.16_git20261002-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"python-3.13","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.13.16_git20261002-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-w3w8-6cvm-f8mf","aliases":["CGA-w3w8-6cvm-f8mf"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.16_git20261002-r0"}]}],"package":{"name":"python-3.13","purl":"pkg:apk/chainguard/python-3.13?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w3w8-6cvm-f8mf.json"},"ecosystem_specific":{"components":[{"component_name":"python-3.13","component_purl":"pkg:apk/python-3.13@3.13.15_git20260917-r0","component_type":"apk","component_version":"3.13.15_git20260917-r0","component_location":"/.PKGINFO","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:10:44Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.16_git20261002-r0"}]}],"package":{"name":"python-3.13","purl":"pkg:apk/wolfi/python-3.13?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w3w8-6cvm-f8mf.json"},"ecosystem_specific":{"components":[{"component_name":"python-3.13","component_purl":"pkg:apk/python-3.13@3.13.15_git20260917-r0","component_type":"apk","component_version":"3.13.15_git20260917-r0","component_location":"/.PKGINFO","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:10:44Z"}]}}],"modified":"2026-10-02T23:00:11.624634211Z","provider":"osv","upstream":["CVE-2026-87910","GHSA-rj44-3777-mh5x"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/87xxx/CVE-2026-87910.json","https://mail.python.org/archives/list/security-announce@python.org/thread/57TBTLL2W6APMZR3A25B2YV7GL3EPTDJ/","https://nvd.nist.gov/vuln/detail/CVE-2026-87910","https://github.com/python/cpython/issues/157265","https://github.com/python/cpython/commit/d9565e54b1fc6d63c5be9afd58114499128fa57b","https://github.com/python/cpython/commit/fb2f0bbc3b35264f09cc2cb2934b7987527a6bc2","https://github.com/python/cpython/pull/157266","https://github.com/python/cpython","https://github.com/python/cpython/commit/9c17bace90f88dfba6d0e2fe23c8e7ae35f83955","https://github.com/python/cpython/commit/2eb0c2f1dc71847731b6ab30aebefd058d482a7f","https://github.com/python/cpython/commit/764fd0af8d9e19d3684a58d2e58bf770f0605036","https://github.com/python/cpython/commit/c1f106d240c4ffcb3608ed0a20e8aba6c865f6d3"]},"related_cves":[{"value":"CVE-2026-87910","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:6346a19e-b559-43e8-a68b-ef19bc1afc28","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-87910","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":5.7,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"ACTIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-87910","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-w3w8-6cvm-f8mf","advisory_id":"6346a19e-b559-43e8-a68b-ef19bc1afc28","event_types":["advisory"],"published_at":"2026-10-25T22:48:59.116563+00:00","technologies":["core-osv","python-3-13"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-17T21:55:07+00:00","detail_url":"/events/71434"}]}},{"id":1627,"cve_ids":["CVE-2026-87910"],"payload":{"kind":"advisory","title":"PSF-2026-40","summary":"When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was ignored. Instead, the member should be skipped if either call returns None.","evidence":"osv:PSF-2026-40","products":[],"severity":"unknown","structured":{"id":"PSF-2026-40","aliases":["BIT-libpython-2026-87910","BIT-python-2026-87910","BIT-python-min-2026-87910","CVE-2026-87910","PSF-2026-40"],"affected":[{"ranges":[{"repo":"https://github.com/python/cpython","type":"GIT","events":[{"introduced":"0"},{"fixed":"d9565e54b1fc6d63c5be9afd58114499128fa57b"},{"fixed":"fb2f0bbc3b35264f09cc2cb2934b7987527a6bc2"},{"fixed":"9c17bace90f88dfba6d0e2fe23c8e7ae35f83955"},{"fixed":"764fd0af8d9e19d3684a58d2e58bf770f0605036"},{"fixed":"2eb0c2f1dc71847731b6ab30aebefd058d482a7f"},{"fixed":"c1f106d240c4ffcb3608ed0a20e8aba6c865f6d3"},{"fixed":"3105a3498aaf681ce128cf5baf83c2e5574267c5"},{"fixed":"a4919937a4e1e69a0d178909c6f20557eca5d1d0"}]}],"versions":["v3.14.8","v3.15.0rc2","v3.11.16","v3.10.21","v3.12.14","v3.13.15","v3.14.7","v3.15.0rc1","v3.15.0b4","v3.15.0b3","v3.13.14","v3.14.6","v3.15.0b2","v3.14.5","v3.15.0b1","v3.14.5rc1","v3.13.13","v3.14.4","v3.15.0a8","v3.15.0a7","v3.12.13","v3.10.20","v3.11.15","v3.15.0a6","v3.13.12","v3.14.3","v3.15.0a5","v3.15.0a4","v3.15.0a3","v3.14.2","v3.13.11","v3.13.10","v3.14.1","v3.15.0a2","v3.15.0a1","v3.13.8","v3.11.14","v3.10.19","v3.12.12","v3.14.0","v3.14.0rc3","v3.13.7","v3.14.0rc2","v3.13.6","v3.14.0rc1","v3.14.0b4","v3.14.0b3","v3.13.5","v3.13.4","v3.11.13","v3.10.18","v3.12.11","v3.14.0b2","v3.14.0b1","v3.13.3","v3.11.12","v3.12.10","v3.14.0a7","v3.10.17","v3.14.0a6","v3.14.0a5","v3.13.2","v3.12.9","v3.14.0a4","v3.14.0a3","v3.13.1","v3.12.8","v3.10.16","v3.11.11","v3.14.0a2","v3.14.0a1","v3.13.0","v3.13.0rc3","v3.12.7","v3.11.10","v3.10.15","v3.13.0rc2","v3.12.6","v3.12.5","v3.13.0rc1","v3.13.0b4","v3.13.0b3","v3.12.4","v3.13.0b2","v3.13.0b1","v3.13.0a6","v3.12.3","v3.11.9","v3.10.14","v3.13.0a5","v3.13.0a4","v3.12.2","v3.11.8","v3.13.0a3","v3.12.1","v3.11.7","v3.13.0a2","v3.13.0a1","v3.11.6","v3.12.0","v3.12.0rc3","v3.12.0rc2","v3.11.5","v3.10.13","v3.12.0rc1","v3.12.0b4","v3.12.0b3","v3.11.4","v3.10.12","v3.12.0b2","v3.12.0b1","v3.10.11","v3.11.3","v3.12.0a7","v3.12.0a6","v3.10.10","v3.11.2","v3.12.0a5","v3.12.0a4","v3.12.0a3","v3.10.9","v3.11.1","v3.12.0a2","v3.12.0a1","v3.11.0rc2","v3.10.8","v3.10.7","v3.11.0rc1","v3.10.6","v3.11.0b5","v3.11.0b4","v3.10.5","v3.11.0b3","v3.11.0b2","v3.11.0b1","v3.11.0a7","v3.10.4","v3.10.3","v3.11.0a6","v3.11.0a5","v3.11.0a4","v3.10.2","v3.11.0a3","v3.10.1","v3.10.0rc2","v3.10.0rc1","v3.10.0b4","v3.10.0b3","v3.10.0b2","v3.10.0b1","v3.10.0a7","v3.10.0a1","v3.9.0a2","v3.7.0a2","v3.6.0b1","v3.6.0a3","v3.5.0b1","v3.5.0a4","v3.5.0a3","v3.5.0a2","v3.5.0a1","v3.4.0b3","v3.4.0b2","v3.4.0b1","v3.4.0a4","v3.4.0a3","v3.4.0a2","v3.4.0a1","v3.3.0rc3","v3.3.0rc2","v3.3.0rc1","v3.3.0b2","v3.3.0b1","v3.3.0a4","v3.3.0a3","v3.3.0a2","v3.2rc3","v3.2rc2","v3.2rc1","v3.2b2","v3.2b1","v3.2a4","v3.2a3","v3.2a2","v3.2a1","v3.1","v3.1rc2","v3.1rc1","v3.1b1","v3.1a2","v3.1a1","v3.0rc3","v3.0rc2","v3.0rc1","v3.0b3","v3.0b2","v3.0b1","v3.0a5","v3.0a4","v3.0a3","v3.0a2","v3.0a1","v2.4","v2.4c1","v2.4b2","v2.4b1","v2.4a3","v2.4a2","v2.4a1","v2.3c2","v2.3c1","v2.2a3","v2.1","v2.1c2","v2.1c1","v2.1b2","v2.1b1","v2.1a2","v2.1a1","v2.0","v2.0c1","v2.0b2","v2.0b1","v1.6a2","v1.6a1","v1.5.2","v1.5.2c1","v1.5.2b2","v1.5.2b1","v1.5.2a2","v1.5.2a1","v1.5.1","v1.5","v1.5b2","v1.5b1","v1.5a4","v1.5a3","v1.5a2","v1.5a1","v1.4","v1.4b3","v1.4b2","v1.4b1","v1.3","v1.3b1","v1.2","v1.2b4","v1.2b3","v1.2b2","v1.2b1","v1.1.1","v1.1","v1.0.2","v1.0.1","v0.9.9","v0.9.8"],"database_specific":{"source":"https://github.com/psf/advisory-database/blob/main/advisories/python/PSF-2026-40.json"}}],"modified":"2026-10-02T02:00:04.675328054Z","provider":"osv","references":["https://mail.python.org/archives/list/security-announce@python.org/thread/57TBTLL2W6APMZR3A25B2YV7GL3EPTDJ/","https://github.com/python/cpython/pull/157266","https://github.com/python/cpython/issues/157265","https://github.com/python/cpython/commit/d9565e54b1fc6d63c5be9afd58114499128fa57b","https://github.com/python/cpython/commit/fb2f0bbc3b35264f09cc2cb2934b7987527a6bc2","https://github.com/python/cpython/commit/9c17bace90f88dfba6d0e2fe23c8e7ae35f83955","https://github.com/python/cpython/commit/764fd0af8d9e19d3684a58d2e58bf770f0605036","https://github.com/python/cpython/commit/2eb0c2f1dc71847731b6ab30aebefd058d482a7f","https://github.com/python/cpython/commit/c1f106d240c4ffcb3608ed0a20e8aba6c865f6d3","https://github.com/python/cpython/commit/3105a3498aaf681ce128cf5baf83c2e5574267c5","https://github.com/python/cpython/commit/a4919937a4e1e69a0d178909c6f20557eca5d1d0"],"provider_metadata":{"cwe_ids":[]}},"related_cves":[{"value":"CVE-2026-87910","evidence":"/aliases"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:105200ec-7911-4654-9872-b62381fe8732","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-87910","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":5.7,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"ACTIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-87910","relationship":"advisory","known_exploited":false,"relationship_evidence":"/aliases"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/PSF-2026-40","advisory_id":"105200ec-7911-4654-9872-b62381fe8732","event_types":["advisory"],"published_at":"2026-10-25T20:32:31.908233+00:00","technologies":["core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-11T17:27:04.339+00:00","detail_url":"/advisories/advisory%3A105200ec-7911-4654-9872-b62381fe8732","group":{"id":"advisory:105200ec-7911-4654-9872-b62381fe8732","revision":1,"primary_event_id":65277,"change":"published","superseded_by":[],"changed":{"id":65277,"cve_ids":["CVE-2026-87910"],"payload":{"kind":"advisory","title":"PSF-2026-40","summary":"When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was ignored. Instead, the member should be skipped if either call returns None.","evidence":"osv:PSF-2026-40","products":[],"severity":"unknown","structured":{"id":"PSF-2026-40","aliases":["BIT-libpython-2026-87910","BIT-python-2026-87910","BIT-python-min-2026-87910","CVE-2026-87910","PSF-2026-40"],"affected":[{"ranges":[{"repo":"https://github.com/python/cpython","type":"GIT","events":[{"introduced":"0"},{"fixed":"d9565e54b1fc6d63c5be9afd58114499128fa57b"},{"fixed":"fb2f0bbc3b35264f09cc2cb2934b7987527a6bc2"},{"fixed":"9c17bace90f88dfba6d0e2fe23c8e7ae35f83955"},{"fixed":"764fd0af8d9e19d3684a58d2e58bf770f0605036"},{"fixed":"2eb0c2f1dc71847731b6ab30aebefd058d482a7f"},{"fixed":"c1f106d240c4ffcb3608ed0a20e8aba6c865f6d3"},{"fixed":"3105a3498aaf681ce128cf5baf83c2e5574267c5"},{"fixed":"a4919937a4e1e69a0d178909c6f20557eca5d1d0"}]}],"versions":["v3.14.8","v3.15.0rc2","v3.11.16","v3.10.21","v3.12.14","v3.13.15","v3.14.7","v3.15.0rc1","v3.15.0b4","v3.15.0b3","v3.13.14","v3.14.6","v3.15.0b2","v3.14.5","v3.15.0b1","v3.14.5rc1","v3.13.13","v3.14.4","v3.15.0a8","v3.15.0a7","v3.12.13","v3.10.20","v3.11.15","v3.15.0a6","v3.13.12","v3.14.3","v3.15.0a5","v3.15.0a4","v3.15.0a3","v3.14.2","v3.13.11","v3.13.10","v3.14.1","v3.15.0a2","v3.15.0a1","v3.13.8","v3.11.14","v3.10.19","v3.12.12","v3.14.0","v3.14.0rc3","v3.13.7","v3.14.0rc2","v3.13.6","v3.14.0rc1","v3.14.0b4","v3.14.0b3","v3.13.5","v3.13.4","v3.11.13","v3.10.18","v3.12.11","v3.14.0b2","v3.14.0b1","v3.13.3","v3.11.12","v3.12.10","v3.14.0a7","v3.10.17","v3.14.0a6","v3.14.0a5","v3.13.2","v3.12.9","v3.14.0a4","v3.14.0a3","v3.13.1","v3.12.8","v3.10.16","v3.11.11","v3.14.0a2","v3.14.0a1","v3.13.0","v3.13.0rc3","v3.12.7","v3.11.10","v3.10.15","v3.13.0rc2","v3.12.6","v3.12.5","v3.13.0rc1","v3.13.0b4","v3.13.0b3","v3.12.4","v3.13.0b2","v3.13.0b1","v3.13.0a6","v3.12.3","v3.11.9","v3.10.14","v3.13.0a5","v3.13.0a4","v3.12.2","v3.11.8","v3.13.0a3","v3.12.1","v3.11.7","v3.13.0a2","v3.13.0a1","v3.11.6","v3.12.0","v3.12.0rc3","v3.12.0rc2","v3.11.5","v3.10.13","v3.12.0rc1","v3.12.0b4","v3.12.0b3","v3.11.4","v3.10.12","v3.12.0b2","v3.12.0b1","v3.10.11","v3.11.3","v3.12.0a7","v3.12.0a6","v3.10.10","v3.11.2","v3.12.0a5","v3.12.0a4","v3.12.0a3","v3.10.9","v3.11.1","v3.12.0a2","v3.12.0a1","v3.11.0rc2","v3.10.8","v3.10.7","v3.11.0rc1","v3.10.6","v3.11.0b5","v3.11.0b4","v3.10.5","v3.11.0b3","v3.11.0b2","v3.11.0b1","v3.11.0a7","v3.10.4","v3.10.3","v3.11.0a6","v3.11.0a5","v3.11.0a4","v3.10.2","v3.11.0a3","v3.10.1","v3.10.0rc2","v3.10.0rc1","v3.10.0b4","v3.10.0b3","v3.10.0b2","v3.10.0b1","v3.10.0a7","v3.10.0a1","v3.9.0a2","v3.7.0a2","v3.6.0b1","v3.6.0a3","v3.5.0b1","v3.5.0a4","v3.5.0a3","v3.5.0a2","v3.5.0a1","v3.4.0b3","v3.4.0b2","v3.4.0b1","v3.4.0a4","v3.4.0a3","v3.4.0a2","v3.4.0a1","v3.3.0rc3","v3.3.0rc2","v3.3.0rc1","v3.3.0b2","v3.3.0b1","v3.3.0a4","v3.3.0a3","v3.3.0a2","v3.2rc3","v3.2rc2","v3.2rc1","v3.2b2","v3.2b1","v3.2a4","v3.2a3","v3.2a2","v3.2a1","v3.1","v3.1rc2","v3.1rc1","v3.1b1","v3.1a2","v3.1a1","v3.0rc3","v3.0rc2","v3.0rc1","v3.0b3","v3.0b2","v3.0b1","v3.0a5","v3.0a4","v3.0a3","v3.0a2","v3.0a1","v2.4","v2.4c1","v2.4b2","v2.4b1","v2.4a3","v2.4a2","v2.4a1","v2.3c2","v2.3c1","v2.2a3","v2.1","v2.1c2","v2.1c1","v2.1b2","v2.1b1","v2.1a2","v2.1a1","v2.0","v2.0c1","v2.0b2","v2.0b1","v1.6a2","v1.6a1","v1.5.2","v1.5.2c1","v1.5.2b2","v1.5.2b1","v1.5.2a2","v1.5.2a1","v1.5.1","v1.5","v1.5b2","v1.5b1","v1.5a4","v1.5a3","v1.5a2","v1.5a1","v1.4","v1.4b3","v1.4b2","v1.4b1","v1.3","v1.3b1","v1.2","v1.2b4","v1.2b3","v1.2b2","v1.2b1","v1.1.1","v1.1","v1.0.2","v1.0.1","v0.9.9","v0.9.8"],"database_specific":{"source":"https://github.com/psf/advisory-database/blob/main/advisories/python/PSF-2026-40.json"}}],"modified":"2026-10-02T02:00:04.675328054Z","provider":"osv","references":["https://mail.python.org/archives/list/security-announce@python.org/thread/57TBTLL2W6APMZR3A25B2YV7GL3EPTDJ/","https://github.com/python/cpython/pull/157266","https://github.com/python/cpython/issues/157265","https://github.com/python/cpython/commit/d9565e54b1fc6d63c5be9afd58114499128fa57b","https://github.com/python/cpython/commit/fb2f0bbc3b35264f09cc2cb2934b7987527a6bc2","https://github.com/python/cpython/commit/9c17bace90f88dfba6d0e2fe23c8e7ae35f83955","https://github.com/python/cpython/commit/764fd0af8d9e19d3684a58d2e58bf770f0605036","https://github.com/python/cpython/commit/2eb0c2f1dc71847731b6ab30aebefd058d482a7f","https://github.com/python/cpython/commit/c1f106d240c4ffcb3608ed0a20e8aba6c865f6d3","https://github.com/python/cpython/commit/3105a3498aaf681ce128cf5baf83c2e5574267c5","https://github.com/python/cpython/commit/a4919937a4e1e69a0d178909c6f20557eca5d1d0"],"provider_metadata":{"cwe_ids":[]}},"related_cves":[{"value":"CVE-2026-87910","evidence":"/aliases"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:105200ec-7911-4654-9872-b62381fe8732","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-87910","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":5.7,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"ACTIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-87910","relationship":"advisory","known_exploited":false,"relationship_evidence":"/aliases"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/PSF-2026-40","advisory_id":"105200ec-7911-4654-9872-b62381fe8732","event_types":["advisory"],"published_at":"2026-10-25T20:32:31.908233+00:00","technologies":["core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-11T17:27:04.339+00:00","detail_url":"/events/65277"},"members":[{"id":65277,"cve_ids":["CVE-2026-87910"],"payload":{"kind":"advisory","title":"PSF-2026-40","summary":"When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was ignored. Instead, the member should be skipped if either call returns None.","evidence":"osv:PSF-2026-40","products":[],"severity":"unknown","structured":{"id":"PSF-2026-40","aliases":["BIT-libpython-2026-87910","BIT-python-2026-87910","BIT-python-min-2026-87910","CVE-2026-87910","PSF-2026-40"],"affected":[{"ranges":[{"repo":"https://github.com/python/cpython","type":"GIT","events":[{"introduced":"0"},{"fixed":"d9565e54b1fc6d63c5be9afd58114499128fa57b"},{"fixed":"fb2f0bbc3b35264f09cc2cb2934b7987527a6bc2"},{"fixed":"9c17bace90f88dfba6d0e2fe23c8e7ae35f83955"},{"fixed":"764fd0af8d9e19d3684a58d2e58bf770f0605036"},{"fixed":"2eb0c2f1dc71847731b6ab30aebefd058d482a7f"},{"fixed":"c1f106d240c4ffcb3608ed0a20e8aba6c865f6d3"},{"fixed":"3105a3498aaf681ce128cf5baf83c2e5574267c5"},{"fixed":"a4919937a4e1e69a0d178909c6f20557eca5d1d0"}]}],"versions":["v3.14.8","v3.15.0rc2","v3.11.16","v3.10.21","v3.12.14","v3.13.15","v3.14.7","v3.15.0rc1","v3.15.0b4","v3.15.0b3","v3.13.14","v3.14.6","v3.15.0b2","v3.14.5","v3.15.0b1","v3.14.5rc1","v3.13.13","v3.14.4","v3.15.0a8","v3.15.0a7","v3.12.13","v3.10.20","v3.11.15","v3.15.0a6","v3.13.12","v3.14.3","v3.15.0a5","v3.15.0a4","v3.15.0a3","v3.14.2","v3.13.11","v3.13.10","v3.14.1","v3.15.0a2","v3.15.0a1","v3.13.8","v3.11.14","v3.10.19","v3.12.12","v3.14.0","v3.14.0rc3","v3.13.7","v3.14.0rc2","v3.13.6","v3.14.0rc1","v3.14.0b4","v3.14.0b3","v3.13.5","v3.13.4","v3.11.13","v3.10.18","v3.12.11","v3.14.0b2","v3.14.0b1","v3.13.3","v3.11.12","v3.12.10","v3.14.0a7","v3.10.17","v3.14.0a6","v3.14.0a5","v3.13.2","v3.12.9","v3.14.0a4","v3.14.0a3","v3.13.1","v3.12.8","v3.10.16","v3.11.11","v3.14.0a2","v3.14.0a1","v3.13.0","v3.13.0rc3","v3.12.7","v3.11.10","v3.10.15","v3.13.0rc2","v3.12.6","v3.12.5","v3.13.0rc1","v3.13.0b4","v3.13.0b3","v3.12.4","v3.13.0b2","v3.13.0b1","v3.13.0a6","v3.12.3","v3.11.9","v3.10.14","v3.13.0a5","v3.13.0a4","v3.12.2","v3.11.8","v3.13.0a3","v3.12.1","v3.11.7","v3.13.0a2","v3.13.0a1","v3.11.6","v3.12.0","v3.12.0rc3","v3.12.0rc2","v3.11.5","v3.10.13","v3.12.0rc1","v3.12.0b4","v3.12.0b3","v3.11.4","v3.10.12","v3.12.0b2","v3.12.0b1","v3.10.11","v3.11.3","v3.12.0a7","v3.12.0a6","v3.10.10","v3.11.2","v3.12.0a5","v3.12.0a4","v3.12.0a3","v3.10.9","v3.11.1","v3.12.0a2","v3.12.0a1","v3.11.0rc2","v3.10.8","v3.10.7","v3.11.0rc1","v3.10.6","v3.11.0b5","v3.11.0b4","v3.10.5","v3.11.0b3","v3.11.0b2","v3.11.0b1","v3.11.0a7","v3.10.4","v3.10.3","v3.11.0a6","v3.11.0a5","v3.11.0a4","v3.10.2","v3.11.0a3","v3.10.1","v3.10.0rc2","v3.10.0rc1","v3.10.0b4","v3.10.0b3","v3.10.0b2","v3.10.0b1","v3.10.0a7","v3.10.0a1","v3.9.0a2","v3.7.0a2","v3.6.0b1","v3.6.0a3","v3.5.0b1","v3.5.0a4","v3.5.0a3","v3.5.0a2","v3.5.0a1","v3.4.0b3","v3.4.0b2","v3.4.0b1","v3.4.0a4","v3.4.0a3","v3.4.0a2","v3.4.0a1","v3.3.0rc3","v3.3.0rc2","v3.3.0rc1","v3.3.0b2","v3.3.0b1","v3.3.0a4","v3.3.0a3","v3.3.0a2","v3.2rc3","v3.2rc2","v3.2rc1","v3.2b2","v3.2b1","v3.2a4","v3.2a3","v3.2a2","v3.2a1","v3.1","v3.1rc2","v3.1rc1","v3.1b1","v3.1a2","v3.1a1","v3.0rc3","v3.0rc2","v3.0rc1","v3.0b3","v3.0b2","v3.0b1","v3.0a5","v3.0a4","v3.0a3","v3.0a2","v3.0a1","v2.4","v2.4c1","v2.4b2","v2.4b1","v2.4a3","v2.4a2","v2.4a1","v2.3c2","v2.3c1","v2.2a3","v2.1","v2.1c2","v2.1c1","v2.1b2","v2.1b1","v2.1a2","v2.1a1","v2.0","v2.0c1","v2.0b2","v2.0b1","v1.6a2","v1.6a1","v1.5.2","v1.5.2c1","v1.5.2b2","v1.5.2b1","v1.5.2a2","v1.5.2a1","v1.5.1","v1.5","v1.5b2","v1.5b1","v1.5a4","v1.5a3","v1.5a2","v1.5a1","v1.4","v1.4b3","v1.4b2","v1.4b1","v1.3","v1.3b1","v1.2","v1.2b4","v1.2b3","v1.2b2","v1.2b1","v1.1.1","v1.1","v1.0.2","v1.0.1","v0.9.9","v0.9.8"],"database_specific":{"source":"https://github.com/psf/advisory-database/blob/main/advisories/python/PSF-2026-40.json"}}],"modified":"2026-10-02T02:00:04.675328054Z","provider":"osv","references":["https://mail.python.org/archives/list/security-announce@python.org/thread/57TBTLL2W6APMZR3A25B2YV7GL3EPTDJ/","https://github.com/python/cpython/pull/157266","https://github.com/python/cpython/issues/157265","https://github.com/python/cpython/commit/d9565e54b1fc6d63c5be9afd58114499128fa57b","https://github.com/python/cpython/commit/fb2f0bbc3b35264f09cc2cb2934b7987527a6bc2","https://github.com/python/cpython/commit/9c17bace90f88dfba6d0e2fe23c8e7ae35f83955","https://github.com/python/cpython/commit/764fd0af8d9e19d3684a58d2e58bf770f0605036","https://github.com/python/cpython/commit/2eb0c2f1dc71847731b6ab30aebefd058d482a7f","https://github.com/python/cpython/commit/c1f106d240c4ffcb3608ed0a20e8aba6c865f6d3","https://github.com/python/cpython/commit/3105a3498aaf681ce128cf5baf83c2e5574267c5","https://github.com/python/cpython/commit/a4919937a4e1e69a0d178909c6f20557eca5d1d0"],"provider_metadata":{"cwe_ids":[]}},"related_cves":[{"value":"CVE-2026-87910","evidence":"/aliases"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:105200ec-7911-4654-9872-b62381fe8732","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-87910","metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":5.7,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"ACTIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"CPython","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-87910","relationship":"advisory","known_exploited":false,"relationship_evidence":"/aliases"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/PSF-2026-40","advisory_id":"105200ec-7911-4654-9872-b62381fe8732","event_types":["advisory"],"published_at":"2026-10-25T20:32:31.908233+00:00","technologies":["core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-11T17:27:04.339+00:00","detail_url":"/events/65277"}]}}],"next_after":72889,"next_before":1627}