[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-0864":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T11:35:27.363Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":385,"aliases":386,"duplicate_of":9,"upstream":400,"downstream":401,"duplicates":444,"related":445,"reserved_at":9,"published_at":468,"modified_at":469,"state":470,"summary":471,"references_raw":480,"kevs":563,"epss":564,"epss_history":567,"metrics":823,"affected":846},"CVE-2026-0864","When using the \"configparser\" module to write configuration files\ncontaining multi-line text values with carriage return characters (\\r) the\nresulting file could be injected with unexpected keys and values if the\nattacker controls the written value.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-74","Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')","The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.","weakness","Incomplete","Class","High",[20,24,28,32,36,40,224,228,232,236,240,281,285,289,293,297,301,305,309,313,317,321,325,329,333,337,341,345,349,353,357,361,365,369,373,377,381],{"id":21,"name":22,"techniques":23},"CAPEC-10","Buffer Overflow via Environment Variables",[],{"id":25,"name":26,"techniques":27},"CAPEC-101","Server Side Include (SSI) Injection",[],{"id":29,"name":30,"techniques":31},"CAPEC-105","HTTP Request Splitting",[],{"id":33,"name":34,"techniques":35},"CAPEC-108","Command Line Execution through SQL Injection",[],{"id":37,"name":38,"techniques":39},"CAPEC-120","Double Encoding",[],{"id":41,"name":42,"techniques":43},"CAPEC-13","Subverting Environment Variable Values",[44,142,184],{"id":45,"name":46,"tactics":47,"countermeasures":54},"T1562.003","Impair Command History Logging",[48,51],{"id":49,"name":50},"TA0030","Defense Evasion",{"id":52,"name":53},"TA0005","Stealth",[55,60,65,70,75,80,85,89,93,97,101,106,110,114,118,122,126,130,134,138],{"id":56,"name":57,"tactic":58},"D3-RF","Restore File",{"name":59},"Restore",{"id":61,"name":62,"tactic":63},"D3-CQ","Content Quarantine",{"name":64},"Isolate",{"id":66,"name":67,"tactic":68},"D3-CI","Configuration Inventory",{"name":69},"Model",{"id":71,"name":72,"tactic":73},"D3-DF","Decoy File",{"name":74},"Deceive",{"id":76,"name":77,"tactic":78},"D3-FA","File Analysis",{"name":79},"Detect",{"id":81,"name":82,"tactic":83},"D3-DRA","Disable Remote Access",{"name":84},"Harden",{"id":86,"name":87,"tactic":88},"D3-ACH","Application Configuration Hardening",{"name":84},{"id":90,"name":91,"tactic":92},"D3-RC","Restore Configuration",{"name":59},{"id":94,"name":95,"tactic":96},"D3-FE","File Encryption",{"name":84},{"id":98,"name":99,"tactic":100},"D3-FIM","File Integrity Monitoring",{"name":79},{"id":102,"name":103,"tactic":104},"D3-RKD","Registry Key Deletion",{"name":105},"Evict",{"id":107,"name":108,"tactic":109},"D3-DA","Dynamic Analysis",{"name":79},{"id":111,"name":112,"tactic":113},"D3-CF","Content Filtering",{"name":64},{"id":115,"name":116,"tactic":117},"D3-LFP","Local File Permissions",{"name":64},{"id":119,"name":120,"tactic":121},"D3-FEV","File Eviction",{"name":105},{"id":123,"name":124,"tactic":125},"D3-EFA","Emulated File Analysis",{"name":79},{"id":127,"name":128,"tactic":129},"D3-RFAM","Remote File Access Mediation",{"name":64},{"id":131,"name":132,"tactic":133},"D3-CM","Content Modification",{"name":64},{"id":135,"name":136,"tactic":137},"D3-EAL","Executable Allowlisting",{"name":64},{"id":139,"name":140,"tactic":141},"D3-EDL","Executable Denylisting",{"name":64},{"id":143,"name":144,"tactics":145,"countermeasures":157},"T1574.006","Dynamic Linker Hijacking",[146,149,152,153,154],{"id":147,"name":148},"TA0110","Persistence",{"id":150,"name":151},"TA0111","Privilege Escalation",{"id":49,"name":50},{"id":52,"name":53},{"id":155,"name":156},"TA0104","Execution",[158,160,162,164,168,170,172,174,176,178,180,182],{"id":131,"name":132,"tactic":159},{"name":64},{"id":119,"name":120,"tactic":161},{"name":105},{"id":76,"name":77,"tactic":163},{"name":79},{"id":165,"name":166,"tactic":167},"D3-SFA","System File Analysis",{"name":79},{"id":56,"name":57,"tactic":169},{"name":59},{"id":111,"name":112,"tactic":171},{"name":64},{"id":115,"name":116,"tactic":173},{"name":64},{"id":94,"name":95,"tactic":175},{"name":84},{"id":127,"name":128,"tactic":177},{"name":64},{"id":61,"name":62,"tactic":179},{"name":64},{"id":71,"name":72,"tactic":181},{"name":74},{"id":98,"name":99,"tactic":183},{"name":79},{"id":185,"name":186,"tactics":187,"countermeasures":193},"T1574.007","Path Interception by PATH Environment Variable",[188,189,190,191,192],{"id":147,"name":148},{"id":150,"name":151},{"id":49,"name":50},{"id":52,"name":53},{"id":155,"name":156},[194,196,198,200,202,204,206,208,210,212,214,216,218,220,222],{"id":131,"name":132,"tactic":195},{"name":64},{"id":76,"name":77,"tactic":197},{"name":79},{"id":71,"name":72,"tactic":199},{"name":74},{"id":111,"name":112,"tactic":201},{"name":64},{"id":119,"name":120,"tactic":203},{"name":105},{"id":98,"name":99,"tactic":205},{"name":79},{"id":115,"name":116,"tactic":207},{"name":64},{"id":94,"name":95,"tactic":209},{"name":84},{"id":135,"name":136,"tactic":211},{"name":64},{"id":107,"name":108,"tactic":213},{"name":79},{"id":127,"name":128,"tactic":215},{"name":64},{"id":139,"name":140,"tactic":217},{"name":64},{"id":123,"name":124,"tactic":219},{"name":79},{"id":61,"name":62,"tactic":221},{"name":64},{"id":56,"name":57,"tactic":223},{"name":59},{"id":225,"name":226,"techniques":227},"CAPEC-135","Format String Injection",[],{"id":229,"name":230,"techniques":231},"CAPEC-14","Client-side Injection-induced Buffer Overflow",[],{"id":233,"name":234,"techniques":235},"CAPEC-24","Filter Failure through Buffer Overflow",[],{"id":237,"name":238,"techniques":239},"CAPEC-250","XML Injection",[],{"id":241,"name":242,"techniques":243},"CAPEC-267","Leverage Alternate Encoding",[244],{"id":245,"name":246,"tactics":247,"countermeasures":250},"T1027","Obfuscated Files or Information",[248,249],{"id":49,"name":50},{"id":52,"name":53},[251,253,255,257,259,261,263,265,267,269,271,273,275,277,279],{"id":98,"name":99,"tactic":252},{"name":79},{"id":71,"name":72,"tactic":254},{"name":74},{"id":135,"name":136,"tactic":256},{"name":64},{"id":139,"name":140,"tactic":258},{"name":64},{"id":115,"name":116,"tactic":260},{"name":64},{"id":56,"name":57,"tactic":262},{"name":59},{"id":119,"name":120,"tactic":264},{"name":105},{"id":107,"name":108,"tactic":266},{"name":79},{"id":127,"name":128,"tactic":268},{"name":64},{"id":94,"name":95,"tactic":270},{"name":84},{"id":76,"name":77,"tactic":272},{"name":79},{"id":131,"name":132,"tactic":274},{"name":64},{"id":111,"name":112,"tactic":276},{"name":64},{"id":61,"name":62,"tactic":278},{"name":64},{"id":123,"name":124,"tactic":280},{"name":79},{"id":282,"name":283,"techniques":284},"CAPEC-273","HTTP Response Smuggling",[],{"id":286,"name":287,"techniques":288},"CAPEC-28","Fuzzing",[],{"id":290,"name":291,"techniques":292},"CAPEC-3","Using Leading 'Ghost' Character Sequences to Bypass Input Filters",[],{"id":294,"name":295,"techniques":296},"CAPEC-34","HTTP Response Splitting",[],{"id":298,"name":299,"techniques":300},"CAPEC-42","MIME Conversion",[],{"id":302,"name":303,"techniques":304},"CAPEC-43","Exploiting Multiple Input Interpretation Layers",[],{"id":306,"name":307,"techniques":308},"CAPEC-45","Buffer Overflow via Symbolic Links",[],{"id":310,"name":311,"techniques":312},"CAPEC-46","Overflow Variables and Tags",[],{"id":314,"name":315,"techniques":316},"CAPEC-47","Buffer Overflow via Parameter Expansion",[],{"id":318,"name":319,"techniques":320},"CAPEC-51","Poison Web Service Registry",[],{"id":322,"name":323,"techniques":324},"CAPEC-52","Embedding NULL Bytes",[],{"id":326,"name":327,"techniques":328},"CAPEC-53","Postfix, Null Terminate, and Backslash",[],{"id":330,"name":331,"techniques":332},"CAPEC-6","Argument Injection",[],{"id":334,"name":335,"techniques":336},"CAPEC-64","Using Slashes and URL Encoding Combined to Bypass Validation Logic",[],{"id":338,"name":339,"techniques":340},"CAPEC-67","String Format Overflow in syslog()",[],{"id":342,"name":343,"techniques":344},"CAPEC-7","Blind SQL Injection",[],{"id":346,"name":347,"techniques":348},"CAPEC-71","Using Unicode Encoding to Bypass Validation Logic",[],{"id":350,"name":351,"techniques":352},"CAPEC-72","URL Encoding",[],{"id":354,"name":355,"techniques":356},"CAPEC-76","Manipulating Web Input to File System Calls",[],{"id":358,"name":359,"techniques":360},"CAPEC-78","Using Escaped Slashes in Alternate Encoding",[],{"id":362,"name":363,"techniques":364},"CAPEC-79","Using Slashes in Alternate Encoding",[],{"id":366,"name":367,"techniques":368},"CAPEC-8","Buffer Overflow in an API Call",[],{"id":370,"name":371,"techniques":372},"CAPEC-80","Using UTF-8 Encoding to Bypass Validation Logic",[],{"id":374,"name":375,"techniques":376},"CAPEC-83","XPath Injection",[],{"id":378,"name":379,"techniques":380},"CAPEC-84","XQuery Injection",[],{"id":382,"name":383,"techniques":384},"CAPEC-9","Buffer Overflow in Local Command-Line Utilities",[],[],[387,388,389,390,391,392,393,394,395,396,397,398,399],"UBUNTU-CVE-2026-0864","DEBIAN-CVE-2026-0864","ALPINE-CVE-2026-0864","CGA-35qc-6mjj-c2qp","CGA-3797-65xv-g227","CGA-3c54-5jpq-3544","CGA-3hwv-c528-82x9","CGA-4rwv-hcmp-4f74","CGA-552f-hg2q-367m","CGA-7hpc-7m58-8xwh","CGA-mcc6-wwhc-pmfh","CGA-xjqj-qh8m-vpc4","CGA-xx25-7g6h-c3pm",[],[402,403,404,406,408,410,412,414,416,418,420,422,424,426,428,430,432,434,436,438,440,442],{"_key":388},{"_key":387},{"_key":405},"SUSE-SU-2026:3530-1",{"_key":407},"SUSE-SU-2026:3548-1",{"_key":409},"SUSE-SU-2026:3560-1",{"_key":411},"SUSE-SU-2026:3569-1",{"_key":413},"SUSE-SU-2026:3601-1",{"_key":415},"OPENSUSE-SU-2026:11426-1",{"_key":417},"OPENSUSE-SU-2026:11427-1",{"_key":419},"OPENSUSE-SU-2026:11428-1",{"_key":421},"OPENSUSE-SU-2026:11429-1",{"_key":423},"OPENSUSE-SU-2026:11534-1",{"_key":425},"SUSE-SU-2026:3635-1",{"_key":427},"SUSE-SU-2026:3649-1",{"_key":429},"OPENSUSE-SU-2026:21595-1",{"_key":431},"SUSE-SU-2026:23159-1",{"_key":433},"SUSE-SU-2026:23191-1",{"_key":435},"SUSE-SU-2026:23212-1",{"_key":437},"SUSE-SU-2026:3855-1",{"_key":439},"SUSE-SU-2026:3862-1",{"_key":441},"SUSE-SU-2026:23303-1",{"_key":443},"SUSE-SU-2026:4174-1",[],[446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466],{"_key":405},{"_key":407},{"_key":409},{"_key":411},{"_key":413},{"_key":415},{"_key":417},{"_key":419},{"_key":421},{"_key":423},{"_key":425},{"_key":427},{"_key":429},{"_key":431},{"_key":433},{"_key":435},{"_key":437},{"_key":439},{"_key":441},{"_key":443},{"_key":467},"CGA-HX5R-4H53-PJ3X","2026-06-23T17:42:01.947Z","2026-08-13T00:29:03.258Z","Analyzed",{"cisa_kev":472,"cisa_ransomware":472,"cisa_vendor":9,"epss_severity":473,"epss_score":474,"severity":475,"severity_score":476,"severity_version":477,"severity_source":478,"severity_vector":479,"severity_status":470},false,"low",0.00126,"medium",5.5,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",[481,491,498,503,507,511,515,519,523,527,531,536,540,545,550,554,558],{"url":482,"sources":483,"tags":487},"https://github.com/python/cpython/pull/151559",[484,478,485,486],"cve.org","osv_wolfi","osv_chainguard",[488,489,490],"Patch","Issue Tracking","FIX",{"url":492,"sources":493,"tags":494},"https://mail.python.org/archives/list/security-announce@python.org/thread/CV4NE6AFCRJL7XQOHX7J5TSDHUWVWGJS/",[484,478,485,486],[495,496,497],"Vendor Advisory","Mailing List","Advisory",{"url":499,"sources":500,"tags":501},"https://github.com/python/cpython/issues/143927",[484,478,485,486],[489,488,502],"REPORT",{"url":504,"sources":505,"tags":506},"https://github.com/python/cpython/commit/5858e42c539dac8394636a6e9b30472b8994851f",[484,478,485,486],[488,490],{"url":508,"sources":509,"tags":510},"https://github.com/python/cpython/commit/0adb386f6e68eb2e73d32e19f235d012df009528",[484,478,485,486],[488,490],{"url":512,"sources":513,"tags":514},"https://github.com/python/cpython/commit/71f2e02a52d47417a6fd69f456346cd8aa7aca98",[484,478,485,486],[488,490],{"url":516,"sources":517,"tags":518},"https://github.com/python/cpython/commit/aaf850fd333cd89e9aada03d92aaa788a6cb1bb8",[484,478,485,486],[488,490],{"url":520,"sources":521,"tags":522},"https://github.com/python/cpython/commit/db4a157c790479710a1a840d7937c5c815a6f8b6",[484,478,485,486],[488,490],{"url":524,"sources":525,"tags":526},"https://github.com/python/cpython/commit/12dcbd74d3563016a8cb8c47e4898889f34f74dd",[484,478,485,486],[488,490],{"url":528,"sources":529,"tags":530},"https://github.com/python/cpython/commit/274de100bbf4345bd0c23ef5b446722e9e636908",[484,478,485,486],[488,490],{"url":532,"sources":533,"tags":535},"https://ubuntu.com/security/CVE-2026-0864",[534],"osv_ubuntu",[502],{"url":537,"sources":538,"tags":539},"https://www.cve.org/CVERecord?id=CVE-2026-0864",[534],[502],{"url":541,"sources":542,"tags":544},"https://security-tracker.debian.org/tracker/CVE-2026-0864",[543],"osv_debian",[497],{"url":546,"sources":547,"tags":549},"https://security.alpinelinux.org/vuln/CVE-2026-0864",[548],"osv_alpine",[497],{"url":551,"sources":552,"tags":553},"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/0xxx/CVE-2026-0864.json",[485,486],[497],{"url":555,"sources":556,"tags":557},"https://nvd.nist.gov/vuln/detail/CVE-2026-0864",[485,486],[497],{"url":559,"sources":560,"tags":561},"https://github.com/python/cpython",[485,486],[562],"PACKAGE",[],{"date":565,"score":474,"percentile":566},"2026-09-19",0.02655,[568,572,576,579,582,585,588,591,593,596,599,602,604,607,610,613,616,619,622,625,628,631,634,636,639,641,644,647,650,653,656,659,661,664,667,669,672,675,678,681,684,687,690,693,695,698,701,704,707,711,714,717,720,723,726,729,732,735,738,741,743,746,749,752,755,758,761,764,767,770,773,776,779,781,784,787,790,793,796,799,802,804,807,810,813,816,819,822],{"date":569,"score":570,"percentile":571},"2026-06-24",0.00127,0.02687,{"date":573,"score":574,"percentile":575},"2026-06-25",0.00128,0.02745,{"date":577,"score":574,"percentile":578},"2026-06-26",0.02758,{"date":580,"score":574,"percentile":581},"2026-06-27",0.02764,{"date":583,"score":574,"percentile":584},"2026-06-28",0.02769,{"date":586,"score":574,"percentile":587},"2026-06-29",0.02766,{"date":589,"score":574,"percentile":590},"2026-06-30",0.02767,{"date":592,"score":574,"percentile":590},"2026-07-01",{"date":594,"score":574,"percentile":595},"2026-07-02",0.02762,{"date":597,"score":574,"percentile":598},"2026-07-03",0.0276,{"date":600,"score":574,"percentile":601},"2026-07-04",0.02759,{"date":603,"score":574,"percentile":598},"2026-07-05",{"date":605,"score":574,"percentile":606},"2026-07-06",0.02763,{"date":608,"score":574,"percentile":609},"2026-07-07",0.02773,{"date":611,"score":574,"percentile":612},"2026-07-08",0.02779,{"date":614,"score":574,"percentile":615},"2026-07-09",0.02795,{"date":617,"score":574,"percentile":618},"2026-07-10",0.02794,{"date":620,"score":574,"percentile":621},"2026-07-11",0.02791,{"date":623,"score":574,"percentile":624},"2026-07-12",0.02789,{"date":626,"score":574,"percentile":627},"2026-07-13",0.02783,{"date":629,"score":574,"percentile":630},"2026-07-14",0.02784,{"date":632,"score":574,"percentile":633},"2026-07-15",0.0277,{"date":635,"score":574,"percentile":612},"2026-07-16",{"date":637,"score":574,"percentile":638},"2026-07-17",0.02782,{"date":640,"score":574,"percentile":638},"2026-07-18",{"date":642,"score":574,"percentile":643},"2026-07-19",0.02778,{"date":645,"score":574,"percentile":646},"2026-07-20",0.02774,{"date":648,"score":574,"percentile":649},"2026-07-21",0.02792,{"date":651,"score":574,"percentile":652},"2026-07-22",0.02806,{"date":654,"score":574,"percentile":655},"2026-07-23",0.02802,{"date":657,"score":574,"percentile":658},"2026-07-24",0.02808,{"date":660,"score":574,"percentile":652},"2026-07-25",{"date":662,"score":574,"percentile":663},"2026-07-26",0.02805,{"date":665,"score":574,"percentile":666},"2026-07-27",0.02807,{"date":668,"score":574,"percentile":655},"2026-07-28",{"date":670,"score":574,"percentile":671},"2026-07-29",0.02812,{"date":673,"score":574,"percentile":674},"2026-07-30",0.02819,{"date":676,"score":574,"percentile":677},"2026-07-31",0.02824,{"date":679,"score":574,"percentile":680},"2026-08-01",0.02821,{"date":682,"score":574,"percentile":683},"2026-08-02",0.0282,{"date":685,"score":574,"percentile":686},"2026-08-03",0.02815,{"date":688,"score":574,"percentile":689},"2026-08-04",0.02817,{"date":691,"score":574,"percentile":692},"2026-08-05",0.0281,{"date":694,"score":574,"percentile":655},"2026-08-06",{"date":696,"score":574,"percentile":697},"2026-08-07",0.02801,{"date":699,"score":574,"percentile":700},"2026-08-08",0.02798,{"date":702,"score":574,"percentile":703},"2026-08-09",0.028,{"date":705,"score":574,"percentile":706},"2026-08-10",0.02804,{"date":708,"score":709,"percentile":710},"2026-08-11",0.00139,0.03705,{"date":712,"score":709,"percentile":713},"2026-08-12",0.0372,{"date":715,"score":709,"percentile":716},"2026-08-13",0.03723,{"date":718,"score":709,"percentile":719},"2026-08-14",0.03752,{"date":721,"score":709,"percentile":722},"2026-08-15",0.03747,{"date":724,"score":709,"percentile":725},"2026-08-16",0.03738,{"date":727,"score":709,"percentile":728},"2026-08-17",0.0376,{"date":730,"score":709,"percentile":731},"2026-08-18",0.03768,{"date":733,"score":474,"percentile":734},"2026-08-19",0.02716,{"date":736,"score":474,"percentile":737},"2026-08-20",0.02725,{"date":739,"score":474,"percentile":740},"2026-08-21",0.02723,{"date":742,"score":474,"percentile":737},"2026-08-22",{"date":744,"score":474,"percentile":745},"2026-08-23",0.02714,{"date":747,"score":474,"percentile":748},"2026-08-24",0.02522,{"date":750,"score":474,"percentile":751},"2026-08-25",0.02532,{"date":753,"score":474,"percentile":754},"2026-08-26",0.02531,{"date":756,"score":474,"percentile":757},"2026-08-27",0.02578,{"date":759,"score":474,"percentile":760},"2026-08-28",0.02574,{"date":762,"score":474,"percentile":763},"2026-08-29",0.02579,{"date":765,"score":474,"percentile":766},"2026-08-30",0.02583,{"date":768,"score":474,"percentile":769},"2026-08-31",0.02582,{"date":771,"score":474,"percentile":772},"2026-09-01",0.02576,{"date":774,"score":474,"percentile":775},"2026-09-02",0.02575,{"date":777,"score":474,"percentile":778},"2026-09-03",0.02573,{"date":780,"score":474,"percentile":766},"2026-09-04",{"date":782,"score":474,"percentile":783},"2026-09-05",0.02588,{"date":785,"score":474,"percentile":786},"2026-09-06",0.02592,{"date":788,"score":474,"percentile":789},"2026-09-07",0.02589,{"date":791,"score":474,"percentile":792},"2026-09-08",0.02597,{"date":794,"score":474,"percentile":795},"2026-09-09",0.02613,{"date":797,"score":474,"percentile":798},"2026-09-10",0.02609,{"date":800,"score":474,"percentile":801},"2026-09-11",0.02612,{"date":803,"score":474,"percentile":801},"2026-09-12",{"date":805,"score":474,"percentile":806},"2026-09-13",0.02611,{"date":808,"score":474,"percentile":809},"2026-09-14",0.02621,{"date":811,"score":474,"percentile":812},"2026-09-15",0.02624,{"date":814,"score":474,"percentile":815},"2026-09-16",0.02645,{"date":817,"score":474,"percentile":818},"2026-09-17",0.02644,{"date":820,"score":474,"percentile":821},"2026-09-18",0.0265,{"date":565,"score":474,"percentile":566},[824,829,835,838,840,842,844],{"source":484,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":825},{"baseScore":826,"baseSeverity":827,"vectorString":828,"impactScore":9,"exploitabilityScore":9},4.1,"MEDIUM","CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",{"source":478,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":830,"cvss_v4_0":833},{"baseScore":476,"baseSeverity":827,"vectorString":479,"impactScore":831,"exploitabilityScore":832},6,4.6,{"baseScore":826,"baseSeverity":827,"vectorString":834,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",{"source":534,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":836,"cvss_v4_0":837},{"baseScore":476,"baseSeverity":9,"vectorString":479,"impactScore":831,"exploitabilityScore":832},{"baseScore":826,"baseSeverity":9,"vectorString":828,"impactScore":9,"exploitabilityScore":9},{"source":543,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":839,"cvss_v4_0":9},{"baseScore":476,"baseSeverity":9,"vectorString":479,"impactScore":831,"exploitabilityScore":832},{"source":548,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":841,"cvss_v4_0":9},{"baseScore":476,"baseSeverity":9,"vectorString":479,"impactScore":831,"exploitabilityScore":832},{"source":485,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":843},{"baseScore":826,"baseSeverity":9,"vectorString":828,"impactScore":9,"exploitabilityScore":9},{"source":486,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":845},{"baseScore":826,"baseSeverity":9,"vectorString":828,"impactScore":9,"exploitabilityScore":9},[847,864,872,878,884,890,896,901,904,907,910,913,924,928,932,943,950,954,959,963,967,971,974,978,982,986,990,994,998,1001,1036],{"ecosystem":848,"name":849,"vendor":850,"product":849,"cpe_part":9,"purl_type":851,"purl_namespace":850,"purl_name":849,"source":9,"versions":852},"Alpine Linux","python3","alpine","apk",[853,859,860,861],{"version":854,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":857,"version_end_type":858,"fixed_in":9},"lt3_12_14_r0",true,"ecosystem","3.12.14-r0","excluding",{"version":854,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":857,"version_end_type":858,"fixed_in":9},{"version":854,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":857,"version_end_type":858,"fixed_in":9},{"version":862,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":863,"version_end_type":858,"fixed_in":9},"lt3_14_7_r0","3.14.7-r0",{"ecosystem":865,"name":866,"vendor":867,"product":866,"cpe_part":9,"purl_type":851,"purl_namespace":867,"purl_name":866,"source":9,"versions":868},"Chainguard","python-3.10","chainguard",[869],{"version":870,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":871,"version_end_type":858,"fixed_in":9},"lt3_10_20_r10","3.10.20-r10",{"ecosystem":865,"name":873,"vendor":867,"product":873,"cpe_part":9,"purl_type":851,"purl_namespace":867,"purl_name":873,"source":9,"versions":874},"python-3.11",[875],{"version":876,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":877,"version_end_type":858,"fixed_in":9},"lt3_11_15_r8","3.11.15-r8",{"ecosystem":865,"name":879,"vendor":867,"product":879,"cpe_part":9,"purl_type":851,"purl_namespace":867,"purl_name":879,"source":9,"versions":880},"python-3.12",[881],{"version":882,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":883,"version_end_type":858,"fixed_in":9},"lt3_12_13_r10","3.12.13-r10",{"ecosystem":865,"name":885,"vendor":867,"product":885,"cpe_part":9,"purl_type":851,"purl_namespace":867,"purl_name":885,"source":9,"versions":886},"python-3.13",[887],{"version":888,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":889,"version_end_type":858,"fixed_in":9},"lt3_13_14_r2","3.13.14-r2",{"ecosystem":865,"name":891,"vendor":867,"product":891,"cpe_part":9,"purl_type":851,"purl_namespace":867,"purl_name":891,"source":9,"versions":892},"python-3.14",[893],{"version":894,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":895,"version_end_type":858,"fixed_in":9},"lt3_14_6_r3","3.14.6-r3",{"ecosystem":897,"name":866,"vendor":898,"product":866,"cpe_part":9,"purl_type":851,"purl_namespace":898,"purl_name":866,"source":9,"versions":899},"Wolfi","wolfi",[900],{"version":870,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":871,"version_end_type":858,"fixed_in":9},{"ecosystem":897,"name":873,"vendor":898,"product":873,"cpe_part":9,"purl_type":851,"purl_namespace":898,"purl_name":873,"source":9,"versions":902},[903],{"version":876,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":877,"version_end_type":858,"fixed_in":9},{"ecosystem":897,"name":879,"vendor":898,"product":879,"cpe_part":9,"purl_type":851,"purl_namespace":898,"purl_name":879,"source":9,"versions":905},[906],{"version":882,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":883,"version_end_type":858,"fixed_in":9},{"ecosystem":897,"name":885,"vendor":898,"product":885,"cpe_part":9,"purl_type":851,"purl_namespace":898,"purl_name":885,"source":9,"versions":908},[909],{"version":888,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":889,"version_end_type":858,"fixed_in":9},{"ecosystem":897,"name":891,"vendor":898,"product":891,"cpe_part":9,"purl_type":851,"purl_namespace":898,"purl_name":891,"source":9,"versions":911},[912],{"version":894,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":895,"version_end_type":858,"fixed_in":9},{"ecosystem":914,"name":915,"vendor":916,"product":915,"cpe_part":9,"purl_type":917,"purl_namespace":916,"purl_name":915,"source":9,"versions":918},"Debian","pypy3","debian","deb",[919,921,922,923],{"version":920,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",{"version":920,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":920,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":920,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":914,"name":925,"vendor":916,"product":925,"cpe_part":9,"purl_type":917,"purl_namespace":916,"purl_name":925,"source":9,"versions":926},"python2.7",[927],{"version":920,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":914,"name":929,"vendor":916,"product":929,"cpe_part":9,"purl_type":917,"purl_namespace":916,"purl_name":929,"source":9,"versions":930},"python3.11",[931],{"version":920,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":914,"name":933,"vendor":916,"product":933,"cpe_part":9,"purl_type":917,"purl_namespace":916,"purl_name":933,"source":9,"versions":934},"python3.13",[935,936,937,940],{"version":920,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":920,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":938,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":939,"version_end_type":858,"fixed_in":9},"lt3_13_5_2+deb13u5","3.13.5-2+deb13u5",{"version":941,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":942,"version_end_type":858,"fixed_in":9},"lt3_13_15_1","3.13.15-1",{"ecosystem":914,"name":944,"vendor":916,"product":944,"cpe_part":9,"purl_type":917,"purl_namespace":916,"purl_name":944,"source":9,"versions":945},"python3.14",[946,947],{"version":920,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":948,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":949,"version_end_type":858,"fixed_in":9},"lt3_14_7_1","3.14.7-1",{"ecosystem":914,"name":951,"vendor":916,"product":951,"cpe_part":9,"purl_type":917,"purl_namespace":916,"purl_name":951,"source":9,"versions":952},"python3.9",[953],{"version":920,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":955,"name":925,"vendor":956,"product":925,"cpe_part":9,"purl_type":917,"purl_namespace":956,"purl_name":925,"source":9,"versions":957},"Ubuntu","ubuntu",[958],{"version":920,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":955,"name":960,"vendor":956,"product":960,"cpe_part":9,"purl_type":917,"purl_namespace":956,"purl_name":960,"source":9,"versions":961},"python3.10",[962],{"version":920,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":955,"name":929,"vendor":956,"product":929,"cpe_part":9,"purl_type":917,"purl_namespace":956,"purl_name":929,"source":9,"versions":964},[965,966],{"version":920,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":920,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":955,"name":968,"vendor":956,"product":968,"cpe_part":9,"purl_type":917,"purl_namespace":956,"purl_name":968,"source":9,"versions":969},"python3.12",[970],{"version":920,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":955,"name":933,"vendor":956,"product":933,"cpe_part":9,"purl_type":917,"purl_namespace":956,"purl_name":933,"source":9,"versions":972},[973],{"version":920,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":955,"name":944,"vendor":956,"product":944,"cpe_part":9,"purl_type":917,"purl_namespace":956,"purl_name":944,"source":9,"versions":975},[976,977],{"version":920,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":920,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":955,"name":979,"vendor":956,"product":979,"cpe_part":9,"purl_type":917,"purl_namespace":956,"purl_name":979,"source":9,"versions":980},"python3.4",[981],{"version":920,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":955,"name":983,"vendor":956,"product":983,"cpe_part":9,"purl_type":917,"purl_namespace":956,"purl_name":983,"source":9,"versions":984},"python3.5",[985],{"version":920,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":955,"name":987,"vendor":956,"product":987,"cpe_part":9,"purl_type":917,"purl_namespace":956,"purl_name":987,"source":9,"versions":988},"python3.6",[989],{"version":920,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":955,"name":991,"vendor":956,"product":991,"cpe_part":9,"purl_type":917,"purl_namespace":956,"purl_name":991,"source":9,"versions":992},"python3.7",[993],{"version":920,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":955,"name":995,"vendor":956,"product":995,"cpe_part":9,"purl_type":917,"purl_namespace":956,"purl_name":995,"source":9,"versions":996},"python3.8",[997],{"version":920,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":955,"name":951,"vendor":956,"product":951,"cpe_part":9,"purl_type":917,"purl_namespace":956,"purl_name":951,"source":9,"versions":999},[1000],{"version":920,"is_range":855,"range_type":856,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":1002,"vendor":1003,"product":1004,"cpe_part":1005,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":1006},"CPython","python software foundation","cpython","a",[1007,1010,1013,1016,1021,1025,1028,1032],{"version":1008,"is_range":855,"range_type":484,"version_start":9,"version_start_type":9,"version_end":1009,"version_end_type":858,"fixed_in":9},"\u003C 3.15.0","3.15.0",{"version":1011,"is_range":855,"range_type":484,"version_start":9,"version_start_type":9,"version_end":1012,"version_end_type":858,"fixed_in":9},"\u003C 3.13.15","3.13.15",{"version":1014,"is_range":855,"range_type":484,"version_start":9,"version_start_type":9,"version_end":1015,"version_end_type":858,"fixed_in":9},"\u003C 3.10.21","3.10.21",{"version":1017,"is_range":855,"range_type":484,"version_start":1018,"version_start_type":1019,"version_end":1020,"version_end_type":858,"fixed_in":9},">= 3.11.0, \u003C 3.11.16","3.11.0","including","3.11.16",{"version":1022,"is_range":855,"range_type":484,"version_start":1023,"version_start_type":1019,"version_end":1024,"version_end_type":858,"fixed_in":9},">= 3.12.0, \u003C 3.12.14","3.12.0","3.12.14",{"version":1026,"is_range":855,"range_type":484,"version_start":1027,"version_start_type":1019,"version_end":1012,"version_end_type":858,"fixed_in":9},">= 3.13.0, \u003C 3.13.15","3.13.0",{"version":1029,"is_range":855,"range_type":484,"version_start":1030,"version_start_type":1019,"version_end":1031,"version_end_type":858,"fixed_in":9},">= 3.14.0, \u003C 3.14.7","3.14.0","3.14.7",{"version":1033,"is_range":855,"range_type":484,"version_start":1034,"version_start_type":1019,"version_end":1035,"version_end_type":858,"fixed_in":9},">= 3.15.0a1, \u003C 3.15.0b4","3.15.0a1","3.15.0b4",{"ecosystem":9,"name":1037,"vendor":1037,"product":1037,"cpe_part":1005,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":1038},"python",[1039,1042,1044,1046,1048,1050,1052,1054,1056,1058,1060,1062,1064,1066,1068,1070],{"version":1040,"is_range":855,"range_type":1041,"version_start":9,"version_start_type":9,"version_end":1015,"version_end_type":858,"fixed_in":9},"lt3.10.21","cpe",{"version":1043,"is_range":855,"range_type":1041,"version_start":1018,"version_start_type":1019,"version_end":1020,"version_end_type":858,"fixed_in":9},"gte3.11.0_lt3.11.16",{"version":1045,"is_range":855,"range_type":1041,"version_start":1023,"version_start_type":1019,"version_end":1024,"version_end_type":858,"fixed_in":9},"gte3.12.0_lt3.12.14",{"version":1047,"is_range":855,"range_type":1041,"version_start":1027,"version_start_type":1019,"version_end":1012,"version_end_type":858,"fixed_in":9},"gte3.13.0_lt3.13.15",{"version":1049,"is_range":855,"range_type":1041,"version_start":1030,"version_start_type":1019,"version_end":1031,"version_end_type":858,"fixed_in":9},"gte3.14.0_lt3.14.7",{"version":1051,"is_range":472,"range_type":1041,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"3.15.0:alpha1",{"version":1053,"is_range":472,"range_type":1041,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"3.15.0:alpha2",{"version":1055,"is_range":472,"range_type":1041,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"3.15.0:alpha3",{"version":1057,"is_range":472,"range_type":1041,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"3.15.0:alpha4",{"version":1059,"is_range":472,"range_type":1041,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"3.15.0:alpha5",{"version":1061,"is_range":472,"range_type":1041,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"3.15.0:alpha6",{"version":1063,"is_range":472,"range_type":1041,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"3.15.0:alpha7",{"version":1065,"is_range":472,"range_type":1041,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"3.15.0:alpha8",{"version":1067,"is_range":472,"range_type":1041,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"3.15.0:beta1",{"version":1069,"is_range":472,"range_type":1041,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"3.15.0:beta2",{"version":1071,"is_range":472,"range_type":1041,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"3.15.0:beta3"]