{"schemaVersion":3,"id":"CVE-2026-3479","aliases":["SUSE-SU-2026:1365-1","UBUNTU-CVE-2026-3479","DEBIAN-CVE-2026-3479","CGA-2j8v-487x-wgg8","CGA-3773-v4gj-c3x7","CGA-6jj9-wgm2-66vj","CGA-c2vv-6h44-rr83","CGA-fpw5-7qgx-g2rg","CGA-r5rf-frj6-r3mq","CGA-rpm2-3533-f23c","CGA-w2xx-qv2m-g22m","CGA-w5q4-782w-fj7m","CGA-whvw-vr8w-r38f","openSUSE-SU-2026:10520-1","openSUSE-SU-2026:10521-1","openSUSE-SU-2026:10552-1","openSUSE-SU-2026:10553-1","openSUSE-SU-2026:10554-1","openSUSE-SU-2026:10782-1","CGA-3j52-6wp3-8fw4","CGA-82rc-8wm5-m245"],"status":"published","duplicateOf":null,"title":null,"description":"DISPUTED: The project has clarified that the documentation was incorrect, and that pkgutil.get_data() has the same security model as open(). The documentation has been updated to clarify this point. There is no vulnerability in the function if following the intended security model.\n\npkgutil.get_data() did not validate the resource argument as documented, allowing path traversals.","dates":{"published":"2026-03-18T18:13:42.288Z","modified":"2026-04-07T22:01:35.724Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":0,"severity":"unknown","version":"4.0","versionLabel":"v4.0","source":"CVE.org","vector":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"4.0","versionLabel":"v4.0","source":"CVE.org","score":0,"severity":"unknown","vector":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":false},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Ubuntu","score":0,"severity":"unknown","vector":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Debian","score":0,"severity":"unknown","vector":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Wolfi","score":0,"severity":"unknown","vector":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Chainguard","score":0,"severity":"unknown","vector":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"NVD","score":0,"severity":"unknown","vector":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00254,"percentile":0.15947,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.016,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00238},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00238,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00238,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00238,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00238,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00238,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00238,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00238,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00238,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00238,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00238,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00254,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00254,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00254,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00254,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00254,"percentile":0.15947}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00238,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00238,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00238,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00238,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00238,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00254,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00254,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00254,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00254,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00254,"percentile":0.15947}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-22","name":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","description":"The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/22.html"}],"affected":[{"vendor":"chainguard","product":"python-3.10","name":"python-3.10","label":"python-3.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/python-3.10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"python-3.11","name":"python-3.11","label":"python-3.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/python-3.11","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"python-3.12","name":"python-3.12","label":"python-3.12","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/python-3.12","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"python-3.13","name":"python-3.13","label":"python-3.13","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/python-3.13","purlType":"apk","versions":[{"text":"< 3.13.13-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.13.13-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"python-3.14","name":"python-3.14","label":"python-3.14","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/python-3.14","purlType":"apk","versions":[{"text":"< 3.14.4-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.14.4-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"python-3.9","name":"python-3.9","label":"python-3.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/python-3.9","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"python-3.10","name":"python-3.10","label":"python-3.10","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/python-3.10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"python-3.11","name":"python-3.11","label":"python-3.11","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/python-3.11","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"python-3.12","name":"python-3.12","label":"python-3.12","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/python-3.12","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"python-3.13","name":"python-3.13","label":"python-3.13","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/python-3.13","purlType":"apk","versions":[{"text":"< 3.13.13-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.13.13-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"python-3.14","name":"python-3.14","label":"python-3.14","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/python-3.14","purlType":"apk","versions":[{"text":"< 3.14.4-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.14.4-r0","eol":null,"hubHref":null},{"vendor":"debian","product":"pypy3","name":"pypy3","label":"pypy3","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/pypy3","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"debian","product":"python3.11","name":"python3.11","label":"python3.11","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/python3.11","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"debian","product":"python3.13","name":"python3.13","label":"python3.13","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/python3.13","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"debian","product":"python3.14","name":"python3.14","label":"python3.14","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/python3.14","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"pypy3","name":"pypy3","label":"pypy3","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/pypy3","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"python2.7","name":"python2.7","label":"python2.7","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/python2.7","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"python3.10","name":"python3.10","label":"python3.10","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/python3.10","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"python3.11","name":"python3.11","label":"python3.11","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/python3.11","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"python3.12","name":"python3.12","label":"python3.12","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/python3.12","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"python3.13","name":"python3.13","label":"python3.13","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/python3.13","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"python3.14","name":"python3.14","label":"python3.14","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/python3.14","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"python3.4","name":"python3.4","label":"python3.4","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/python3.4","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"python3.5","name":"python3.5","label":"python3.5","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/python3.5","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"python3.6","name":"python3.6","label":"python3.6","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/python3.6","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"python3.7","name":"python3.7","label":"python3.7","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/python3.7","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"python3.8","name":"python3.8","label":"python3.8","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/python3.8","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"python3.9","name":"python3.9","label":"python3.9","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/python3.9","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"python software foundation","product":"cpython","name":"CPython","label":"cpython","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 3.13.13","noFixRecorded":false,"fixedIn":null},{"text":"≥ 3.14.0, < 3.14.4","noFixRecorded":false,"fixedIn":null},{"text":"≥ 3.15.0a1, < 3.15.0a8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.13.13 | ≥ 3.14.0, < 3.14.4 | ≥ 3.15.0a1, < 3.15.0a8","eol":null,"hubHref":"/vendor/python_software_foundation/cpython"},{"vendor":"opensuse","product":"python-moto&distro=openSUSE Tumbleweed","name":"python-moto","label":"python-moto&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/python-moto&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 5.2.1-1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.2.1-1.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"python310&distro=openSUSE Tumbleweed","name":"python310","label":"python310&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/python310&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 3.10.20-4.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.10.20-4.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"python311&distro=openSUSE Tumbleweed","name":"python311","label":"python311&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/python311&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 3.11.15-5.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.11.15-5.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"python312&distro=openSUSE Tumbleweed","name":"python312","label":"python312&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/python312&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 3.12.13-5.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.12.13-5.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"python313&distro=openSUSE Tumbleweed","name":"python313","label":"python313&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/python313&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 3.13.13-1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.13.13-1.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"python314&distro=openSUSE Tumbleweed","name":"python314","label":"python314&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/python314&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 3.14.4-1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.14.4-1.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-base&distro=SUSE Linux Enterprise Module for Package Hub 15 SP7","name":"python-base","label":"python-base&distro=SUSE Linux Enterprise Module for Package Hub 15 SP7","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-base&distro=SUSE Linux Enterprise Module for Package Hub 15 SP7","purlType":"rpm","versions":[{"text":"< 2.7.18-150000.114.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.7.18-150000.114.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python&distro=SUSE Linux Enterprise Module for Package Hub 15 SP7","name":"python","label":"python&distro=SUSE Linux Enterprise Module for Package Hub 15 SP7","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python&distro=SUSE Linux Enterprise Module for Package Hub 15 SP7","purlType":"rpm","versions":[{"text":"< 2.7.18-150000.114.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.7.18-150000.114.1","eol":null,"hubHref":null}],"affectedCount":37,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/python/cpython/pull/146122","label":"github.com/python/cpython/pull/146122","hostname":"github.com","tags":["Patch","REPORT","FIX"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/WYLLVQOOCKGK73JM7Z7ZSNOJC4N7BAWY/","label":"mail.python.org/archives/list/security-announce@python.org/thread/WYLLVQOOCKGK73JM7Z7ZSNOJC4N7BAWY/","hostname":"mail.python.org","tags":["Vendor Advisory","REPORT","Advisory"]},{"url":"https://github.com/python/cpython/issues/146121","label":"github.com/python/cpython/issues/146121","hostname":"github.com","tags":["Issue Tracking","REPORT"]},{"url":"https://github.com/python/cpython/commit/bcdf231946b1da8bdfbab4c05539bb0cc964a1c7","label":"github.com/python/cpython/commit/bcdf231946b1da8bdfbab4c05539bb0cc964a1c7","hostname":"github.com","tags":["Patch","REPORT","FIX"]},{"url":"https://github.com/python/cpython/commit/5af6ce3e7b643a30a02d22245c1e3f4a8bc0a1fe","label":"github.com/python/cpython/commit/5af6ce3e7b643a30a02d22245c1e3f4a8bc0a1fe","hostname":"github.com","tags":["Patch","FIX"]},{"url":"https://github.com/python/cpython/commit/cf59bf76470f3d75ad47d80ffb8ce76b64b5e943","label":"github.com/python/cpython/commit/cf59bf76470f3d75ad47d80ffb8ce76b64b5e943","hostname":"github.com","tags":["Patch","FIX"]},{"url":"https://github.com/python/cpython/commit/d786d59a8f7196bb630100a869f28ad13436b59c","label":"github.com/python/cpython/commit/d786d59a8f7196bb630100a869f28ad13436b59c","hostname":"github.com","tags":["Patch","FIX"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261365-1/","label":"www.suse.com/support/update/announcement/2026/suse-su-20261365-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1259989","label":"bugzilla.suse.com/1259989","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3479","label":"www.suse.com/security/cve/CVE-2026-3479","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://ubuntu.com/security/CVE-2026-3479","label":"ubuntu.com/security/CVE-2026-3479","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-3479","label":"www.cve.org/CVERecord?id=CVE-2026-3479","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://github.com/python/cpython/pull/146133","label":"github.com/python/cpython/pull/146133","hostname":"github.com","tags":["REPORT"]},{"url":"https://github.com/python/cpython/pull/146134","label":"github.com/python/cpython/pull/146134","hostname":"github.com","tags":["REPORT"]},{"url":"https://github.com/python/cpython/pull/146136","label":"github.com/python/cpython/pull/146136","hostname":"github.com","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-3479","label":"security-tracker.debian.org/tracker/CVE-2026-3479","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/3xxx/CVE-2026-3479.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/3xxx/CVE-2026-3479.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3479","label":"nvd.nist.gov/vuln/detail/CVE-2026-3479","hostname":"nvd.nist.gov","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2026:10522-1","OPENSUSE-SU-2026:20517-1","RHSA-2026:10118","RHSA-2026:11324","RHSA-2026:57660","RHSA-2026:58420","RHSA-2026:7443","RHSA-2026:7661","SUSE-SU-2026:1292-1","SUSE-SU-2026:1345-1","SUSE-SU-2026:1349-1","SUSE-SU-2026:1354-1","SUSE-SU-2026:1376-1","SUSE-SU-2026:1385-1","SUSE-SU-2026:1417-1","SUSE-SU-2026:1530-1","SUSE-SU-2026:21104-1","SUSE-SU-2026:21178-1","SUSE-SU-2026:21254-1","SUSE-SU-2026:4580-1","SUSE-SU-2026:4581-1","SUSE-SU-2026:4582-1","SUSE-SU-2026:4583-1","SUSE-SU-2026:4584-1","SUSE-SU-2026:4585-1"],"duplicates":[],"related":["CGA-G3HC-7HGR-HFV4","OPENSUSE-SU-2026:10522-1","OPENSUSE-SU-2026:20517-1","SUSE-SU-2026:1292-1","SUSE-SU-2026:1345-1","SUSE-SU-2026:1349-1","SUSE-SU-2026:1354-1","SUSE-SU-2026:1376-1","SUSE-SU-2026:1385-1","SUSE-SU-2026:1417-1","SUSE-SU-2026:1530-1","SUSE-SU-2026:21104-1","SUSE-SU-2026:21178-1","SUSE-SU-2026:21254-1","SUSE-SU-2026:4580-1","SUSE-SU-2026:4581-1","SUSE-SU-2026:4582-1","SUSE-SU-2026:4583-1","SUSE-SU-2026:4584-1","SUSE-SU-2026:4585-1"]},"timeline":[{"kind":"published","date":"2026-03-18T18:13:42.288Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-07T22:01:35.724Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T19:52:58.037Z","stale":false,"partial":false}}