[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-5713":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T11:35:27.363Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":30,"aliases":31,"duplicate_of":9,"upstream":33,"downstream":34,"duplicates":56,"related":57,"reserved_at":9,"published_at":60,"modified_at":61,"state":62,"summary":63,"references_raw":72,"kevs":107,"epss":108,"epss_history":111,"metrics":374,"affected":383},"CVE-2026-5713","The \"profiling.sampling\" module (Python 3.15+) and \"asyncio introspection capabilities\" (3.14+, \"python -m asyncio ps\" and \"python -m asyncio pstree\") features could be used to read and write addresses in a privileged process if that process connected to a malicious or \"infected\" Python process via the remote debugging feature. This vulnerability requires persistently and repeatedly connecting to the process to be exploited, even after the connecting process crashes with high likelihood due to ASLR.",null,[11,20],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-121","Stack-based Buffer Overflow","A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).","weakness","Draft","Variant","High",[],{"_key":21,"id":21,"name":22,"description":23,"type":15,"status":16,"abstraction":24,"likelihood_of_exploit":9,"capec":25},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","Base",[26],{"id":27,"name":28,"techniques":29},"CAPEC-540","Overread Buffers",[],[],[32],"DEBIAN-CVE-2026-5713",[],[35,37,38,40,42,44,46,48,50,52,54],{"_key":36},"OPENSUSE-SU-2026:10648-1",{"_key":32},{"_key":39},"UBUNTU-CVE-2026-5713",{"_key":41},"USN-8509-1",{"_key":43},"OPENSUSE-SU-2026:11181-1",{"_key":45},"RHSA-2026:9228",{"_key":47},"RHSA-2026:19019",{"_key":49},"RHSA-2026:19176",{"_key":51},"RHSA-2026:7443",{"_key":53},"RHSA-2026:8822",{"_key":55},"RHSA-2026:8824",[],[58,59],{"_key":36},{"_key":43},"2026-04-14T15:11:51.122Z","2026-07-31T13:56:32.041Z","Awaiting Analysis",{"cisa_kev":64,"cisa_ransomware":64,"cisa_vendor":9,"epss_severity":65,"epss_score":66,"severity":67,"severity_score":68,"severity_version":69,"severity_source":70,"severity_vector":71,"severity_status":62},false,"low",0.00132,"medium",5.3,"v4.0","cve.org","CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",[73,79,84,89,93,97,101],{"url":74,"sources":75,"tags":77},"https://github.com/python/cpython/pull/148187",[70,76],"nvd",[78],"Patch",{"url":80,"sources":81,"tags":82},"https://github.com/python/cpython/issues/148178",[70,76],[83],"Issue Tracking",{"url":85,"sources":86,"tags":87},"https://mail.python.org/archives/list/security-announce@python.org/thread/OG4RHARYSNIE22GGOMVMCRH76L5HKPLM/",[70,76],[88],"Vendor Advisory",{"url":90,"sources":91,"tags":92},"https://github.com/python/cpython/commit/289fd2c97a7e5aecb8b69f94f5e838ccfeee7e67",[70,76],[78],{"url":94,"sources":95,"tags":96},"http://www.openwall.com/lists/oss-security/2026/04/15/6",[70,76],[],{"url":98,"sources":99,"tags":100},"https://github.com/python/cpython/commit/316f6265b7f9ca4ffed5346b747475ef1943f35d",[70,76],[78],{"url":102,"sources":103,"tags":105},"https://security-tracker.debian.org/tracker/CVE-2026-5713",[104],"osv_debian",[106],"Advisory",[],{"date":109,"score":66,"percentile":110},"2026-09-19",0.03186,[112,116,119,122,125,128,132,135,138,141,144,147,150,153,156,159,162,165,168,171,173,176,179,182,184,187,190,193,196,199,202,205,209,212,215,218,221,224,227,230,233,236,239,242,245,248,251,254,257,260,263,266,269,271,274,276,279,282,285,288,290,293,296,299,302,305,308,311,314,317,319,322,325,328,331,334,337,340,342,345,348,350,353,355,357,359,362,365,368,371],{"date":113,"score":114,"percentile":115},"2026-04-15",0.00013,0.01921,{"date":117,"score":114,"percentile":118},"2026-04-16",0.02017,{"date":120,"score":114,"percentile":121},"2026-04-17",0.02023,{"date":123,"score":114,"percentile":124},"2026-04-18",0.02031,{"date":126,"score":114,"percentile":127},"2026-04-19",0.02013,{"date":129,"score":130,"percentile":131},"2026-04-20",0.00017,0.03929,{"date":133,"score":130,"percentile":134},"2026-04-21",0.04076,{"date":136,"score":130,"percentile":137},"2026-04-22",0.04085,{"date":139,"score":130,"percentile":140},"2026-04-23",0.04086,{"date":142,"score":130,"percentile":143},"2026-04-24",0.04091,{"date":145,"score":130,"percentile":146},"2026-04-25",0.04111,{"date":148,"score":130,"percentile":149},"2026-04-26",0.04109,{"date":151,"score":130,"percentile":152},"2026-04-27",0.04096,{"date":154,"score":130,"percentile":155},"2026-04-28",0.04125,{"date":157,"score":130,"percentile":158},"2026-04-29",0.04141,{"date":160,"score":130,"percentile":161},"2026-04-30",0.04138,{"date":163,"score":130,"percentile":164},"2026-05-01",0.04136,{"date":166,"score":130,"percentile":167},"2026-05-02",0.04129,{"date":169,"score":130,"percentile":170},"2026-05-03",0.0411,{"date":172,"score":130,"percentile":149},"2026-05-04",{"date":174,"score":130,"percentile":175},"2026-05-05",0.04103,{"date":177,"score":130,"percentile":178},"2026-05-06",0.04097,{"date":180,"score":130,"percentile":181},"2026-05-07",0.0413,{"date":183,"score":130,"percentile":164},"2026-05-08",{"date":185,"score":130,"percentile":186},"2026-05-09",0.04169,{"date":188,"score":130,"percentile":189},"2026-05-10",0.04181,{"date":191,"score":130,"percentile":192},"2026-05-11",0.04172,{"date":194,"score":130,"percentile":195},"2026-05-12",0.04176,{"date":197,"score":130,"percentile":198},"2026-05-13",0.0419,{"date":200,"score":130,"percentile":201},"2026-05-14",0.04192,{"date":203,"score":130,"percentile":204},"2026-05-15",0.04205,{"date":206,"score":207,"percentile":208},"2026-05-16",0.00018,0.05019,{"date":210,"score":207,"percentile":211},"2026-05-17",0.05014,{"date":213,"score":207,"percentile":214},"2026-05-18",0.04991,{"date":216,"score":207,"percentile":217},"2026-05-19",0.04983,{"date":219,"score":207,"percentile":220},"2026-05-20",0.0498,{"date":222,"score":207,"percentile":223},"2026-05-21",0.04982,{"date":225,"score":207,"percentile":226},"2026-05-22",0.05178,{"date":228,"score":207,"percentile":229},"2026-05-23",0.05166,{"date":231,"score":207,"percentile":232},"2026-05-24",0.05167,{"date":234,"score":207,"percentile":235},"2026-05-25",0.05151,{"date":237,"score":207,"percentile":238},"2026-05-26",0.0515,{"date":240,"score":207,"percentile":241},"2026-05-27",0.05181,{"date":243,"score":207,"percentile":244},"2026-05-28",0.05248,{"date":246,"score":207,"percentile":247},"2026-05-29",0.0526,{"date":249,"score":207,"percentile":250},"2026-05-30",0.05251,{"date":252,"score":207,"percentile":253},"2026-05-31",0.05233,{"date":255,"score":207,"percentile":256},"2026-06-01",0.05172,{"date":258,"score":207,"percentile":259},"2026-06-02",0.05102,{"date":261,"score":207,"percentile":262},"2026-06-03",0.05067,{"date":264,"score":207,"percentile":265},"2026-06-04",0.05063,{"date":267,"score":207,"percentile":268},"2026-06-05",0.05082,{"date":270,"score":207,"percentile":262},"2026-06-06",{"date":272,"score":207,"percentile":273},"2026-06-07",0.05058,{"date":275,"score":207,"percentile":208},"2026-06-08",{"date":277,"score":207,"percentile":278},"2026-06-09",0.0506,{"date":280,"score":207,"percentile":281},"2026-06-10",0.0509,{"date":283,"score":207,"percentile":284},"2026-06-11",0.05157,{"date":286,"score":207,"percentile":287},"2026-06-12",0.05165,{"date":289,"score":207,"percentile":284},"2026-06-13",{"date":291,"score":207,"percentile":292},"2026-06-14",0.05148,{"date":294,"score":66,"percentile":295},"2026-06-15",0.0308,{"date":297,"score":66,"percentile":298},"2026-06-16",0.03091,{"date":300,"score":66,"percentile":301},"2026-06-17",0.03104,{"date":303,"score":66,"percentile":304},"2026-06-18",0.03105,{"date":306,"score":66,"percentile":307},"2026-06-19",0.03099,{"date":309,"score":66,"percentile":310},"2026-06-20",0.03097,{"date":312,"score":66,"percentile":313},"2026-06-21",0.03095,{"date":315,"score":66,"percentile":316},"2026-06-22",0.0309,{"date":318,"score":66,"percentile":304},"2026-06-23",{"date":320,"score":66,"percentile":321},"2026-06-24",0.03112,{"date":323,"score":66,"percentile":324},"2026-06-25",0.03126,{"date":326,"score":66,"percentile":327},"2026-06-26",0.03139,{"date":329,"score":66,"percentile":330},"2026-06-27",0.03142,{"date":332,"score":66,"percentile":333},"2026-06-28",0.03157,{"date":335,"score":66,"percentile":336},"2026-06-29",0.03153,{"date":338,"score":66,"percentile":339},"2026-06-30",0.03151,{"date":341,"score":66,"percentile":339},"2026-07-01",{"date":343,"score":66,"percentile":344},"2026-07-02",0.03143,{"date":346,"score":66,"percentile":347},"2026-07-03",0.03137,{"date":349,"score":66,"percentile":347},"2026-07-04",{"date":351,"score":66,"percentile":352},"2026-07-05",0.03138,{"date":354,"score":66,"percentile":352},"2026-07-06",{"date":356,"score":66,"percentile":336},"2026-07-07",{"date":358,"score":66,"percentile":333},"2026-07-08",{"date":360,"score":66,"percentile":361},"2026-07-09",0.03171,{"date":363,"score":66,"percentile":364},"2026-07-10",0.03168,{"date":366,"score":66,"percentile":367},"2026-07-11",0.03167,{"date":369,"score":66,"percentile":370},"2026-07-12",0.03166,{"date":372,"score":66,"percentile":373},"2026-07-13",0.0316,[375,378,381],{"source":70,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":376},{"baseScore":68,"baseSeverity":377,"vectorString":71,"impactScore":9,"exploitabilityScore":9},"MEDIUM",{"source":76,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":379},{"baseScore":68,"baseSeverity":377,"vectorString":380,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",{"source":104,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":382},{"baseScore":68,"baseSeverity":9,"vectorString":380,"impactScore":9,"exploitabilityScore":9},[384,396],{"ecosystem":385,"name":386,"vendor":387,"product":386,"cpe_part":9,"purl_type":388,"purl_namespace":387,"purl_name":386,"source":9,"versions":389},"Debian","python3.14","debian","deb",[390],{"version":391,"is_range":392,"range_type":393,"version_start":9,"version_start_type":9,"version_end":394,"version_end_type":395,"fixed_in":9},"lt3_14_5_1",true,"ecosystem","3.14.5-1","excluding",{"ecosystem":9,"name":397,"vendor":398,"product":399,"cpe_part":400,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":401},"CPython","python software foundation","cpython","a",[402,407,410,412],{"version":403,"is_range":392,"range_type":70,"version_start":404,"version_start_type":405,"version_end":406,"version_end_type":395,"fixed_in":9},">= 3.14.0, \u003C 3.15.0","3.14.0","including","3.15.0",{"version":408,"is_range":392,"range_type":70,"version_start":404,"version_start_type":405,"version_end":409,"version_end_type":395,"fixed_in":9},">= 3.14.0, \u003C 3.14.5","3.14.5",{"version":411,"is_range":392,"range_type":70,"version_start":9,"version_start_type":9,"version_end":409,"version_end_type":395,"fixed_in":9},"\u003C 3.14.5",{"version":413,"is_range":392,"range_type":70,"version_start":414,"version_start_type":405,"version_end":415,"version_end_type":395,"fixed_in":9},">= 3.15.0a1, \u003C 3.15.0b1","3.15.0a1","3.15.0b1"]