{"schemaVersion":3,"id":"CVE-2026-82049","aliases":["ALPINE-CVE-2026-82049","UBUNTU-CVE-2026-82049","DEBIAN-CVE-2026-82049","CGA-3mww-f9r3-2982","CGA-3vh3-ffhc-vx6p","CGA-7j4r-669f-qh6v","CGA-gmhm-rqph-9434","CGA-h5pf-rmg4-7v24","CGA-jx8g-xxjw-989x","CGA-rf2q-2gqr-44w5","CGA-xfvq-22fm-x2hh"],"status":"published","duplicateOf":null,"title":null,"description":"In CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link. Such archives may cause extraction to modify the permissions or modification time of a file outside the destination directory, or expose the contents of that file within the extracted tree.","dates":{"published":"2026-09-14T19:14:03.873Z","modified":"2026-10-11T00:39:42.376Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.4,"severity":"high","version":"4.0","versionLabel":"v4.0","source":"CVE.org","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"4.0","versionLabel":"v4.0","source":"CVE.org","score":8.4,"severity":"high","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":false},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Alpine","score":8.4,"severity":"high","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Ubuntu","score":8.4,"severity":"high","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Debian","score":8.4,"severity":"high","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Wolfi","score":8.4,"severity":"high","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Chainguard","score":8.4,"severity":"high","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"NVD","score":8.4,"severity":"high","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00188,"percentile":0.07878,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.005999999999999994,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00182},"history":[{"date":"2026-09-15T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00192,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00192,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00192,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00192,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00192,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00192,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00204,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00209,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00209,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00209,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00209,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00209,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00209,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00209,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00209,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00188,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00188,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00188,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00188,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00188,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00188,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00188,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00188,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00188,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00188,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00188,"percentile":0.07878}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00192,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00192,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00192,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00192,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00192,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00192,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00204,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00209,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00209,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00209,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00209,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00209,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00209,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00209,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00209,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00188,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00188,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00188,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00188,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00188,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00188,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00188,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00188,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00188,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00188,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00188,"percentile":0.07878}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-59","name":"Improper Link Resolution Before File Access ('Link Following')","description":"The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/59.html"}],"affected":[{"vendor":"alpine","product":"python3","name":"python3","label":"python3","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/python3","purlType":"apk","versions":[{"text":"< 3.12.15-r0","noFixRecorded":false,"fixedIn":null},{"text":"< 3.14.8-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.12.15-r0 | < 3.14.8-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"python-3.10","name":"python-3.10","label":"python-3.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/python-3.10","purlType":"apk","versions":[{"text":"< 3.10.22-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.10.22-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"python-3.11","name":"python-3.11","label":"python-3.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/python-3.11","purlType":"apk","versions":[{"text":"< 3.11.17-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.11.17-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"python-3.12","name":"python-3.12","label":"python-3.12","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/python-3.12","purlType":"apk","versions":[{"text":"< 3.12.15-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.12.15-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"python-3.13","name":"python-3.13","label":"python-3.13","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/python-3.13","purlType":"apk","versions":[{"text":"< 3.13.15_git20260912-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.13.15_git20260912-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"python-3.10","name":"python-3.10","label":"python-3.10","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/python-3.10","purlType":"apk","versions":[{"text":"< 3.10.22-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.10.22-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"python-3.11","name":"python-3.11","label":"python-3.11","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/python-3.11","purlType":"apk","versions":[{"text":"< 3.11.17-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.11.17-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"python-3.12","name":"python-3.12","label":"python-3.12","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/python-3.12","purlType":"apk","versions":[{"text":"< 3.12.15-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.12.15-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"python-3.13","name":"python-3.13","label":"python-3.13","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/python-3.13","purlType":"apk","versions":[{"text":"< 3.13.15_git20260912-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.13.15_git20260912-r0","eol":null,"hubHref":null},{"vendor":"debian","product":"pypy3","name":"pypy3","label":"pypy3","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/pypy3","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"debian","product":"python3.13","name":"python3.13","label":"python3.13","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/python3.13","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"pypy3","name":"pypy3","label":"pypy3","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/pypy3","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"python2.7","name":"python2.7","label":"python2.7","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/python2.7","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"python3.10","name":"python3.10","label":"python3.10","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/python3.10","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"python3.11","name":"python3.11","label":"python3.11","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/python3.11","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"python3.12","name":"python3.12","label":"python3.12","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/python3.12","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"python3.14","name":"python3.14","label":"python3.14","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/python3.14","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"python3.4","name":"python3.4","label":"python3.4","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/python3.4","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"python3.5","name":"python3.5","label":"python3.5","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/python3.5","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"python3.6","name":"python3.6","label":"python3.6","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/python3.6","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"python3.7","name":"python3.7","label":"python3.7","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/python3.7","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"python3.8","name":"python3.8","label":"python3.8","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/python3.8","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"python3.9","name":"python3.9","label":"python3.9","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/python3.9","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"python software foundation","product":"cpython","name":"CPython","label":"cpython","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 3.10.22","noFixRecorded":false,"fixedIn":null},{"text":"≥ 3.11.0, < 3.11.17","noFixRecorded":false,"fixedIn":null},{"text":"≥ 3.12.0, < 3.12.15","noFixRecorded":false,"fixedIn":null},{"text":"≥ 3.13.0, < 3.13.16","noFixRecorded":false,"fixedIn":null},{"text":"≥ 3.14.0a1, < 3.14.0b1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.10.22 | ≥ 3.11.0, < 3.11.17 | ≥ 3.12.0, < 3.12.15 | ≥ 3.13.0, < 3.13.16 | ≥ 3.14.0a1, < 3.14.0b1","eol":null,"hubHref":"/vendor/python_software_foundation/cpython"}],"affectedCount":24,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/python/cpython/commit/5a57248b22ad3b9aafcaaadae2c304a1923daeca","label":"github.com/python/cpython/commit/5a57248b22ad3b9aafcaaadae2c304a1923daeca","hostname":"github.com","tags":["Patch","REPORT","FIX"]},{"url":"https://github.com/python/cpython/issues/157190","label":"github.com/python/cpython/issues/157190","hostname":"github.com","tags":["Issue Tracking","REPORT"]},{"url":"https://github.com/python/cpython/pull/157191","label":"github.com/python/cpython/pull/157191","hostname":"github.com","tags":["Patch","REPORT","FIX"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/EFJWGAZJA56AKSBR2WHMHQZO7RRLZPRH/","label":"mail.python.org/archives/list/security-announce@python.org/thread/EFJWGAZJA56AKSBR2WHMHQZO7RRLZPRH/","hostname":"mail.python.org","tags":["Vendor Advisory","REPORT","Advisory"]},{"url":"https://github.com/python/cpython/commit/b38be2e6cf9d989075ab73412c63e003ebad4ff3","label":"github.com/python/cpython/commit/b38be2e6cf9d989075ab73412c63e003ebad4ff3","hostname":"github.com","tags":["Patch","REPORT","FIX"]},{"url":"https://github.com/python/cpython/commit/b8f23e307097552eaea2604383a12ab280520d0d","label":"github.com/python/cpython/commit/b8f23e307097552eaea2604383a12ab280520d0d","hostname":"github.com","tags":["Patch","REPORT","FIX"]},{"url":"https://github.com/python/cpython/commit/197663d63afed27f66e10e23c194e8a634e60913","label":"github.com/python/cpython/commit/197663d63afed27f66e10e23c194e8a634e60913","hostname":"github.com","tags":["Patch","FIX"]},{"url":"https://github.com/python/cpython/commit/28f315486b3da0352b9a1de1c3c97f4127ba4771","label":"github.com/python/cpython/commit/28f315486b3da0352b9a1de1c3c97f4127ba4771","hostname":"github.com","tags":["Patch","FIX"]},{"url":"https://github.com/python/cpython/commit/c66df4e70435d257fd488b35ea129c6f317433a8","label":"github.com/python/cpython/commit/c66df4e70435d257fd488b35ea129c6f317433a8","hostname":"github.com","tags":["Patch","FIX"]},{"url":"https://github.com/python/cpython/commit/cc1689830c6b9aaddded2fb9f2fe8116867e2c0e","label":"github.com/python/cpython/commit/cc1689830c6b9aaddded2fb9f2fe8116867e2c0e","hostname":"github.com","tags":["Patch","FIX"]},{"url":"https://github.com/python/cpython/commit/cccc7ec30212dba2abef53ce4a2bed112ddb690c","label":"github.com/python/cpython/commit/cccc7ec30212dba2abef53ce4a2bed112ddb690c","hostname":"github.com","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2026/09/14/27","label":"www.openwall.com/lists/oss-security/2026/09/14/27","hostname":"www.openwall.com","tags":["REPORT","WEB"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-82049","label":"security.alpinelinux.org/vuln/CVE-2026-82049","hostname":"security.alpinelinux.org","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-82049","label":"ubuntu.com/security/CVE-2026-82049","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-82049","label":"www.cve.org/CVERecord?id=CVE-2026-82049","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://github.com/python/cpython/pull/157262","label":"github.com/python/cpython/pull/157262","hostname":"github.com","tags":["REPORT"]},{"url":"https://github.com/python/cpython/pull/157261","label":"github.com/python/cpython/pull/157261","hostname":"github.com","tags":["REPORT"]},{"url":"https://github.com/python/cpython/pull/157192","label":"github.com/python/cpython/pull/157192","hostname":"github.com","tags":["REPORT"]},{"url":"https://github.com/python/cpython/pull/157454","label":"github.com/python/cpython/pull/157454","hostname":"github.com","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-82049","label":"security-tracker.debian.org/tracker/CVE-2026-82049","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/82xxx/CVE-2026-82049.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/82xxx/CVE-2026-82049.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82049","label":"nvd.nist.gov/vuln/detail/CVE-2026-82049","hostname":"nvd.nist.gov","tags":["Advisory","Oval"]},{"url":"https://github.com/python/cpython","label":"github.com/python/cpython","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2026:12069-1","OPENSUSE-SU-2026:12087-1","OPENSUSE-SU-2026:12121-1","OPENSUSE-SU-2026:12122-1","OPENSUSE-SU-2026:12123-1","RHSA-2026:65505","RHSA-2026:68132","RHSA-2026:68135","RHSA-2026:68154","RHSA-2026:68309","SUSE-SU-2026:4630-1","SUSE-SU-2026:4659-1"],"duplicates":[],"related":["OPENSUSE-SU-2026:12069-1","OPENSUSE-SU-2026:12087-1","OPENSUSE-SU-2026:12121-1","OPENSUSE-SU-2026:12122-1","OPENSUSE-SU-2026:12123-1","SUSE-SU-2026:4630-1","SUSE-SU-2026:4659-1"]},"timeline":[{"kind":"published","date":"2026-09-14T19:14:03.873Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-11T00:39:42.376Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":34,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T10:45:46.560Z","stale":false,"partial":false}}