Security releases

Researcher credits in vendor advisories

Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.

Vendor

These 8 releases credit 7 lines. 7 are still open to claim.

One mark per credit line Open Claimed

Python Software Foundation CVE-2026-119170

There was a regression in how FIPS algorithms were enforced for the hashlib module. Only users that are using OpenSSL in FIPS mode are affected. Only Python 3.1

1 CVE and 1 credit line. Not claimed yet.

0 of 1 credit line claimed Claim credit

Python Software Foundation CVE-2026-116566

socket.getaddrinfo() previously accepted null bytes within *host* and *port* parameters which can cause the values to be silently truncated.

1 CVE and 1 credit line. Not claimed yet.

0 of 1 credit line claimed Claim credit

Python Software Foundation CVE-2026-103995

Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents.

1 CVE and 1 credit line. Not claimed yet.

0 of 1 credit line claimed Claim credit

Python Software Foundation CVE-2026-115557

Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known c

0 CVEs and 0 credit lines.

Python Software Foundation CVE-2026-114583

tarfile.tar_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outsid

0 CVEs and 0 credit lines.

Python Software Foundation python-software-foundation-2026-09

Python Software Foundation Security Releases - September 2026

2 CVEs and 2 credit lines. None claimed yet.

0 of 2 credit lines claimed Claim credit

Python Software Foundation python-software-foundation-2026-08

Python Software Foundation Security Releases - August 2026

2 CVEs and 2 credit lines. None claimed yet.

0 of 2 credit lines claimed Claim credit

Python Software Foundation python-software-foundation-2025-02

Python Software Foundation Security Releases - February 2025

0 CVEs and 0 credit lines.