7.5

CVE-2026-3644

Incomplete control character validation in http.cookies

The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output().
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Python ≫ Python Version < 3.13.13
Python ≫ Python Version >= 3.14.0 < 3.14.4
Python ≫ Python Version3.15.0 Updatealpha1
Python ≫ Python Version3.15.0 Updatealpha2
Python ≫ Python Version3.15.0 Updatealpha3
Python ≫ Python Version3.15.0 Updatealpha4
Python ≫ Python Version3.15.0 Updatealpha5
Python ≫ Python Version3.15.0 Updatealpha6
Python ≫ Python Version3.15.0 Updatealpha7
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.42% 0.337
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
cna@python.org 6 0 0
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE-116 Improper Encoding or Escaping of Output

The product prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved.

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://mail.python.org/archives/list/security-announce@python.org/thread/H6CADMBCDRFGWCMOXWUIHFJNV43GABJ7/
Third Party Advisory
https://github.com/python/cpython/commit/57e88c1cf95e1481b94ae57abe1010469d47a6b4
Patch
https://github.com/python/cpython/issues/145599
Issue Tracking
https://github.com/python/cpython/pull/145600
Patch
https://github.com/python/cpython/commit/62ceb396fcbe69da1ded3702de586f4072b590dd
Patch
https://github.com/python/cpython/commit/d16ecc6c3626f0e2cc8f08c309c83934e8a979dd
Patch
https://github.com/python/cpython/commit/556aa098e738b127c714866f819b4abe2f7593d8
https://github.com/python/cpython/commit/dae4b1a21f8df4570e30986affd61bbe4ade4cef