7.5

CVE-2026-3644

Incomplete control character validation in http.cookies

The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output().
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Python ≫ Python Version < 3.13.13
Python ≫ Python Version >= 3.14.0 < 3.14.4
Python ≫ Python Version 3.15.0 Update alpha1
Python ≫ Python Version 3.15.0 Update alpha2
Python ≫ Python Version 3.15.0 Update alpha3
Python ≫ Python Version 3.15.0 Update alpha4
Python ≫ Python Version 3.15.0 Update alpha5
Python ≫ Python Version 3.15.0 Update alpha6
Python ≫ Python Version 3.15.0 Update alpha7
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.48% 0.388
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
cna@python.org 6 0 0
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE-116 Improper Encoding or Escaping of Output

The product prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved.

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://github.com/python/cpython/commit/57e88c1cf95e1481b94ae57abe1010469d47a6b4
Patch
https://github.com/python/cpython/issues/145599
Issue Tracking
https://github.com/python/cpython/pull/145600
Patch
https://github.com/python/cpython/commit/62ceb396fcbe69da1ded3702de586f4072b590dd
Patch
https://github.com/python/cpython/commit/d16ecc6c3626f0e2cc8f08c309c83934e8a979dd
Patch
https://github.com/python/cpython/commit/556aa098e738b127c714866f819b4abe2f7593d8
https://github.com/python/cpython/commit/dae4b1a21f8df4570e30986affd61bbe4ade4cef
https://github.com/python/cpython/commit/3974092b037f9a3b000fb15b48ea61ce3b25d330
https://mail.python.org/archives/list/security-announce@python.org/thread/H6CADMBCDRFGWCMOXWUIHFJNV43GABJ7/
Third Party Advisory