cyfenced.com →

[ CVE-2026-103995 · Published 27 Oct 2026 ]

Vulnerability in Python Software Foundation CPython

CVSS 2.0 EPSS <1%2 agency advisoriesFix available

[ Description ]Official description

Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents.

[ Fixes ]Fixes and patches

  • Security bulletin: Python PSF-2026-47Vendor patch or bulletin · CERT-FR · raw.githubusercontent.com/psf/advisory-database/main/advisories/python, cited by CERT-FR CERTFR-2026-AVI-1397

[ Advisories ]Government CERT advisories

  • CERT-FRCERTFR-2026-AVI-1397

    Vulnerability in CPython Translated from French

    A vulnerability has been discovered in CPython. It allows an attacker to cause a security policy bypass.

    CVE-2026-103995
  • BSI CERT-BundWID-SEC-2026-4189

    Python: Multiple vulnerabilities Translated from German

    CVE-2026-103995CVE-2026-115557CVE-2026-114583

[ References ]References