{"id":"CGA-m79c-wcp2-858w","modified":"2026-09-07T01:42:54.404555585Z","published":"2026-06-09T02:08:21Z","upstream":["CVE-2026-3276","GHSA-jg6j-874m-wgjj"],"references":[{"type":"WEB","url":"http://www.openwall.com/lists/oss-security/2026/06/03/15"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/3xxx/CVE-2026-3276.json"},{"type":"ADVISORY","url":"https://mail.python.org/archives/list/security-announce@python.org/thread/PP5HB4K7727OBBM76KA2ILID76K3OZGZ/"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3276"},{"type":"REPORT","url":"https://github.com/python/cpython/issues/149079"},{"type":"FIX","url":"https://github.com/python/cpython/commit/6b505d1f41f8f3ea0fe5a4786d3a8fff1875cfc0"},{"type":"FIX","url":"https://github.com/python/cpython/commit/90748760d38ca3ac5fc6788a69becab905c95598"},{"type":"FIX","url":"https://github.com/python/cpython/commit/991224b1e8311c85f198f6dd8208bf8cff7fc26f"},{"type":"FIX","url":"https://github.com/python/cpython/commit/ba785b88add96acbf403d65cb157fb2743a33a32"},{"type":"FIX","url":"https://github.com/python/cpython/commit/c5512bd7c1dc28055660565275012766941d3066"},{"type":"FIX","url":"https://github.com/python/cpython/pull/149080"},{"type":"PACKAGE","url":"https://github.com/python/cpython"},{"type":"FIX","url":"https://github.com/python/cpython/commit/d3ab945af25b28dfe13ac6cb40c124a01b33ce1f"},{"type":"FIX","url":"https://github.com/python/cpython/commit/db744c0776c1d5dd11aaa70eff2a6993c408bacc"},{"type":"FIX","url":"https://github.com/python/cpython/commit/e322a1857084d521f79f45181b776f62e6acfc2c"}],"affected":[{"package":{"name":"python-3.10","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/python-3.10?arch=x86_64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.20-r8"}]}],"ecosystem_specific":{"components":[{"component_version":"3.10.20-r7","component_type":"apk","component_location":"/.PKGINFO","component_purl":"pkg:apk/python-3.10@3.10.20-r7","latest_event_status":"fixed","latest_event_timestamp":"2026-06-17T12:05:55Z","component_name":"python-3.10"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m79c-wcp2-858w.json"}},{"package":{"name":"python-3.10","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/python-3.10?arch=x86_64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.20-r8"}]}],"ecosystem_specific":{"components":[{"component_location":"/.PKGINFO","component_purl":"pkg:apk/python-3.10@3.10.20-r7","latest_event_status":"fixed","latest_event_timestamp":"2026-06-17T12:05:55Z","component_name":"python-3.10","component_version":"3.10.20-r7","component_type":"apk"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m79c-wcp2-858w.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}]}