redhat/python3.11 vulnerabilities

Latest redhat/python3.11 CVEs

Newest publication first · page 2 of 2

1. CVE-2025-12781 base64.b64decode() always accepts "+/" characters, despite setting altchars

   Published 2026-01-21

   Medium·CVSS 6.3 EPSS 0.86%

   When passing data to the b64decode(), standard_b64decode(), and urlsafe_b64decode() functions in the "base64" module the characters "+/" will always be accepted, regardless of the value of "altchars" parameter, typically used to establish an "alternative base64 alphabet" such as...

2. CVE-2026-0672 Header injection in http.cookies.Morsel

   Published 2026-01-20

   Medium·CVSS 6.0 EPSS 0.48%

   When using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch rejects all control characters within cookie names, values, and parameters.

3. CVE-2025-15367 POP3 command injection in user-controlled commands

   Published 2026-01-20

   Medium·CVSS 5.9 EPSS 0.38%

   The poplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters.

4. CVE-2025-15366 IMAP command injection in user-controlled commands

   Published 2026-01-20

   Medium·CVSS 5.9 EPSS 0.43%

   The imaplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters.

5. CVE-2025-15282 Header injection via newlines in data URL mediatype

   Published 2026-01-20

   Medium·CVSS 6.0 EPSS 0.54%

   User-controlled data URLs parsed by urllib.request.DataHandler allow injecting headers through newlines in the data URL mediatype.

6. CVE-2026-0865 wsgiref.headers.Headers allows header newline injection

   Published 2026-01-20

   Medium·CVSS 5.9 EPSS 0.55%

   User-controlled header names and values containing newlines can allow injecting HTTP headers.

7. CVE-2025-11468 Folding email comments of unfoldable characters doesn't preserve parenthesis

   Published 2026-01-20

   Medium·CVSS 5.7 EPSS 0.62%

   When folding a long comment in an email header containing exclusively unfoldable characters, the parenthesis would not be preserved. This could be used for injecting headers into email messages where addresses are user-controlled and not sanitized.

8. CVE-2025-12084 Quadratic complexity in node ID cache clearing

   Published 2025-12-03

   Medium·CVSS 6.3 EPSS 0.86%

   When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency on _clear_id_cache() the algorithm is quadratic. Availability can be impacted when building excessively nested documents.

9. CVE-2025-13837 Out-of-memory when loading Plist

   Published 2025-12-01

   Low·CVSS 2.1 EPSS 0.24%

   When loading a plist file, the plistlib module reads data in size specified by the file itself, meaning a malicious file can cause OOM and DoS issues

10. CVE-2025-13836 Excessive read buffering DoS in http.client

    Published 2025-12-01

    Medium·CVSS 6.3 EPSS 1.7%

    When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length. This allows a malicious server to cause the client to read large amounts of data into memory, potentially causing OOM or other DoS.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.