ALAS2-2026-3147

Affected Products

Exploit Intelligence

• sarif.json (github-poc)
• pem_10.3.1_rel_notes.yml (github-poc)
• 2-cuda12.6.yaml (github-poc)
• converter.go (github-poc)
• oval_test.go (github-poc)
• vulnerability_matcher_validation_test.go (github-poc)
• converter_test.go (github-poc)
• config.py (github-poc)
• setup.py (github-poc)
• release.py (github-poc)

…and 3 more exploits

Timeline

• Feb 5, 2026 CVE Published

References

• ALAS2-2026-3147: python-pip (important) advisory