GCVE-110-NCSC-2026-21

Advisory PublishedCVSS 7.5/10

Vulnetix · Advisory published January 21, 2026

Recent updates for Python 3 address multiple vulnerabilities, including denial of service risks in the tarfile module and HTML parsing, affecting various versions and leading to potential infinite loops and deadlocks.

Download JSON Open in Console

Weaknesses (CWE)

CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')CWE-502Deserialization of Untrusted DataCWE-674Uncontrolled RecursionCWE-457Use of Uninitialized VariableCWE-326Inadequate Encryption StrengthCWE-20Improper Input ValidationCWE-93Improper Neutralization of CRLF Sequences ('CRLF Injection')CWE-862Missing AuthorizationCWE-404Improper Resource Shutdown or ReleaseCWE-150Improper Neutralization of Escape, Meta, or Control SequencesCWE-201Insertion of Sensitive Information Into Sent DataCWE-297Improper Validation of Certificate with Host Mismatch

Risk Scores

CVSS 3.1

7.5/10

High · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions	Platforms
Oracle	vers:unknown/*	—	—

Aliases

CVE-2025-12383 CVE-2025-30065 CVE-2025-48924 CVE-2025-54874 CVE-2025-55039 CVE-2025-59250 CVE-2025-59419 CVE-2025-61755 CVE-2025-61795 CVE-2025-65082 CVE-2025-66566 CVE-2025-67735 CVE-2025-68161 CVE-2025-8194 CVE-2026-21931 CVE-2026-21939 CVE-2026-21975 CVE-2026-21977

References

advisory

Browse GCVE Records

74,557 records in the GCVE database · Updated July 23, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON