Search: CVE-2025-13836

CVE-2025-13836 is a medium severity vulnerability in the Python Software Foundation's CPython implementation. When reading HTTP responses without specifying a read amount, the client defaults to using the Content-Length header. A malicious server can exploit this behavior to cause the client to read excessive data into memory, potentially leading to out-of-memory (OOM) conditions or denial of service (DoS). This affects multiple CPython versions from 0 through 3.15.0a1. There are no known exploits in the wild and no patch or official remediation information is currently available.