Threats tagged 'brew-papis-cve-2026-64847'

AnyIO versions prior to 4.14.2 contain a resource allocation vulnerability where process-pool workers' standard error pipes are not drained by the parent process. This can cause the pipe to fill and block the worker if it writes enough data to stderr, leading to indefinite blocking of the process-pool call. The issue affects applications running untrusted or faulty worker code that produces substantial standard error output. The vulnerability is fixed in AnyIO version 4.14.2.