Threats Tagged 'cve-2026-18503'
View all threats tagged with 'cve-2026-18503'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-18503'
Click on any threat for detailed analysis and mitigation recommendations
A vulnerability (CVE-2026-3446) was found in the Python base64 module used in Red Hat Hardened Images RPMs. The flaw causes base64 decoding functions to stop prematurely at the first padding character, resulting in incomplete data processing. This can lead to inconsistent handling of base64-encoded data and potential data integrity issues. Red Hat has issued an update for python3.12 packages to address this issue. The vulnerability has a medium severity rating according to Red Hat's assessment. Join the discussion | GCVE Database | 08/27/2026, 12:58:12 UTC Added: 06/09/2026, 10:23:36 UTC |
A security update for Red Hat Hardened Images includes fixes for vulnerabilities in python3.11 packages. Notably, CVE-2026-3479 addresses a path traversal flaw in Python's pkgutil.get_data() function, which improperly validates resource arguments, allowing local attackers to access files outside intended directories. The advisory notes no current mitigation meets Red Hat's criteria for ease of use and applicability. No explicit patch version is stated in the advisory, but updated RPMs are provided. The vulnerabilities have medium severity. Join the discussion | GCVE Database | 08/20/2026, 18:45:29 UTC Added: 08/22/2026, 13:40:34 UTC |
0 A vulnerability in Python's csv.Sniffer.sniff() function can cause excessive CPU consumption when processing specially crafted CSV input due to super-linear regular expression complexity. This may lead to a denial of service (DoS) condition. The issue affects Red Hat Hardened Images RPMs containing Python 3.10 packages. Most applications are not affected as they do not use the sniff() function on untrusted input. Red Hat has released updated RPMs to address this issue. Join the discussion | GCVE Database | 08/19/2026, 14:17:50 UTC Added: 08/20/2026, 14:08:22 UTC |
This update includes the following RPMs: python3.13: * python3.13-3.13.15-1.hum1 (aarch64, x86_64) * python3.13-debug-3.13.15-1.hum1 (aarch64, x86_64) * python3.13-devel-3.13.15-1.hum1 (aarch64, x86_64) * python3.13-freethreading-3.13.15-1.hum1 (aarch64, x86_64) * python3.13-freethreading-debug-3.13.15-1.hum1 (aarch64, x86_64) * python3.13-idle-3.13.15-1.hum1 (aarch64, x86_64) * python3.13-libs-3.13.15-1.hum1 (aarch64, x86_64) * python3.13-test-3.13.15-1.hum1 (aarch64, x86_64) * python3.13-tkinter-3.13.15-1.hum1 (aarch64, x86_64) * python3.13-3.13.15-1.hum1.src (src) Security Fix(es): python3.13: * CVE-2026-11940 * CVE-2026-11972 * CVE-2026-15308 * CVE-2026-4360 * CVE-2026-6879 Join the discussion | GCVE Database | 08/13/2026, 12:19:42 UTC Added: 07/30/2026, 05:46:50 UTC |
Attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU when applications pass unbounded input to csv.Sniffer.sniff(). Join the discussion | CVE Database V5 | 08/10/2026, 13:45:31 UTC Added: 08/10/2026, 14:12:47 UTC |
Showing 1 to 5 of 5 results