Threats Tagged 'cve-2026-3479'
View all threats tagged with 'cve-2026-3479'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-3479'
Click on any threat for detailed analysis and mitigation recommendations
This update includes the following RPMs: python3.11: * python3.11-3.11.16-1.1.hum1 (aarch64, x86_64) * python3.11-debug-3.11.16-1.1.hum1 (aarch64, x86_64) * python3.11-devel-3.11.16-1.1.hum1 (aarch64, x86_64) * python3.11-idle-3.11.16-1.1.hum1 (aarch64, x86_64) * python3.11-libs-3.11.16-1.1.hum1 (aarch64, x86_64) * python3.11-test-3.11.16-1.1.hum1 (aarch64, x86_64) * python3.11-tkinter-3.11.16-1.1.hum1 (aarch64, x86_64) * python3.11-3.11.16-1.1.hum1.src (src) Security Fix(es): python3.11: * CVE-2026-3446 Join the discussion | GCVE Database | 08/27/2026, 12:58:12 UTC Added: 06/09/2026, 10:23:36 UTC |
A security update for Red Hat Hardened Images includes fixes for vulnerabilities in python3.11 packages. Notably, CVE-2026-3479 addresses a path traversal flaw in Python's pkgutil.get_data() function, which improperly validates resource arguments, allowing local attackers to access files outside intended directories. The advisory notes no current mitigation meets Red Hat's criteria for ease of use and applicability. No explicit patch version is stated in the advisory, but updated RPMs are provided. The vulnerabilities have medium severity. Join the discussion | GCVE Database | 08/20/2026, 18:45:29 UTC Added: 08/22/2026, 13:40:34 UTC |
This update includes the following RPMs: python3.12: * python3.12-3.12.13-3.1.hum1 (aarch64, x86_64) * python3.12-debug-3.12.13-3.1.hum1 (aarch64, x86_64) * python3.12-devel-3.12.13-3.1.hum1 (aarch64, x86_64) * python3.12-idle-3.12.13-3.1.hum1 (aarch64, x86_64) * python3.12-libs-3.12.13-3.1.hum1 (aarch64, x86_64) * python3.12-test-3.12.13-3.1.hum1 (aarch64, x86_64) * python3.12-tkinter-3.12.13-3.1.hum1 (aarch64, x86_64) * python3.12-3.12.13-3.1.hum1.src (src) Security Fix(es): python3.12: * CVE-2025-13462 * CVE-2026-3446 * CVE-2026-3479 Join the discussion | GCVE Database | 04/23/2026, 11:34:58 UTC Added: 06/05/2026, 21:31:41 UTC |
pkgutil.get_data() did not validate the resource argument as documented, allowing path traversals. Join the discussion | CVE Database V5 | 03/18/2026, 18:13:42 UTC Added: 03/18/2026, 18:43:22 UTC |
0 If the value passed to os.path.expandvars() is user-controlled a performance degradation is possible when expanding environment variables. Join the discussion | GCVE Database | 12/05/2025, 11:13:34 UTC Added: 05/27/2026, 21:15:15 UTC |
Showing 1 to 5 of 5 results