Approved changes feed: RSS · Atom

cpe:2.3:a:python:python:3.14.0:-:*:*:*:*:*:*

part: a version: 3.14.0 update: -

VendorPython (b57ad93a-6195-5192-9423-6cfad6044a8b)
ProductPython (fc328eef-0a85-5ddb-b629-b8866ec518c8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/python purl2cpe 2026-06-01 10:16:29.243422
pkg:github/python/cpython purl2cpe 2026-06-01 10:16:29.243424
pkg:python/python purl2cpe 2026-06-01 10:16:29.243425
pkg:rpm/opensuse/python purl2cpe 2026-06-01 10:16:29.243427

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-13836 vulnerable 2026-06-03 14:58:53.761232 Excessive read buffering DoS in http.client
When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length. This allows a malicious server to cause the client to read large amounts of data into memory, potentially causing OOM or other DoS.
Published: 2025-12-01T18:02:38.483Z
Updated: 2026-03-03T14:41:48.702Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.