Vulnerability in Python Software Foundation Cpython
CVE-2026-0864
When using the "configparser" module to write configuration files containing multi-line text values with carriage return characters (\r) the resulting file could be injected with unexpected keys and values if the attacker controls the writ…
EPSS: 0.001 (2.8th percentile) — read the EPSS interpretation.
Affected products
- Python Software Foundation Cpython — versions 3.14.0, 0, 3.15.0a1
Weakness classification (CWE)
References
- cna@python.org (patch)
- cna@python.org (issue-tracking)
- cna@python.org (patch)
- cna@python.org (vendor-advisory)
- cna@python.org (patch)
- cna@python.org (patch)
- cna@python.org (patch)
- cna@python.org (patch)