Resource exhaustion in Python Software Foundation Cpython
CVE-2026-11972
When using the "tarfile" module with a file opened in "streaming mode" (mode="r|") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer.
EPSS: 0.004 (38.0th percentile) — read the EPSS interpretation.
Affected products
- Python Software Foundation Cpython — versions 3.14.0, 0, 3.13.0
Weakness classification (CWE)
References
- cna@python.org (issue-tracking)
- cna@python.org (patch)
- cna@python.org (vendor-advisory)
- cna@python.org (patch)
- cna@python.org (patch)
- cna@python.org (patch)
- cna@python.org (patch)
- cna@python.org (patch)
- cna@python.org (patch)
- cna@python.org (patch)