ALPINE-CVE-2026-3276
ALPINE-CVE-2026-3276
This page contains facts from public vulnerability sources. Check the original advisory before updating.
unicodedata.normalize() can take excessive CPU time when processing specially crafted Unicode input containing long runs of combining characters with alternating Canonical Combining Class values. This affects all normalization forms.
CVSS 6.3 · Medium · Fix available
- Published
- Updated
Stack: system
Affected products and versions
python3 Alpine:v3.24
- Affected ranges
- ECOSYSTEM: < 3.14.7-r0
Update to 3.14.7-r0