← Back

CVE-2026-15308

nvd nist
Published: Jul 9, 2026Modified: Aug 20, 2026

JSON object

Loading...
8.7
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Show more
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less
Source: CNA (Secondary)

Description

The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data.

Affected (16)

Products: Python: Python
Python
1 product
Python
Configuration A
16 vulnerable
Vulnerable SoftwareAffected Versions
Python
Python
Before 3.10.21
Python
From 3.11.0 to 3.11.16
Python
From 3.12.0 to 3.12.14
Python
From 3.13.0 to 3.13.15
Python
From 3.14.0 to 3.14.7
Python
Version 3.15.0 alpha1
Python
Version 3.15.0 alpha2
Python
Version 3.15.0 alpha3
Python
Version 3.15.0 alpha4
Python
Version 3.15.0 alpha5
Python
Version 3.15.0 alpha6
Python
Version 3.15.0 alpha7
Python
Version 3.15.0 alpha8
Python
Version 3.15.0 beta1
Python
Version 3.15.0 beta2
Python
Version 3.15.0 beta3

Related CWEs

CWE-400
Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References (11)

Source: cna@python.org
Patch
Source: cna@python.org
Patch
Source: cna@python.org
Patch
Source: cna@python.org
Patch
Source: cna@python.org
Patch
Source: cna@python.org
Patch
Source: cna@python.org
Patch
Source: cna@python.org
Patch
Source: cna@python.org
Issue TrackingPatch
Source: cna@python.org
Mailing List
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.