VULNERABILITY INTELLIGENCE
CVE-2026-15310
EPSS probability0.53%
CISA KEVNot currently listed
Published2026-08-25
Last modified2026-10-02
Description
When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion.
Weakness classification
- cna@python.org: CWE-400