Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2022-48564 — MEDIUM severity vulnerability | Release Alert

CVE-2022-48564

6.5

MEDIUMCVSS v3

Published

August 22, 2023

Affected

11 projects

Assigned by

MITRE

Severity scale

010

Description

read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format.

ChocolateyPython is a programming language that lets you work more quickly and integrate your systems more effectively. You can learn to use Python and see almost immediate gains in productivity and lower maintenance costs. ## Notes - This package depends on the the latest major version of python package. - This package do not support package parameters, please install the package [python315](https://chocolatey.org/packages/python315) directly when using package parameters. - **If the package is out of date please check [Version History](#versionhistory) for the latest submitted version. If you have a question, please ask it in [Chocolatey Community Package Discussions](https://github.com/chocolatey-community/chocolatey-packages/discussions) or raise an issue on the [Chocolatey Community Packages Repository](https://github.com/chocolatey-community/chocolatey-packages/issues) if you have problems with the package. Disqus comments will generally not be responded to.**

= *, = 3.10.0, >= 3.9.0, < 3.9.1, >= 3.7.0, < 3.7.10, < 3.6.13, >= 3.8.0, < 3.8.7NVD

Visual Studio MarketplacePython language support with extension access points for IntelliSense (Pylance), Debugging (Python Debugger), linting, formatting, refactoring, unit tests, and more.

More on this CVE

NVD↗GitHub Advisory↗

= *, = 3.10.0, >= 3.9.0, < 3.9.1, >= 3.7.0, < 3.7.10, < 3.6.13, >= 3.8.0, < 3.8.7NVD

NPM

= *, = 3.10.0, >= 3.9.0, < 3.9.1, >= 3.7.0, < 3.7.10, < 3.6.13, >= 3.8.0, < 3.8.7NVD

NPM

= *, = 3.10.0, >= 3.9.0, < 3.9.1, >= 3.7.0, < 3.7.10, < 3.6.13, >= 3.8.0, < 3.8.7NVD

NPMLezer-based Python grammar

= *, = 3.10.0, >= 3.9.0, < 3.9.1, >= 3.7.0, < 3.7.10, < 3.6.13, >= 3.8.0, < 3.8.7NVD

lezer-parser/python

GitHubA Python parser for Lezer

= *, = 3.10.0, >= 3.9.0, < 3.9.1, >= 3.7.0, < 3.7.10, < 3.6.13, >= 3.8.0, < 3.8.7NVD

Crates.ioPython

= *, = 3.10.0, >= 3.9.0, < 3.9.1, >= 3.7.0, < 3.7.10, < 3.6.13, >= 3.8.0, < 3.8.7NVD

NuGet GalleryInstalls 64-bit Python for use in build scenarios.

= *, = 3.10.0, >= 3.9.0, < 3.9.1, >= 3.7.0, < 3.7.10, < 3.6.13, >= 3.8.0, < 3.8.7NVD

NPMInteract with a long-running python child process

= *, = 3.10.0, >= 3.9.0, < 3.9.1, >= 3.7.0, < 3.7.10, < 3.6.13, >= 3.8.0, < 3.8.7NVD

RubyGemsPython implemented purely in Ruby without any library

= *, = 3.10.0, >= 3.9.0, < 3.9.1, >= 3.7.0, < 3.7.10, < 3.6.13, >= 3.8.0, < 3.8.7NVD

kubernetes-client/python

GitHubOfficial Python client library for kubernetes

= *, = 3.10.0, >= 3.9.0, < 3.9.1, >= 3.7.0, < 3.7.10, < 3.6.13, >= 3.8.0, < 3.8.7NVD