CVE-2026-4224

7.5

HIGHCVSS v3

Published

March 16, 2026

Affected

9 projects

Assigned by

[email protected]

Severity scale

010

Description

When an Expat parser with a registered ElementDeclHandler parses an inline document type definition containing a deeply nested content model a C stack overflow occurs.

python/cpython

GitHubThe Python programming language

NVD

lezer-parser/python

GitHubA Python parser for Lezer

< 3.10.0, >= 3.13.0, < 3.13.13, >= 3.14.0, < 3.14.4, = 3.15.0NVD

python

Crates.io

More on this CVE

NVD↗GitHub Advisory↗

Python

< 3.10.0, >= 3.13.0, < 3.13.13, >= 3.14.0, < 3.14.4, = 3.15.0NVD

python

NuGet GalleryInstalls 64-bit Python for use in build scenarios.

< 3.10.0, >= 3.13.0, < 3.13.13, >= 3.14.0, < 3.14.4, = 3.15.0NVD

python

Docker HubPython is an interpreted, interactive, object-oriented, open-source programming language.

< 3.10.0, >= 3.13.0, < 3.13.13, >= 3.14.0, < 3.14.4, = 3.15.0NVD

python

NPMInteract with a long-running python child process

< 3.10.0, >= 3.13.0, < 3.13.13, >= 3.14.0, < 3.14.4, = 3.15.0NVD

python

RubyGemsPython implemented purely in Ruby without any library

< 3.10.0, >= 3.13.0, < 3.13.13, >= 3.14.0, < 3.14.4, = 3.15.0NVD

fufvocdi/Python

GitHubThis repository contains the python source code, containing more than 40 python projects, involving many fields.仓库用于储存python源代码, 包含40多个python项目，涉及爬虫、算法、OpenGL、tkinter、面向对象编程等多个领域。

< 3.10.0, >= 3.13.0, < 3.13.13, >= 3.14.0, < 3.14.4, = 3.15.0NVD

kubernetes-client/python

GitHubOfficial Python client library for kubernetes

< 3.10.0, >= 3.13.0, < 3.13.13, >= 3.14.0, < 3.14.4, = 3.15.0NVD

Security Advisories

CVE-2026-4224

Description

More on this CVE