UpHeron
All vulnerabilities

Servers and applications

CVE-2026-4224

When an Expat parser with a registered ElementDeclHandler parses an inline document type definition containing a deeply nested content model a C stack overflow occurs.

Severity
Medium 6.0
Published
16 Mar 2026
Last changed
13 Aug 2026
Added to UpHeron
21 Oct 2026
Fixed in
3.10.0, 3.13.13, 3.14.4
Sources
NVD

Affected software

SoftwareAffected versions
PythonServers and applications · cpe:a:python:python
  • Version 3.15.0-alpha7
  • Version 3.15.0-alpha6
  • Version 3.15.0-alpha5
  • Version 3.15.0-alpha4
All 10 release lines
  • Every version before 3.10.0
  • From 3.13.0 before 3.13.13
  • From 3.14.0 before 3.14.4
  • Version 3.15.0-alpha1
  • Version 3.15.0-alpha2
  • Version 3.15.0-alpha3
  • Version 3.15.0-alpha4
  • Version 3.15.0-alpha5
  • Version 3.15.0-alpha6
  • Version 3.15.0-alpha7

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-4224
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-4224