CVE-2026-0864
ADVISORY - dockerSummary
When using the "configparser" module to write configuration files containing multi-line text values with carriage return characters (\r) the resulting file could be injected with unexpected keys and values if the attacker controls the written value.
EPSS Score: 0.00128 (0.028)
Common Weakness Enumeration (CWE)
ADVISORY - redhat
Improper Neutralization of CRLF Sequences ('CRLF Injection')
Docker
CREATED
UPDATED
ADVISORY ID
CVE-2026-0864
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
| Package | Type | OS Name | OS Version | Affected Ranges | Fix Versions |
|---|---|---|---|---|---|
| python | dhi | - | - | >=0 | Not yet available |
| alpine/python-3.10 | apk | alpine | 3.23 | >=0 | Not yet available |
| alpine/python-3.11 | apk | alpine | 3.23 | >=0 | Not yet available |
| alpine/python-3.12 | apk | alpine | 3.23 | >=0 | Not yet available |
| alpine/python-3.13 | apk | alpine | 3.23 | >=0 | Not yet available |
| alpine/python-3.14 | apk | alpine | 3.23 | >=0 | Not yet available |
| debian/python-3.10 | deb | debian | 13 | >=0 | Not yet available |
| debian/python-3.11 | deb | debian | 13 | >=0 | Not yet available |
| debian/python-3.12 | deb | debian | 13 | >=0 | Not yet available |
| debian/python-3.13 | deb | debian | 13 | >=0 | Not yet available |
| debian/python-3.14 | deb | debian | 13 | >=0 | Not yet available |
Severity and metrics
No CVSS data available from this advisory.
Debian
CREATED
UPDATED
ADVISORY IDCVE-2026-0864
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
Ubuntu
CREATED
UPDATED
ADVISORY IDCVE-2026-0864
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
N/AmediumBitnami
CREATED
UPDATED
ADVISORY ID
BIT-libpython-2026-0864
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
4.1mediumBitnami
CREATED
UPDATED
ADVISORY ID
BIT-python-2026-0864
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
4.1mediumBitnami
CREATED
UPDATED
ADVISORY ID
BIT-python-min-2026-0864
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
4.1mediumRed Hat
CREATED
UPDATED
ADVISORY IDCVE-2026-0864
EXPLOITABILITY SCORE
1.8
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)