CVE-2026-15308

ADVISORY - debian

Summary

The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data.

python3.14
python3.13
python3.11
python3.9
python2.7 https://mail.python.org/archives/list/security-announce@python.org/thread/F6453LWKSHKCTWFLCOURWPLETNUIW2Z5/ https://github.com/python/cpython/issues/153030 https://github.com/python/cpython/pull/153031 https://github.com/python/cpython/commit/e9f92ac0b298292e7ff998e52cb8ccacfb27a0bd (v3.15.0b4) https://github.com/python/cpython/commit/07efb08123ba9367a7107325adb9d5626dca1ca9 (3.14 branch) https://github.com/python/cpython/commit/7933f4bf7131aa4140750f9404f5de0aa2969ced (3.13 branch)

EPSS Score⁠: 0.00551 (0.428)

Common Weakness Enumeration (CWE)

ADVISORY - redhat

CWE-835⁠

Loop with Unreachable Exit Condition ('Infinite Loop')

Impacted images

Advisories

Debian

CREATED

20 hours ago

UPDATED

20 hours ago

ADVISORY IDCVE-2026-15308⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Ubuntu

CREATED

16 days ago

UPDATED

14 days ago

ADVISORY IDCVE-2026-15308⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

7.5medium

Alma

CREATED

13 days ago

UPDATED

12 days ago

ADVISORY IDALSA-2026:39320⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Alma

CREATED

12 days ago

UPDATED

12 days ago

ADVISORY IDALSA-2026:39771⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Alma

CREATED

12 days ago

UPDATED

11 days ago

ADVISORY IDALSA-2026:39798⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Alma

CREATED

12 days ago

UPDATED

11 days ago

ADVISORY IDALSA-2026:39893⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Alma

CREATED

7 days ago

UPDATED

6 days ago

ADVISORY IDALSA-2026:41949⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Bitnami

CREATED

14 days ago

UPDATED

14 days ago

ADVISORY ID

BIT-libpython-2026-15308

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

8.7high

Bitnami

CREATED

14 days ago

UPDATED

14 days ago

ADVISORY ID

BIT-python-2026-15308

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

8.7high

Bitnami

CREATED

14 days ago

UPDATED

14 days ago

ADVISORY ID

BIT-python-min-2026-15308

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

8.7high

Red Hat

CREATED

17 days ago

UPDATED

16 days ago

ADVISORY IDCVE-2026-15308⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-835⁠

CVSS SCORE

7.5high

Rocky

CREATED

12 days ago

UPDATED

11 days ago

ADVISORY IDRLSA-2026:39183⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Rocky

CREATED

12 days ago

UPDATED

11 days ago

ADVISORY IDRLSA-2026:39320⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Rocky

CREATED

11 days ago

UPDATED

10 days ago

ADVISORY IDRLSA-2026:39771⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Rocky

CREATED

11 days ago

UPDATED

10 days ago

ADVISORY IDRLSA-2026:39798⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Rocky

CREATED

11 days ago

UPDATED

11 days ago

ADVISORY IDRLSA-2026:39893⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Rocky

CREATED

5 days ago

UPDATED

4 days ago

ADVISORY IDRLSA-2026:40856⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Rocky

CREATED

5 days ago

UPDATED

4 days ago

ADVISORY IDRLSA-2026:41949⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Oracle

CREATED

11 days ago

UPDATED

11 days ago

ADVISORY IDELSA-2026-39183⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Oracle

CREATED

12 days ago

UPDATED

12 days ago

ADVISORY IDELSA-2026-39320⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Oracle

CREATED

11 days ago

UPDATED

11 days ago

ADVISORY IDELSA-2026-39771⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Oracle

CREATED

11 days ago

UPDATED

11 days ago

ADVISORY IDELSA-2026-39798⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Oracle

CREATED

12 days ago

UPDATED

12 days ago

ADVISORY IDELSA-2026-39893⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Oracle

CREATED

11 days ago

UPDATED

11 days ago

ADVISORY IDELSA-2026-40856⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Oracle

CREATED

6 days ago

UPDATED

6 days ago

ADVISORY IDELSA-2026-41949⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Chainguard

CREATED

2 days ago

UPDATED

2 days ago

ADVISORY ID

CGA-mq6v-qm72-mrxm

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY