CVE-2026-3446
ADVISORY - nistSummary
When calling base64.b64decode() or related functions the decoding process would stop after encountering the first padded quad regardless of whether there was more information to be processed. This can lead to data being accepted which may be processed differently by other implementations. Use "validate=True" to enable stricter processing of base64 data.
Common Weakness Enumeration (CWE)
ADVISORY - nist
Docker
CREATED
UPDATED
ADVISORY ID
CVE-2026-3446
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
| Package | Type | OS Name | OS Version | Affected Ranges | Fix Versions |
|---|---|---|---|---|---|
| python | dhi | - | - | >=3.14.0-alpha1,<3.14.4 | 3.14.4 |
| alpine/python-3.10 | apk | alpine | 3.23 | <3.13.13 | 3.13.13 |
| alpine/python-3.10 | apk | alpine | 3.23 | >=3.14.0-alpha1,<3.14.4 | 3.14.4 |
| alpine/python-3.10 | apk | alpine | 3.23 | >=3.15.0-alpha1,<3.15.0-alpha8 | 3.15.0-alpha8 |
| alpine/python-3.11 | apk | alpine | 3.23 | <3.13.13 | 3.13.13 |
| alpine/python-3.11 | apk | alpine | 3.23 | >=3.14.0-alpha1,<3.14.4 | 3.14.4 |
| alpine/python-3.11 | apk | alpine | 3.23 | >=3.15.0-alpha1,<3.15.0-alpha8 | 3.15.0-alpha8 |
| alpine/python-3.12 | apk | alpine | 3.23 | <3.13.13 | 3.13.13 |
| alpine/python-3.12 | apk | alpine | 3.23 | >=3.14.0-alpha1,<3.14.4 | 3.14.4 |
| alpine/python-3.12 | apk | alpine | 3.23 | >=3.15.0-alpha1,<3.15.0-alpha8 | 3.15.0-alpha8 |
| alpine/python-3.13 | apk | alpine | 3.23 | <3.13.13 | 3.13.13 |
| alpine/python-3.13 | apk | alpine | 3.23 | >=3.14.0-alpha1,<3.14.4 | 3.14.4 |
| alpine/python-3.13 | apk | alpine | 3.23 | >=3.15.0-alpha1,<3.15.0-alpha8 | 3.15.0-alpha8 |
| alpine/python-3.14 | apk | alpine | 3.23 | <3.13.13 | 3.13.13 |
| alpine/python-3.14 | apk | alpine | 3.23 | >=3.14.0-alpha1,<3.14.4 | 3.14.4 |
| alpine/python-3.14 | apk | alpine | 3.23 | >=3.15.0-alpha1,<3.15.0-alpha8 | 3.15.0-alpha8 |
| python | dhi | - | - | <3.13.13 | 3.13.13 |
| python | dhi | - | - | >=3.15.0-alpha1,<3.15.0-alpha8 | 3.15.0-alpha8 |
Severity and metrics
No CVSS data available from this advisory.
NIST
CREATED
UPDATED
ADVISORY IDCVE-2026-3446
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)