PT-2026-53327 · Bitnami · Python-Min

Publicado 2026-06-29 · Atualizado 2026-06-29

OSV

When using the "configparser" module to write configuration files containing multi-line text values with carriage return characters (r) the resulting file could be injected with unexpected keys and values if the attacker controls the written value.

Identificadores relacionados

BIT-PYTHON-MIN-2026-0864

Produtos afetados

Python-Min

Referências · 9

• https://github.com/python/cpython/commit/5858e42c539dac8394636a6e9b30472b8994851f · Nota
• https://github.com/python/cpython/issues/143927 · Nota
• https://github.com/python/cpython/pull/151559 · Nota
• https://github.com/python/cpython/commit/0adb386f6e68eb2e73d32e19f235d012df009528 · Nota
• https://github.com/python/cpython/commit/aaf850fd333cd89e9aada03d92aaa788a6cb1bb8 · Nota
• https://github.com/python/cpython/commit/71f2e02a52d47417a6fd69f456346cd8aa7aca98 · Nota
• https://osv.dev/vulnerability/BIT-python-min-2026-0864 · Aviso do Fabricante
• https://mail.python.org/archives/list/[e-mail]/thread/CV4NE6AFCRJL7XQOHX7J5TSDHUWVWGJS · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-0864 · Nota de Segurança