CVE-2025-15367

Medium CVSS: 5.9

The poplib module, when passed a user-controlled command, can have
additional commands injected using newlines. Mitigation rejects commands
containing control characters.

Vendor

Product

CWE

CWE-77

Yayın Tarihi

2026-01-20 22:15:51

Güncelleme

2026-01-26 15:05:23

Source Identifier

cna@python.org

KEV Date Added

Kategoriler

CWE-77 MEDIUM 2026

Referanslar

https://github.com/python/cpython/commit/b234a2b67539f787e191d2ef19a7cbdce32874e7 https://github.com/python/cpython/issues/143923 https://github.com/python/cpython/pull/143924 https://mail.python.org/archives/list/security-announce@python.org/thread/CBFBOWVGGUJFSGITQCCBZS4GEYYZ7ZNE/