{"id":"CGA-h9fv-4fw2-c6fv","modified":"2026-07-17T19:01:29.878587251Z","published":"2025-10-30T22:09:35Z","upstream":["CVE-2025-4517","GHSA-6r6c-684h-9j7p"],"references":[{"type":"WEB","url":"https://gist.github.com/sethmlarson/52398e33eff261329a0180ac1d54f42f"},{"type":"REPORT","url":"https://github.com/python/cpython/issues/135034"},{"type":"FIX","url":"https://github.com/python/cpython/commit/3612d8f51741b11f36f8fb0494d79086bac9390a"},{"type":"FIX","url":"https://github.com/python/cpython/commit/4633f3f497b1ff70e4a35b6fe2c907cbe2d4cb2e"},{"type":"FIX","url":"https://github.com/python/cpython/commit/dd8f187d0746da151e0025c51680979ac5b4cfb1"},{"type":"FIX","url":"https://github.com/python/cpython/pull/135037"},{"type":"FIX","url":"https://github.com/python/cpython/commit/19de092debb3d7e832e5672cc2f7b788d35951da"},{"type":"FIX","url":"https://github.com/python/cpython/commit/28463dba112af719df1e8b0391c46787ad756dd9"},{"type":"FIX","url":"https://github.com/python/cpython/commit/9c1110ef6652687d7c55f590f909720eddde965a"},{"type":"FIX","url":"https://github.com/python/cpython/commit/9e0ac76d96cf80b49055f6d6b9a6763fb9215c2a"},{"type":"FIX","url":"https://github.com/python/cpython/commit/aa9eb5f757ceff461e6e996f12c89e5d9b583b01"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/4xxx/CVE-2025-4517.json"},{"type":"ADVISORY","url":"https://mail.python.org/archives/list/security-announce@python.org/thread/MAXIJJCUUMCL7ATZNDVEGGHUMQMUUKLG/"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-4517"},{"type":"PACKAGE","url":"https://github.com/python/cpython"}],"affected":[{"package":{"name":"python-3.13","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/python-3.13?arch=aarch64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.4-r0"}]}],"ecosystem_specific":{"components":[{"component_purl":"pkg:apk/python-3.13@3.13.3-r2","latest_event_status":"fixed","latest_event_timestamp":"2025-06-09T13:37:30Z","architecture":"aarch64","component_name":"python-3.13","component_version":"3.13.3-r2","component_type":"apk","component_location":"/.PKGINFO"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-h9fv-4fw2-c6fv.json"}},{"package":{"name":"python-3.13","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/python-3.13?arch=aarch64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.4-r0"}]}],"ecosystem_specific":{"components":[{"architecture":"aarch64","component_name":"python-3.13","component_version":"3.13.3-r2","component_type":"apk","component_location":"/.PKGINFO","component_purl":"pkg:apk/python-3.13@3.13.3-r2","latest_event_status":"fixed","latest_event_timestamp":"2025-06-09T13:37:30Z"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-h9fv-4fw2-c6fv.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L"}]}