logo

Database

Improper resource allocation In python3

Description

The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

1-10 of 23

10

Aliases

1. CVE-2026-153082. NVD-2026-153083. OSV-2026-153084. OSV-ALPINE-2026-153085. OSV-DEBIAN-2026-153086. GCVE-2026-153087. SECURITY-CVE-2026-153088. SECURITY-TRACKER-CVE-2026-153089. https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/15xxx/CVE-2026-15308.json10. mail.python.org

References

1. http://www.openwall.com/lists/oss-security/2026/07/09/42. https://github.com/python/cpython/issues/1530303. https://github.com/python/cpython/commit/07efb08123ba9367a7107325adb9d5626dca1ca94. https://github.com/python/cpython/commit/1e7956f1a722df9aabc509c30f8fbdc3a2b4fdc75. https://github.com/python/cpython/commit/785df8f743800661961528970f8598edcd291c146. https://github.com/python/cpython/commit/7933f4bf7131aa4140750f9404f5de0aa2969ced7. https://github.com/python/cpython/commit/bcf98ddbc40ec9b3ee87da0124a5660b19b7e6068. https://github.com/python/cpython/commit/c2390b9376e35a701ed3acc597b8fc87546c9b009. https://github.com/python/cpython/commit/e9f92ac0b298292e7ff998e52cb8ccacfb27a0bd10. https://github.com/python/cpython/pull/153031

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.