CVE-2025-1795

Mishandling of comma during folding and unicode-encoding of email headers

CVE-2025-1795 is fixed in 101 products on 2 platforms, first by Python 3.11 3.11.9, released April 2, 2024. 7 other affected products have no fix yet. It is not reported as exploited. Patch Radar priority: Routine.

RoutineFixed on 2 platforms
CVSS
2.3
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0063
50th percentile

During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted by some mail servers.

Where it's fixed

ProductFixed inFixReleased
Windows apps
Python 3.11 3.11.9 Python 3.11 3.11.9 Apr 2, 2024
Python 3.12 3.12.3 Python 3.12 3.12.3 Apr 9, 2024
Linux
idle-python3.10 · Ubuntu 22.04.1 LTS (jammy) 3.10.12-1~22.04.10 idle-python3.10 3.10.12-1~22.04.10 May 15, 2025
idle-python3.11 · Ubuntu 22.04.1 LTS (jammy) 3.11.0~rc1-1~22.04.1~esm4 idle-python3.11 3.11.0~rc1-1~22.04.1~esm4 May 15, 2025
idle-python3.12 · Ubuntu 24.04.5 LTS (noble) 3.12.3-1ubuntu0.6 idle-python3.12 3.12.3-1ubuntu0.6 May 15, 2025
idle-python3.6 · Ubuntu 18.04.6 LTS (bionic) 3.6.9-1~18.04ubuntu1.13+esm5 idle-python3.6 3.6.9-1~18.04ubuntu1.13+esm5 May 15, 2025
idle-python3.7 · Ubuntu 18.04.6 LTS (bionic) 3.7.5-2ubuntu1~18.04.2+esm6 idle-python3.7 3.7.5-2ubuntu1~18.04.2+esm6 May 15, 2025
idle-python3.8 · Ubuntu 18.04.6 LTS (bionic) 3.8.0-3ubuntu1~18.04.2+esm5 idle-python3.8 3.8.0-3ubuntu1~18.04.2+esm5 May 15, 2025
idle-python3.8 · Ubuntu 20.04 LTS (focal) 3.8.10-0ubuntu1~20.04.18+esm1 idle-python3.8 3.8.10-0ubuntu1~20.04.18+esm1 May 15, 2025
idle-python3.9 · Ubuntu 20.04 LTS (focal) 3.9.5-3ubuntu0~20.04.1+esm5 idle-python3.9 3.9.5-3ubuntu0~20.04.1+esm5 May 15, 2025
libpython3.10 · Ubuntu 22.04.1 LTS (jammy) 3.10.12-1~22.04.10 libpython3.10 3.10.12-1~22.04.10 May 15, 2025
libpython3.10-minimal · Ubuntu 22.04.1 LTS (jammy) 3.10.12-1~22.04.10 libpython3.10-minimal 3.10.12-1~22.04.10 May 15, 2025
libpython3.10-stdlib · Ubuntu 22.04.1 LTS (jammy) 3.10.12-1~22.04.10 libpython3.10-stdlib 3.10.12-1~22.04.10 May 15, 2025
libpython3.10-testsuite · Ubuntu 22.04.1 LTS (jammy) 3.10.12-1~22.04.10 libpython3.10-testsuite 3.10.12-1~22.04.10 May 15, 2025
libpython3.11 · Ubuntu 22.04.1 LTS (jammy) 3.11.0~rc1-1~22.04.1~esm4 libpython3.11 3.11.0~rc1-1~22.04.1~esm4 May 15, 2025
libpython3.11-minimal · Ubuntu 22.04.1 LTS (jammy) 3.11.0~rc1-1~22.04.1~esm4 libpython3.11-minimal 3.11.0~rc1-1~22.04.1~esm4 May 15, 2025
libpython3.11-stdlib · Ubuntu 22.04.1 LTS (jammy) 3.11.0~rc1-1~22.04.1~esm4 libpython3.11-stdlib 3.11.0~rc1-1~22.04.1~esm4 May 15, 2025
libpython3.11-testsuite · Ubuntu 22.04.1 LTS (jammy) 3.11.0~rc1-1~22.04.1~esm4 libpython3.11-testsuite 3.11.0~rc1-1~22.04.1~esm4 May 15, 2025
libpython3.12-minimal · Ubuntu 24.04.5 LTS (noble) 3.12.3-1ubuntu0.6 libpython3.12-minimal 3.12.3-1ubuntu0.6 May 15, 2025
libpython3.12-stdlib · Ubuntu 24.04.5 LTS (noble) 3.12.3-1ubuntu0.6 libpython3.12-stdlib 3.12.3-1ubuntu0.6 May 15, 2025
libpython3.12-testsuite · Ubuntu 24.04.5 LTS (noble) 3.12.3-1ubuntu0.6 libpython3.12-testsuite 3.12.3-1ubuntu0.6 May 15, 2025
libpython3.12t64 · Ubuntu 24.04.5 LTS (noble) 3.12.3-1ubuntu0.6 libpython3.12t64 3.12.3-1ubuntu0.6 May 15, 2025
libpython3.6 · Ubuntu 18.04.6 LTS (bionic) 3.6.9-1~18.04ubuntu1.13+esm5 libpython3.6 3.6.9-1~18.04ubuntu1.13+esm5 May 15, 2025
libpython3.6-minimal · Ubuntu 18.04.6 LTS (bionic) 3.6.9-1~18.04ubuntu1.13+esm5 libpython3.6-minimal 3.6.9-1~18.04ubuntu1.13+esm5 May 15, 2025
libpython3.6-stdlib · Ubuntu 18.04.6 LTS (bionic) 3.6.9-1~18.04ubuntu1.13+esm5 libpython3.6-stdlib 3.6.9-1~18.04ubuntu1.13+esm5 May 15, 2025
libpython3.6-testsuite · Ubuntu 18.04.6 LTS (bionic) 3.6.9-1~18.04ubuntu1.13+esm5 libpython3.6-testsuite 3.6.9-1~18.04ubuntu1.13+esm5 May 15, 2025
libpython3.7 · Ubuntu 18.04.6 LTS (bionic) 3.7.5-2ubuntu1~18.04.2+esm6 libpython3.7 3.7.5-2ubuntu1~18.04.2+esm6 May 15, 2025
libpython3.7-minimal · Ubuntu 18.04.6 LTS (bionic) 3.7.5-2ubuntu1~18.04.2+esm6 libpython3.7-minimal 3.7.5-2ubuntu1~18.04.2+esm6 May 15, 2025
libpython3.7-stdlib · Ubuntu 18.04.6 LTS (bionic) 3.7.5-2ubuntu1~18.04.2+esm6 libpython3.7-stdlib 3.7.5-2ubuntu1~18.04.2+esm6 May 15, 2025
libpython3.7-testsuite · Ubuntu 18.04.6 LTS (bionic) 3.7.5-2ubuntu1~18.04.2+esm6 libpython3.7-testsuite 3.7.5-2ubuntu1~18.04.2+esm6 May 15, 2025
libpython3.8 · Ubuntu 18.04.6 LTS (bionic) 3.8.0-3ubuntu1~18.04.2+esm5 libpython3.8 3.8.0-3ubuntu1~18.04.2+esm5 May 15, 2025
libpython3.8 · Ubuntu 20.04 LTS (focal) 3.8.10-0ubuntu1~20.04.18+esm1 libpython3.8 3.8.10-0ubuntu1~20.04.18+esm1 May 15, 2025
libpython3.8-minimal · Ubuntu 18.04.6 LTS (bionic) 3.8.0-3ubuntu1~18.04.2+esm5 libpython3.8-minimal 3.8.0-3ubuntu1~18.04.2+esm5 May 15, 2025
libpython3.8-minimal · Ubuntu 20.04 LTS (focal) 3.8.10-0ubuntu1~20.04.18+esm1 libpython3.8-minimal 3.8.10-0ubuntu1~20.04.18+esm1 May 15, 2025
libpython3.8-stdlib · Ubuntu 18.04.6 LTS (bionic) 3.8.0-3ubuntu1~18.04.2+esm5 libpython3.8-stdlib 3.8.0-3ubuntu1~18.04.2+esm5 May 15, 2025
libpython3.8-stdlib · Ubuntu 20.04 LTS (focal) 3.8.10-0ubuntu1~20.04.18+esm1 libpython3.8-stdlib 3.8.10-0ubuntu1~20.04.18+esm1 May 15, 2025
libpython3.8-testsuite · Ubuntu 18.04.6 LTS (bionic) 3.8.0-3ubuntu1~18.04.2+esm5 libpython3.8-testsuite 3.8.0-3ubuntu1~18.04.2+esm5 May 15, 2025
libpython3.8-testsuite · Ubuntu 20.04 LTS (focal) 3.8.10-0ubuntu1~20.04.18+esm1 libpython3.8-testsuite 3.8.10-0ubuntu1~20.04.18+esm1 May 15, 2025
libpython3.9 · Ubuntu 20.04 LTS (focal) 3.9.5-3ubuntu0~20.04.1+esm5 libpython3.9 3.9.5-3ubuntu0~20.04.1+esm5 May 15, 2025
libpython3.9-minimal · Ubuntu 20.04 LTS (focal) 3.9.5-3ubuntu0~20.04.1+esm5 libpython3.9-minimal 3.9.5-3ubuntu0~20.04.1+esm5 May 15, 2025
libpython3.9-stdlib · Ubuntu 20.04 LTS (focal) 3.9.5-3ubuntu0~20.04.1+esm5 libpython3.9-stdlib 3.9.5-3ubuntu0~20.04.1+esm5 May 15, 2025
libpython3.9-testsuite · Ubuntu 20.04 LTS (focal) 3.9.5-3ubuntu0~20.04.1+esm5 libpython3.9-testsuite 3.9.5-3ubuntu0~20.04.1+esm5 May 15, 2025
pypy3 · Debian 13.5 (trixie) 7.3.18+dfsg-1 DEBIAN-CVE-2025-1795 Feb 28, 2025
pypy3 · Debian 14 7.3.18+dfsg-1 DEBIAN-CVE-2025-1795 Feb 28, 2025
python-unversioned-command · amzn 2023 3.9.21-1.amzn2023.0.3 ALAS2023-2025-917 Mar 26, 2025
python3 · amzn 2023 3.9.21-1.amzn2023.0.3 ALAS2023-2025-917 Mar 26, 2025
python3-debug · amzn 2023 3.9.21-1.amzn2023.0.3 ALAS2023-2025-917 Mar 26, 2025
python3-devel · amzn 2023 3.9.21-1.amzn2023.0.3 ALAS2023-2025-917 Mar 26, 2025
python3-idle · amzn 2023 3.9.21-1.amzn2023.0.3 ALAS2023-2025-917 Mar 26, 2025
python3-libs · amzn 2023 3.9.21-1.amzn2023.0.3 ALAS2023-2025-917 Mar 26, 2025
python3-test · amzn 2023 3.9.21-1.amzn2023.0.3 ALAS2023-2025-917 Mar 26, 2025
python3-tkinter · amzn 2023 3.9.21-1.amzn2023.0.3 ALAS2023-2025-917 Mar 26, 2025
python3.10 · Ubuntu 22.04.1 LTS (jammy) 3.10.12-1~22.04.10 python3.10 3.10.12-1~22.04.10 May 15, 2025
python3.10-examples · Ubuntu 22.04.1 LTS (jammy) 3.10.12-1~22.04.10 python3.10-examples 3.10.12-1~22.04.10 May 15, 2025
python3.10-full · Ubuntu 22.04.1 LTS (jammy) 3.10.12-1~22.04.10 python3.10-full 3.10.12-1~22.04.10 May 15, 2025
python3.10-minimal · Ubuntu 22.04.1 LTS (jammy) 3.10.12-1~22.04.10 python3.10-minimal 3.10.12-1~22.04.10 May 15, 2025
python3.10-nopie · Ubuntu 22.04.1 LTS (jammy) 3.10.12-1~22.04.10 python3.10-nopie 3.10.12-1~22.04.10 May 15, 2025
python3.10-venv · Ubuntu 22.04.1 LTS (jammy) 3.10.12-1~22.04.10 python3.10-venv 3.10.12-1~22.04.10 May 15, 2025
python3.11 · Debian 12.15 (bookworm) 3.11.2-6+deb12u6 DEBIAN-CVE-2025-1795 Feb 28, 2025
python3.11 · Ubuntu 22.04.1 LTS (jammy) 3.11.0~rc1-1~22.04.1~esm4 python3.11 3.11.0~rc1-1~22.04.1~esm4 May 15, 2025
python3.11 · amzn 2023 3.11.11-5.amzn2023.0.1 ALAS2023-2025-871 Feb 26, 2025
python3.11-debug · amzn 2023 3.11.11-5.amzn2023.0.1 ALAS2023-2025-871 Feb 26, 2025
python3.11-debuginfo · amzn 2023 3.11.11-5.amzn2023.0.1 ALAS2023-2025-871 Feb 26, 2025
python3.11-debugsource · amzn 2023 3.11.11-5.amzn2023.0.1 ALAS2023-2025-871 Feb 26, 2025
python3.11-devel · amzn 2023 3.11.11-5.amzn2023.0.1 ALAS2023-2025-871 Feb 26, 2025
python3.11-examples · Ubuntu 22.04.1 LTS (jammy) 3.11.0~rc1-1~22.04.1~esm4 python3.11-examples 3.11.0~rc1-1~22.04.1~esm4 May 15, 2025
python3.11-full · Ubuntu 22.04.1 LTS (jammy) 3.11.0~rc1-1~22.04.1~esm4 python3.11-full 3.11.0~rc1-1~22.04.1~esm4 May 15, 2025
python3.11-idle · amzn 2023 3.11.11-5.amzn2023.0.1 ALAS2023-2025-871 Feb 26, 2025
python3.11-libs · amzn 2023 3.11.11-5.amzn2023.0.1 ALAS2023-2025-871 Feb 26, 2025
python3.11-minimal · Ubuntu 22.04.1 LTS (jammy) 3.11.0~rc1-1~22.04.1~esm4 python3.11-minimal 3.11.0~rc1-1~22.04.1~esm4 May 15, 2025
python3.11-nopie · Ubuntu 22.04.1 LTS (jammy) 3.11.0~rc1-1~22.04.1~esm4 python3.11-nopie 3.11.0~rc1-1~22.04.1~esm4 May 15, 2025
python3.11-test · amzn 2023 3.11.11-5.amzn2023.0.1 ALAS2023-2025-871 Feb 26, 2025
python3.11-tkinter · amzn 2023 3.11.11-5.amzn2023.0.1 ALAS2023-2025-871 Feb 26, 2025
python3.11-venv · Ubuntu 22.04.1 LTS (jammy) 3.11.0~rc1-1~22.04.1~esm4 python3.11-venv 3.11.0~rc1-1~22.04.1~esm4 May 15, 2025
python3.12 · Ubuntu 24.04.5 LTS (noble) 3.12.3-1ubuntu0.6 python3.12 3.12.3-1ubuntu0.6 May 15, 2025
python3.12-examples · Ubuntu 24.04.5 LTS (noble) 3.12.3-1ubuntu0.6 python3.12-examples 3.12.3-1ubuntu0.6 May 15, 2025
python3.12-full · Ubuntu 24.04.5 LTS (noble) 3.12.3-1ubuntu0.6 python3.12-full 3.12.3-1ubuntu0.6 May 15, 2025
python3.12-minimal · Ubuntu 24.04.5 LTS (noble) 3.12.3-1ubuntu0.6 python3.12-minimal 3.12.3-1ubuntu0.6 May 15, 2025
python3.12-nopie · Ubuntu 24.04.5 LTS (noble) 3.12.3-1ubuntu0.6 python3.12-nopie 3.12.3-1ubuntu0.6 May 15, 2025
python3.12-venv · Ubuntu 24.04.5 LTS (noble) 3.12.3-1ubuntu0.6 python3.12-venv 3.12.3-1ubuntu0.6 May 15, 2025
python3.13 · Debian 13.5 (trixie) 3.13.0~b1-1 DEBIAN-CVE-2025-1795 Feb 28, 2025
python3.6 · Ubuntu 18.04.6 LTS (bionic) 3.6.9-1~18.04ubuntu1.13+esm5 python3.6 3.6.9-1~18.04ubuntu1.13+esm5 May 15, 2025
python3.6-examples · Ubuntu 18.04.6 LTS (bionic) 3.6.9-1~18.04ubuntu1.13+esm5 python3.6-examples 3.6.9-1~18.04ubuntu1.13+esm5 May 15, 2025
python3.6-minimal · Ubuntu 18.04.6 LTS (bionic) 3.6.9-1~18.04ubuntu1.13+esm5 python3.6-minimal 3.6.9-1~18.04ubuntu1.13+esm5 May 15, 2025
python3.6-venv · Ubuntu 18.04.6 LTS (bionic) 3.6.9-1~18.04ubuntu1.13+esm5 python3.6-venv 3.6.9-1~18.04ubuntu1.13+esm5 May 15, 2025
python3.7 · Ubuntu 18.04.6 LTS (bionic) 3.7.5-2ubuntu1~18.04.2+esm6 python3.7 3.7.5-2ubuntu1~18.04.2+esm6 May 15, 2025
python3.7-examples · Ubuntu 18.04.6 LTS (bionic) 3.7.5-2ubuntu1~18.04.2+esm6 python3.7-examples 3.7.5-2ubuntu1~18.04.2+esm6 May 15, 2025
python3.7-minimal · Ubuntu 18.04.6 LTS (bionic) 3.7.5-2ubuntu1~18.04.2+esm6 python3.7-minimal 3.7.5-2ubuntu1~18.04.2+esm6 May 15, 2025
python3.7-venv · Ubuntu 18.04.6 LTS (bionic) 3.7.5-2ubuntu1~18.04.2+esm6 python3.7-venv 3.7.5-2ubuntu1~18.04.2+esm6 May 15, 2025
python3.8 · Ubuntu 18.04.6 LTS (bionic) 3.8.0-3ubuntu1~18.04.2+esm5 python3.8 3.8.0-3ubuntu1~18.04.2+esm5 May 15, 2025
python3.8 · Ubuntu 20.04 LTS (focal) 3.8.10-0ubuntu1~20.04.18+esm1 python3.8 3.8.10-0ubuntu1~20.04.18+esm1 May 15, 2025
python3.8-examples · Ubuntu 18.04.6 LTS (bionic) 3.8.0-3ubuntu1~18.04.2+esm5 python3.8-examples 3.8.0-3ubuntu1~18.04.2+esm5 May 15, 2025
python3.8-examples · Ubuntu 20.04 LTS (focal) 3.8.10-0ubuntu1~20.04.18+esm1 python3.8-examples 3.8.10-0ubuntu1~20.04.18+esm1 May 15, 2025
python3.8-full · Ubuntu 20.04 LTS (focal) 3.8.10-0ubuntu1~20.04.18+esm1 python3.8-full 3.8.10-0ubuntu1~20.04.18+esm1 May 15, 2025
python3.8-minimal · Ubuntu 18.04.6 LTS (bionic) 3.8.0-3ubuntu1~18.04.2+esm5 python3.8-minimal 3.8.0-3ubuntu1~18.04.2+esm5 May 15, 2025
python3.8-minimal · Ubuntu 20.04 LTS (focal) 3.8.10-0ubuntu1~20.04.18+esm1 python3.8-minimal 3.8.10-0ubuntu1~20.04.18+esm1 May 15, 2025
python3.8-venv · Ubuntu 18.04.6 LTS (bionic) 3.8.0-3ubuntu1~18.04.2+esm5 python3.8-venv 3.8.0-3ubuntu1~18.04.2+esm5 May 15, 2025
python3.8-venv · Ubuntu 20.04 LTS (focal) 3.8.10-0ubuntu1~20.04.18+esm1 python3.8-venv 3.8.10-0ubuntu1~20.04.18+esm1 May 15, 2025
python3.9 · Ubuntu 20.04 LTS (focal) 3.9.5-3ubuntu0~20.04.1+esm5 python3.9 3.9.5-3ubuntu0~20.04.1+esm5 May 15, 2025
python3.9-debuginfo · amzn 2023 3.9.21-1.amzn2023.0.3 ALAS2023-2025-917 Mar 26, 2025
python3.9-debugsource · amzn 2023 3.9.21-1.amzn2023.0.3 ALAS2023-2025-917 Mar 26, 2025
python3.9-examples · Ubuntu 20.04 LTS (focal) 3.9.5-3ubuntu0~20.04.1+esm5 python3.9-examples 3.9.5-3ubuntu0~20.04.1+esm5 May 15, 2025
python3.9-full · Ubuntu 20.04 LTS (focal) 3.9.5-3ubuntu0~20.04.1+esm5 python3.9-full 3.9.5-3ubuntu0~20.04.1+esm5 May 15, 2025
python3.9-minimal · Ubuntu 20.04 LTS (focal) 3.9.5-3ubuntu0~20.04.1+esm5 python3.9-minimal 3.9.5-3ubuntu0~20.04.1+esm5 May 15, 2025
python3.9-venv · Ubuntu 20.04 LTS (focal) 3.9.5-3ubuntu0~20.04.1+esm5 python3.9-venv 3.9.5-3ubuntu0~20.04.1+esm5 May 15, 2025
python311 · opensuse-leap 15.6 3.11.11-150600.3.21.1 SUSE-SU-2025:0982-1 Mar 21, 2025
python311 · sles 15.6 3.11.11-150600.3.21.1 SUSE-SU-2025:0982-1 Mar 21, 2025
python311-core · opensuse-leap 15.6 3.11.11-150600.3.21.1 SUSE-SU-2025:0982-1 Mar 21, 2025
python311-core · sles 15.6 3.11.11-150600.3.21.1 SUSE-SU-2025:0982-1 Mar 21, 2025
python311-documentation · opensuse-leap 15.6 3.11.11-150600.3.21.1 SUSE-SU-2025:0982-1 Mar 21, 2025
python312 · opensuse-leap 15.6 3.12.9-150600.3.21.1 SUSE-SU-2025:0883-1 Mar 17, 2025
python312 · sles 15.6 3.12.9-150600.3.21.1 SUSE-SU-2025:0883-1 Mar 17, 2025
python312-core · opensuse-leap 15.6 3.12.9-150600.3.21.1 SUSE-SU-2025:0883-1 Mar 17, 2025
python312-core · sles 15.6 3.12.9-150600.3.21.1 SUSE-SU-2025:0883-1 Mar 17, 2025
python312-documentation · opensuse-leap 15.6 3.12.9-150600.3.21.1 SUSE-SU-2025:0883-1 Mar 17, 2025
python313 · sles 15.7 3.13.5-150700.4.11.1 SUSE-SU-2025:02074-1 Jun 24, 2025
python313-core · sles 15.7 3.13.5-150700.4.11.1 SUSE-SU-2025:02074-1 Jun 24, 2025
No fix yet
Python 2 (Windows apps) No fix yet no-fix n/a
Python 3.10 (Windows apps) No fix yet no-fix n/a
Python 3.5 (Windows apps) No fix yet no-fix n/a
Python 3.6 (Windows apps) No fix yet no-fix n/a
Python 3.7 (Windows apps) No fix yet no-fix n/a
Python 3.8 (Windows apps) No fix yet no-fix n/a
Python 3.9 (Windows apps) No fix yet no-fix n/a

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.