{
  "cveId": "CVE-2026-45409",
  "url": "https://patchblox.com/security/cve/CVE-2026-45409",
  "summary": "CVE-2026-45409 is fixed in 15 products on 1 platform, first by python3-idna 3.3-1ubuntu0.2, released June 5, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "python3-idna: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, excepti...",
  "description": "Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.\n\nSecurity Fix(es):\n\n* python-idna: idna: Denial of Service via specially crafted long inputs (CVE-2026-45409)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
  "published": "2026-06-05T16:16:00Z",
  "severity": "Moderate",
  "cvss": 5.3,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
  "epss": 0.00408,
  "epssPercentile": 0.3533,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "mingw-python-idna",
      "release": "Fedora 43",
      "fixedVersion": "3.18-1.fc43",
      "fix": "FEDORA-2026-9DBF4D0CA8",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9dbf4d0ca8",
      "released": "2026-07-12T18:33:34Z"
    },
    {
      "platform": "linux",
      "product": "mingw32-python3-idna",
      "release": "Fedora 43",
      "fixedVersion": "3.18-1.fc43",
      "fix": "FEDORA-2026-9DBF4D0CA8",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9dbf4d0ca8",
      "released": "2026-07-12T18:33:34Z"
    },
    {
      "platform": "linux",
      "product": "mingw64-python3-idna",
      "release": "Fedora 43",
      "fixedVersion": "3.18-1.fc43",
      "fix": "FEDORA-2026-9DBF4D0CA8",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9dbf4d0ca8",
      "released": "2026-07-12T18:33:34Z"
    },
    {
      "platform": "linux",
      "product": "python-idna",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "3.10-1\u002Bdeb13u1",
      "fix": "DEBIAN-CVE-2026-45409",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-45409",
      "released": "2026-06-27T17:39:39Z"
    },
    {
      "platform": "linux",
      "product": "python-idna",
      "release": "Debian 14",
      "fixedVersion": "3.11-1.1",
      "fix": "DEBIAN-CVE-2026-45409",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-45409",
      "released": "2026-06-27T17:39:39Z"
    },
    {
      "platform": "linux",
      "product": "python-idna",
      "release": "Fedora 43",
      "fixedVersion": "3.18-1.fc43",
      "fix": "FEDORA-2026-6215E65F6C",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-6215e65f6c",
      "released": "2026-07-10T10:16:33Z"
    },
    {
      "platform": "linux",
      "product": "python-idna",
      "release": "RHEL 10",
      "fixedVersion": "3.7-6.el10_2",
      "fix": "RHSA-2026:54481",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-54481",
      "released": "2026-06-05T22:06:07Z"
    },
    {
      "platform": "linux",
      "product": "python-idna",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "3.10-160000.3.1",
      "fix": "OPENSUSE-SU-2026:21048-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21048-1",
      "released": "2026-06-24T21:38:59Z"
    },
    {
      "platform": "linux",
      "product": "python-idna",
      "release": "rocky 10",
      "fixedVersion": "0:3.7-6.el10_2",
      "fix": "RLSA-2026:54481",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-54481",
      "released": "2026-08-13T12:08:06Z"
    },
    {
      "platform": "linux",
      "product": "python-idna",
      "release": "rocky 8",
      "fixedVersion": "0:2.5-8.el8_10",
      "fix": "RLSA-2026:54290",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-54290",
      "released": "2026-08-13T06:00:54Z"
    },
    {
      "platform": "linux",
      "product": "python-idna",
      "release": "rocky 9",
      "fixedVersion": "0:2.10-8.el9_8",
      "fix": "RLSA-2026:54484",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-54484",
      "released": "2026-08-13T12:04:44Z"
    },
    {
      "platform": "linux",
      "product": "python-idna",
      "release": "sles 15.7",
      "fixedVersion": "2.6-150000.3.9.1",
      "fix": "SUSE-SU-2026:3100-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3100-1",
      "released": "2026-07-17T11:42:00Z"
    },
    {
      "platform": "linux",
      "product": "python-idna",
      "release": "sles 16.0",
      "fixedVersion": "3.10-160000.3.1",
      "fix": "SUSE-SU-2026:22356-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-22356-1",
      "released": "2026-06-24T21:39:03Z"
    },
    {
      "platform": "linux",
      "product": "python3-idna",
      "release": "Fedora 43",
      "fixedVersion": "3.18-1.fc43",
      "fix": "FEDORA-2026-6215E65F6C",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-6215e65f6c",
      "released": "2026-07-10T10:16:33Z"
    },
    {
      "platform": "linux",
      "product": "python3-idna",
      "release": "RHEL 8",
      "fixedVersion": "0:2.5-8.el8_10",
      "fix": "RHSA-2026:54290",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-54290",
      "released": "2026-08-13T22:20:04Z"
    },
    {
      "platform": "linux",
      "product": "python3-idna",
      "release": "RHEL 9",
      "fixedVersion": "0:2.10-8.el9_8",
      "fix": "RHSA-2026:54484",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-54484",
      "released": "2026-08-14T22:31:40Z"
    },
    {
      "platform": "linux",
      "product": "python3-idna",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "3.3-1ubuntu0.2",
      "fix": "python3-idna 3.3-1ubuntu0.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-python3-idna-3.3-1ubuntu0.2",
      "released": "2026-06-05T16:16:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-idna",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "3.6-2ubuntu0.2",
      "fix": "python3-idna 3.6-2ubuntu0.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-python3-idna-3.6-2ubuntu0.2",
      "released": "2026-06-05T16:16:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-idna",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "3.11-1ubuntu0.1",
      "fix": "python3-idna 3.11-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-python3-idna-3.11-1ubuntu0.1",
      "released": "2026-06-05T16:16:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-idna",
      "release": "almalinux 10",
      "fixedVersion": "3.7-6.el10_2",
      "fix": "ALSA-2026:54481",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-54481",
      "released": "2026-08-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-idna",
      "release": "almalinux 8",
      "fixedVersion": "2.5-8.el8_10",
      "fix": "ALSA-2026:54290",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-54290",
      "released": "2026-08-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-idna",
      "release": "almalinux 9",
      "fixedVersion": "2.10-8.el9_8",
      "fix": "ALSA-2026:54484",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-54484",
      "released": "2026-08-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-idna",
      "release": "amzn 2023",
      "fixedVersion": "2.10-3.amzn2023.0.4",
      "fix": "ALAS2023-2026-2052",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2052",
      "released": "2026-08-17T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-idna",
      "release": "ol 10",
      "fixedVersion": "0:3.7-6.el10_2",
      "fix": "ELSA-2026-54481",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-54481",
      "released": "2026-08-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-idna",
      "release": "ol 8",
      "fixedVersion": "0:2.5-8.el8_10",
      "fix": "ELSA-2026-54290",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-54290",
      "released": "2026-08-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-idna",
      "release": "ol 9",
      "fixedVersion": "0:2.10-8.el9_8",
      "fix": "ELSA-2026-54484",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-54484",
      "released": "2026-08-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-pip",
      "release": "amzn 2023",
      "fixedVersion": "21.3.1-2.amzn2023.0.21",
      "fix": "ALAS2023-2026-2092",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2092",
      "released": "2026-08-31T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-pip-wheel",
      "release": "amzn 2023",
      "fixedVersion": "21.3.1-2.amzn2023.0.21",
      "fix": "ALAS2023-2026-2092",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2092",
      "released": "2026-08-31T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3.11-pip",
      "release": "amzn 2023",
      "fixedVersion": "22.3.1-2.amzn2023.0.14",
      "fix": "ALAS2023-2026-2090",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2090",
      "released": "2026-08-31T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3.11-pip-wheel",
      "release": "amzn 2023",
      "fixedVersion": "22.3.1-2.amzn2023.0.14",
      "fix": "ALAS2023-2026-2090",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2090",
      "released": "2026-08-31T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3.12-pip",
      "release": "amzn 2023",
      "fixedVersion": "23.2.1-4.amzn2023.0.11",
      "fix": "ALAS2023-2026-2091",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2091",
      "released": "2026-08-31T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3.12-pip-wheel",
      "release": "amzn 2023",
      "fixedVersion": "23.2.1-4.amzn2023.0.11",
      "fix": "ALAS2023-2026-2091",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2091",
      "released": "2026-08-31T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3.13-pip",
      "release": "amzn 2023",
      "fixedVersion": "24.2-259.amzn2023.0.8",
      "fix": "ALAS2023-2026-2089",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2089",
      "released": "2026-08-31T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3.13-pip-wheel",
      "release": "amzn 2023",
      "fixedVersion": "24.2-259.amzn2023.0.8",
      "fix": "ALAS2023-2026-2089",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2089",
      "released": "2026-08-31T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3.14-pip",
      "release": "amzn 2023",
      "fixedVersion": "26.1.1-1.amzn2023.0.3",
      "fix": "ALAS2023-2026-2093",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2093",
      "released": "2026-08-31T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3.14-pip-wheel",
      "release": "amzn 2023",
      "fixedVersion": "26.1.1-1.amzn2023.0.3",
      "fix": "ALAS2023-2026-2093",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2093",
      "released": "2026-08-31T09:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}