{
  "product": "Python 3.14",
  "url": "https://patchblox.com/security/product/windows-app/python-3.14",
  "summary": "The latest version of Python 3.14 is 3.14.10, released October 25, 2026. Patch Radar has 10 security fixes for Python 3.14, closing 50 CVEs. The newest security fix is Python 3.14 3.14.10, released October 25, 2026. 4 CVEs have no fix yet.",
  "platform": "windows-app",
  "vendor": "Python Software Foundation",
  "supported": true,
  "latestVersion": "3.14.10",
  "latestReleased": "2026-10-25T00:00:00Z",
  "fixCount": 10,
  "cveCount": 50,
  "exploitedCveCount": 0,
  "unfixedCveCount": 4,
  "fixes": [
    {
      "fix": "Python 3.14 3.14.10",
      "url": "https://patchblox.com/security/fix/windows-app/python.python.3.14-3.14.10",
      "released": "2026-10-25T00:00:00Z",
      "fixedVersion": "3.14.10",
      "priority": "Urgent",
      "cveCount": 2,
      "exploitedCveCount": 0
    },
    {
      "fix": "Python 3.14 3.14.9",
      "url": "https://patchblox.com/security/fix/windows-app/python.python.3.14-3.14.9",
      "released": "2026-10-21T00:00:00Z",
      "fixedVersion": "3.14.9",
      "priority": "High",
      "cveCount": 3,
      "exploitedCveCount": 0
    },
    {
      "fix": "Python 3.14 3.14.8",
      "url": "https://patchblox.com/security/fix/windows-app/python.python.3.14-3.14.8",
      "released": "2026-09-30T00:00:00Z",
      "fixedVersion": "3.14.8",
      "priority": "Urgent",
      "cveCount": 5,
      "exploitedCveCount": 0
    },
    {
      "fix": "Python 3.14 3.14.7",
      "url": "https://patchblox.com/security/fix/windows-app/python.python.3.14-3.14.7",
      "released": "2026-08-05T00:00:00Z",
      "fixedVersion": "3.14.7",
      "priority": "High",
      "cveCount": 8,
      "exploitedCveCount": 0
    },
    {
      "fix": "Python 3.14 3.14.6",
      "url": "https://patchblox.com/security/fix/windows-app/python.python.3.14-3.14.6",
      "released": "2026-06-10T00:00:00Z",
      "fixedVersion": "3.14.6",
      "priority": "High",
      "cveCount": 5,
      "exploitedCveCount": 0
    },
    {
      "fix": "Python 3.14 3.14.5",
      "url": "https://patchblox.com/security/fix/windows-app/python.python.3.14-3.14.5",
      "released": "2026-05-10T00:00:00Z",
      "fixedVersion": "3.14.5",
      "priority": "High",
      "cveCount": 7,
      "exploitedCveCount": 0
    },
    {
      "fix": "Python 3.14 3.14.4",
      "url": "https://patchblox.com/security/fix/windows-app/python.python.3.14-3.14.4",
      "released": "2026-04-07T00:00:00Z",
      "fixedVersion": "3.14.4",
      "priority": "High",
      "cveCount": 7,
      "exploitedCveCount": 0
    },
    {
      "fix": "Python 3.14 3.14.3",
      "url": "https://patchblox.com/security/fix/windows-app/python.python.3.14-3.14.3",
      "released": "2026-02-03T00:00:00Z",
      "fixedVersion": "3.14.3",
      "priority": "High",
      "cveCount": 5,
      "exploitedCveCount": 0
    },
    {
      "fix": "Python 3.14 3.14.2",
      "url": "https://patchblox.com/security/fix/windows-app/python.python.3.14-3.14.2",
      "released": "2025-12-05T00:00:00Z",
      "fixedVersion": "3.14.2",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "Python 3.14 3.14.1",
      "url": "https://patchblox.com/security/fix/windows-app/python.python.3.14-3.14.1",
      "released": "2025-12-02T00:00:00Z",
      "fixedVersion": "3.14.1",
      "priority": "High",
      "cveCount": 7,
      "exploitedCveCount": 0
    }
  ],
  "noFixYet": [
    {
      "cveId": "CVE-2025-15367",
      "url": "https://patchblox.com/security/cve/CVE-2025-15367",
      "title": "POP3 command injection in user-controlled commands",
      "priority": "High",
      "status": "no-fix",
      "affectedVersion": "3.14.10"
    },
    {
      "cveId": "CVE-2026-103995",
      "url": "https://patchblox.com/security/cve/CVE-2026-103995",
      "title": "Lenient parsing of integers for response body and chunk framing",
      "priority": "Routine",
      "status": "no-fix",
      "affectedVersion": "3.14.10"
    },
    {
      "cveId": "CVE-2026-116566",
      "url": "https://patchblox.com/security/cve/CVE-2026-116566",
      "title": "socket.getaddrinfo() accepts embedded null bytes in host and port",
      "priority": "Routine",
      "status": "no-fix",
      "affectedVersion": "3.14.10"
    },
    {
      "cveId": "CVE-2026-19672",
      "url": "https://patchblox.com/security/cve/CVE-2026-19672",
      "title": "tarfile extraction filter bypass allows creation of directories outside the destination",
      "priority": "Routine",
      "status": "no-fix",
      "affectedVersion": "3.14.10"
    }
  ],
  "dataAsOf": "2026-11-07T12:40:37Z"
}