CVE-2026-6019 — BaseCookie.js_output() does not neutralize embedded characters

Description

http.cookies.Morsel.js_output() returns an inline <script> snippet and only escapes " for JavaScript string context. It does not neutralize the HTML parser-sensitive sequence </script> inside the generated script element. Mitigation base64-encodes the cookie value to disallow escaping using cookie value.

Affected products

Vendor	Product	Affected	Fixed
Python Software Foundation	CPython	< 3.13.14, 3.14.0a1 – < 3.14.5rc1, 3.15.0a1 – < 3.15.0b1	3.13.14

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	pypy3	No fix yet	—
Debian 14	python3.14	3.14.5~rc1-1	—
Debian 13	pypy3	No fix yet	—
Debian 13	python3.13	3.13.5-2+deb13u2	—
Debian 12	pypy3	No fix yet	—
Debian 12	python3.11	3.11.2-6+deb12u9	—

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 26.10	pypy3	No fix yet	—
Ubuntu 26.04 LTS	pypy3	No fix yet	—
Ubuntu 26.04 LTS	python3.14	3.14.4-1ubuntu0.1	USN-8744-1, USN-8509-1
Ubuntu 25.10	pypy3 +2	No fix yet	—
Ubuntu 24.04 LTS	pypy3	No fix yet	—
Ubuntu 24.04 LTS	python3.12	3.12.3-1ubuntu0.15	USN-8744-1, USN-8509-1
Ubuntu 22.04 LTS	pypy3	No fix yet	—
Ubuntu 22.04 LTS	python3.10	3.10.12-1~22.04.16	USN-8744-1, USN-8509-1

Show 6 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Ubuntu 20.04 LTS	pypy3	No fix yet	—
Ubuntu Pro 22.04 LTS	python2.7	2.7.18-13ubuntu1.5+esm9	USN-8744-1
Ubuntu Pro 22.04 LTS	python3.11	3.11.0~rc1-1~22.04.1+esm2	USN-8744-1
Ubuntu Pro 20.04 LTS	python2.7	2.7.18-1~20.04.7+esm10	USN-8744-1
Ubuntu Pro 20.04 LTS	python3.8	3.8.10-0ubuntu1~20.04.18+esm7	USN-8744-1
Ubuntu Pro 20.04 LTS	python3.9	3.9.5-3ubuntu0~20.04.1+esm11	USN-8744-1
Ubuntu Pro 18.04 LTS	python2.7	2.7.17-1~18.04ubuntu1.13+esm15	USN-8744-1
Ubuntu Pro 18.04 LTS	python3.6	3.6.9-1~18.04ubuntu1.13+esm10	USN-8744-1
Ubuntu Pro 18.04 LTS	python3.7	3.7.5-2ubuntu1~18.04.2+esm11	USN-8744-1
Ubuntu Pro 18.04 LTS	python3.8	3.8.0-3ubuntu1~18.04.2+esm11	USN-8744-1
Ubuntu Pro 16.04 LTS	python2.7	2.7.12-1ubuntu0~16.04.18+esm22	USN-8744-1
Ubuntu Pro 16.04 LTS	python3.5	3.5.2-2ubuntu0~16.04.13+esm25	USN-8744-1
Ubuntu Pro 14.04 LTS	python2.7	2.7.6-8ubuntu0.6+esm30	USN-8744-1
Ubuntu Pro 14.04 LTS	python3.4	3.4.3-1ubuntu1~14.04.7+esm21	USN-8744-1
Ubuntu Pro 14.04 LTS	python3.5	3.5.2-2ubuntu0~16.04.4~14.04.1+esm11	USN-8744-1

Red Hat

Security tracker ↗

Release	Package	Fixed in	Advisory
RHEL 10	python3.14 +13	3.14.5-1.el10_2	RHSA-2026:28581
RHEL 9	python3.14 +13	3.14.5-1.el9_8	RHSA-2026:28247

Show 1 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Red Hat Hardened Images 1	python3 +15	3.14.5-2.hum1	RHSA-2026:22952
Red Hat Hardened Images 1	python3.11 +6	3.11.15-4.3.hum1	RHSA-2026:57660, RHSA-2026:33885
Red Hat Hardened Images 1	python3.12 +6	3.12.13-3.2.hum1	RHSA-2026:58420, RHSA-2026:32980
Red Hat Hardened Images 1	python3.13 +8	3.13.14-1.1.hum1	RHSA-2026:32997

AlmaLinux

Errata ↗

Release	Package	Fixed in	Advisory
AlmaLinux 10	python3.14 +13	3.14.5-1.el10_2	ALSA-2026:28581
AlmaLinux 9	python3.14 +13	3.14.5-1.el9_8	ALSA-2026:28247

Rocky Linux

Errata ↗

Release	Package	Fixed in	Advisory
Rocky Linux 10	python3.14	3.14.5-1.el10_2	RLSA-2026:28581
Rocky Linux 9	python3.14	3.14.5-1.el9_8	RLSA-2026:28247

SUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
SLES 15 SP7	python +1	2.7.18-150000.120.1	SUSE-SU-2026:2387-1
SLES 15 SP7	python3 +1	3.6.15-150300.10.129.1	SUSE-SU-2026:4754-1
SLES 15 SP7	python311-core	3.11.15-150600.3.59.3	SUSE-SU-2026:3648-1, SUSE-SU-2026:3104-1
SLES 15 SP6	python3 +1	3.6.15-150300.10.129.1	SUSE-SU-2026:4754-1
SLES 15 SP6	python311 +1	3.11.15-150600.3.59.3	SUSE-SU-2026:3648-1, SUSE-SU-2026:3104-1
SLES 15 SP5	python3 +1	3.6.15-150300.10.129.1	SUSE-SU-2026:4754-1
SLES 15 SP5	python311 +2	3.11.15-150400.9.91.1	SUSE-SU-2026:3132-1
SLES 15 SP4	python3 +1	3.6.15-150300.10.129.1	SUSE-SU-2026:4754-1
SLES 15 SP4	python311 +2	3.11.15-150400.9.91.1	SUSE-SU-2026:3132-1
SLES 12 SP5	python +2	2.7.18-33.79.1	SUSE-SU-2026:2664-1
SLES 12 SP5	python3 +1	3.4.10-25.191.2	SUSE-SU-2026:3601-1
SLES 12 SP5	python36 +1	3.6.15-116.1	SUSE-SU-2026:3855-1

Show 23 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
SLES 3	python311 +1	3.11.15-150600.3.59.3	SUSE-SU-2026:3648-1, SUSE-SU-2026:3104-1
SLES 3	python313 +1	3.13.13-150700.4.50.1	SUSE-SU-2026:2464-1
SLES for SAP 15 SP6	python3 +1	3.6.15-150300.10.129.1	SUSE-SU-2026:4754-1
SLES for SAP 15 SP6	python311 +1	3.11.15-150600.3.59.3	SUSE-SU-2026:3648-1, SUSE-SU-2026:3104-1
SLES for SAP 15 SP5	python3 +1	3.6.15-150300.10.129.1	SUSE-SU-2026:4754-1
SLES for SAP 15 SP5	python311 +2	3.11.15-150400.9.91.1	SUSE-SU-2026:3132-1
SLES for SAP 15 SP4	python3 +1	3.6.15-150300.10.129.1	SUSE-SU-2026:4754-1
SLES for SAP 15 SP4	python311 +2	3.11.15-150400.9.91.1	SUSE-SU-2026:3132-1
SLE Micro 6.2	python3 +2	3.13.14-160000.1.1	SUSE-SU-2026:22959-1
SLE Micro 6.1	python311 +1	3.11.15-slfo.1.1_5.1	SUSE-SU-2026:23191-1
SLE Micro 6.0	python311 +1	3.11.15-5.1	SUSE-SU-2026:23212-1
SLE Micro 5.5	python3 +1	3.6.15-150300.10.129.1	SUSE-SU-2026:4754-1
SLE Micro 5.4	python3 +1	3.6.15-150300.10.129.1	SUSE-SU-2026:4754-1
SLE Micro 5.3	python3 +1	3.6.15-150300.10.129.1	SUSE-SU-2026:4754-1
SLE HPC 15 SP5	python3 +1	3.6.15-150300.10.129.1	SUSE-SU-2026:4754-1
SLE HPC 15 SP5	python311 +2	3.11.15-150400.9.91.1	SUSE-SU-2026:3132-1
SLE HPC 15 SP4	python3 +1	3.6.15-150300.10.129.1	SUSE-SU-2026:4754-1
SLE HPC 15 SP4	python311 +2	3.11.15-150400.9.91.1	SUSE-SU-2026:3132-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy +1	3.11.15-80002.4.15.4	SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-cffi	1.17.1-80002.3.6.5	SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-cryptography	3.3.2-80002.3.6.5	SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-cssselect	1.3.0-80002.3.6.5	SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-editables	0.5-80002.3.3.5	SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-exceptiongroup +1	1.2.2-80002.3.3.5	SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-flit-core	3.12.0-80002.3.3.4	SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-hatch-fancy-pypi-readme +1	25.1.0-80002.3.3.3	SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-hatch-vcs +1	0.5.0-80002.3.3.3	SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-hatchling	1.31.0-80002.3.3.3	SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-idna	3.10-80002.3.6.5	SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-iniconfig	2.1.0-80002.3.3.3	SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-iniconfig-test	2.1.0-80002.3.3.5	SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-jinja2	3.1.6-80002.5.3.5	SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-lxml	6.1.1-80002.3.9.5	SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-packaging	24.2-80002.3.3.3	SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-pip	25.0.1-80002.3.3.3	SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-pyasn1	0.6.3-80002.3.6.3	SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-pyasn1-modules	0.4.2-80002.3.6.3	SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-pyopenssl	23.2.0-80002.3.9.3	SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-pyparsing	3.0.9-80002.3.6.3	SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-requests	2.34.2-80002.4.6.3	SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-tornado	6.3.2-80002.4.12.3	SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-urllib3	2.0.7-80002.3.6.3	SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-websocket-client	1.9.0-80002.3.6.3	SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update	scap-security-guide	0.1.80-80002.3.12.4	SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update	spacecmd	5.2.10-80002.3.15.3	SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update	uyuni-tools	5.2.17-80002.3.15.3	SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update	venv-salt-minion	3006.0-80002.5.22.3	SUSE-SU-2026:4581-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update	mgr-push	5.2.5-70002.3.12.2	SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy +1	3.11.15-70002.4.15.1	SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-cffi	1.17.1-70002.3.6.2	SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-cryptography	3.3.2-70002.3.6.2	SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-cssselect	1.3.0-70002.3.6.2	SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-editables	0.5-70002.3.3.2	SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-exceptiongroup +1	1.2.2-70002.3.3.2	SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-flit-core	3.12.0-70002.3.3.1	SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-hatch-fancy-pypi-readme +1	25.1.0-70002.3.3.1	SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-hatch-vcs +1	0.5.0-70002.3.3.1	SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-hatchling	1.31.0-70002.3.3.1	SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-idna	3.10-70002.3.6.2	SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-iniconfig	2.1.0-70002.3.3.1	SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-iniconfig-test	2.1.0-70002.3.3.2	SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-jinja2	3.1.6-70002.5.3.2	SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-lxml	6.1.1-70002.3.9.1	SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-packaging	24.2-70002.3.3.1	SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-pip	25.0.1-70002.3.3.1	SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-pyasn1	0.6.3-70002.3.6.1	SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-pyasn1-modules	0.4.2-70002.3.6.1	SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-pyopenssl	23.2.0-70002.3.9.1	SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-pyparsing	3.0.9-70002.3.6.1	SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-requests	2.34.2-70002.4.6.1	SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-tornado	6.3.2-70002.4.12.1	SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-urllib3	2.0.7-70002.3.6.1	SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-websocket-client	1.9.0-70002.3.6.1	SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update	spacecmd	5.2.10-70002.3.15.1	SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update	spacewalk-client-tools	5.2.7-70002.3.12.1	SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update	venv-salt-minion	3006.0-70002.5.22.1	SUSE-SU-2026:4583-1
SUSE Multi Linux Manager Tools SLE-Micro-5	uyuni-tools	5.2.17-150002.3.20.1	SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-Micro-5	venv-salt-minion	3006.0-150002.5.22.1	SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15	golang-github-prometheus-prometheus	3.13.2-150002.3.19.1	SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15	grafana	12.4.10-150002.4.27.1	SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15	mgr-push	5.2.5-150002.3.12.1	SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15	spacecmd	5.2.10-150002.3.15.1	SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15	spacewalk-client-tools	5.2.7-150002.3.12.1	SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15	uyuni-tools	5.2.17-150002.3.20.1	SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15	venv-salt-minion	3006.0-150002.5.22.1	SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-12	mgr-push	5.2.5-120002.3.12.1	SUSE-SU-2026:4584-1
SUSE Multi Linux Manager Tools SLE-12	spacecmd	5.2.10-120002.3.15.1	SUSE-SU-2026:4584-1
SUSE Multi Linux Manager Tools SLE-12	spacewalk-client-tools	5.2.7-120002.3.12.1	SUSE-SU-2026:4584-1
SUSE Multi Linux Manager Tools SLE-12	uyuni-tools	5.2.17-120002.3.18.1	SUSE-SU-2026:4584-1
SUSE Multi Linux Manager Tools SLE-12	venv-salt-minion	3006.0-120002.5.22.2	SUSE-SU-2026:4584-1
SUSE Multi Linux Manager Tools RES-7	mgr-push	5.2.5-70002.3.12.2	SUSE-SU-2026:4583-1
SUSE Multi Linux Manager Tools RES-7	spacecmd	5.2.10-70002.3.15.1	SUSE-SU-2026:4583-1
SUSE Multi Linux Manager Tools RES-7	spacewalk-client-tools	5.2.7-70002.3.12.1	SUSE-SU-2026:4583-1
SUSE Multi Linux Manager Tools RES-7	venv-salt-minion	3006.0-70002.5.22.1	SUSE-SU-2026:4583-1
SUSE Multi Linux Manager Tools EL-10	scap-security-guide	0.1.80-100002.1.6.1	SUSE-SU-2026:4580-1
SUSE Multi Linux Manager Tools EL-10	spacecmd	5.2.10-100002.1.9.1	SUSE-SU-2026:4580-1
SUSE Multi Linux Manager Tools EL-10	uyuni-tools	5.2.17-100002.1.9.1	SUSE-SU-2026:4580-1
SUSE Multi Linux Manager Tools EL-10	venv-salt-minion	3006.0-100002.1.13.1	SUSE-SU-2026:4580-1
SUSE Multi Linux Manager Tools EL-9	scap-security-guide	0.1.80-90002.3.12.1	SUSE-SU-2026:4582-1
SUSE Multi Linux Manager Tools EL-9	spacecmd	5.2.10-90002.3.15.1	SUSE-SU-2026:4582-1
SUSE Multi Linux Manager Tools EL-9	uyuni-tools	5.2.17-90002.3.15.1	SUSE-SU-2026:4582-1
SUSE Multi Linux Manager Tools EL-9	venv-salt-minion	3006.0-90002.5.22.1	SUSE-SU-2026:4582-1
SUSE Multi Linux Manager Tools EL-8	scap-security-guide	0.1.80-80002.3.12.4	SUSE-SU-2026:4581-1
SUSE Multi Linux Manager Tools EL-8	spacecmd	5.2.10-80002.3.15.3	SUSE-SU-2026:4581-1
SUSE Multi Linux Manager Tools EL-8	uyuni-tools	5.2.17-80002.3.15.3	SUSE-SU-2026:4581-1
SUSE Multi Linux Manager Tools EL-8	venv-salt-minion	3006.0-80002.5.22.3	SUSE-SU-2026:4581-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy +1	3.11.15-100002.1.9.1	SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-cffi	1.17.1-100002.1.6.2	SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-cryptography	3.3.2-100002.1.6.2	SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-cssselect	1.3.0-100002.1.6.2	SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-editables	0.5-100002.1.6.2	SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-exceptiongroup +1	1.2.2-100002.1.6.2	SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-flit-core	3.12.0-100002.1.6.1	SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-hatch-fancy-pypi-readme +1	25.1.0-100002.1.6.1	SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-hatch-vcs +1	0.5.0-100002.1.6.1	SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-hatchling	1.31.0-100002.1.6.1	SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-idna	3.10-100002.1.6.2	SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-iniconfig	2.1.0-100002.1.6.1	SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-iniconfig-test	2.1.0-100002.1.6.2	SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-jinja2	3.1.6-100002.1.6.2	SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-lxml	6.1.1-100002.1.9.2	SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-packaging	24.2-100002.1.6.1	SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-pip	25.0.1-100002.1.6.1	SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-pyasn1	0.6.3-100002.1.6.1	SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-pyasn1-modules	0.4.2-100002.1.6.1	SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-pyopenssl	23.2.0-100002.1.9.1	SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-pyparsing	3.0.9-100002.1.6.1	SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-requests	2.34.2-100002.1.9.1	SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-tornado	6.3.2-100002.1.9.1	SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-urllib3	2.0.7-100002.1.9.1	SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-websocket-client	1.9.0-100002.1.6.1	SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update	scap-security-guide	0.1.80-100002.1.6.1	SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update	spacecmd	5.2.10-100002.1.9.1	SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update	uyuni-tools	5.2.17-100002.1.9.1	SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update	venv-salt-minion	3006.0-100002.1.13.1	SUSE-SU-2026:4580-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy +1	3.11.15-90002.4.15.1	SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-cffi	1.17.1-90002.3.6.2	SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-cryptography	3.3.2-90002.3.6.2	SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-cssselect	1.3.0-90002.3.6.2	SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-editables	0.5-90002.3.3.2	SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-exceptiongroup +1	1.2.2-90002.3.3.2	SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-flit-core	3.12.0-90002.3.3.1	SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-hatch-fancy-pypi-readme +1	25.1.0-90002.3.3.1	SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-hatch-vcs +1	0.5.0-90002.3.3.1	SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-hatchling	1.31.0-90002.3.3.1	SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-idna	3.10-90002.3.6.2	SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-iniconfig	2.1.0-90002.3.3.1	SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-iniconfig-test	2.1.0-90002.3.3.2	SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-jinja2	3.1.6-90002.5.3.2	SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-lxml	6.1.1-90002.3.9.2	SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-packaging	24.2-90002.3.3.1	SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-pip	25.0.1-90002.3.3.1	SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-pyasn1	0.6.3-90002.3.6.1	SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-pyasn1-modules	0.4.2-90002.3.6.1	SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-pyopenssl	23.2.0-90002.3.9.1	SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-pyparsing	3.0.9-90002.3.6.1	SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-requests	2.34.2-90002.4.6.1	SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-tornado	6.3.2-90002.4.12.1	SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-urllib3	2.0.7-90002.3.6.1	SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update	saltbundlepy-websocket-client	1.9.0-90002.3.6.1	SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update	scap-security-guide	0.1.80-90002.3.12.1	SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update	spacecmd	5.2.10-90002.3.15.1	SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update	uyuni-tools	5.2.17-90002.3.15.1	SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update	venv-salt-minion	3006.0-90002.5.22.1	SUSE-SU-2026:4582-1

openSUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
openSUSE Tumbleweed	python310	3.10.20-6.1	openSUSE-SU-2026:10647-1
openSUSE Tumbleweed	python311	3.11.15-6.1	openSUSE-SU-2026:11068-1
openSUSE Tumbleweed	python312	3.12.13-6.1	openSUSE-SU-2026:11100-1
openSUSE Tumbleweed	python313	3.13.13-2.1	openSUSE-SU-2026:10667-1
openSUSE Tumbleweed	python314	3.14.6-1.1	openSUSE-SU-2026:11181-1
openSUSE Tumbleweed	python315	3.15.0~a8-3.1	openSUSE-SU-2026:10648-1
openSUSE Leap 16.0	python3 +5	3.13.14-160000.1.1	openSUSE-SU-2026:21459-1

Amazon Linux

Release	Package	Fixed in	Advisory
Amazon Linux 2023	python3 +7	3.9.25-1.amzn2023.0.6	ALAS2023-2026-1785
Amazon Linux 2023	python3.11 +6	3.11.15-1.amzn2023.0.2	ALAS2023-2026-1832
Amazon Linux 2023	python3.12 +6	3.12.13-2.amzn2023.0.2	ALAS2023-2026-1821
Amazon Linux 2023	python3.13 +8	3.13.13-1.amzn2023.0.3	ALAS2023-2026-1786
Amazon Linux 2023	python3.14 +13	3.14.5-1.amzn2023.0.1	ALAS2023-2026-1774
Amazon Linux 2	python +6	2.7.18-1.amzn2.0.20	ALAS2-2026-3366
Amazon Linux 2	python3 +6	3.7.16-1.amzn2.0.28	ALAS2-2026-3826

Azure Linux

Release	Package	Fixed in	Advisory
Azure Linux 3	python3 +1	No fix yet	—

Oracle Linux

Release	Package	Fixed in	Advisory
Oracle Linux 10	python3.14 +13	3.14.5-1.el10_2	ELSA-2026-28581
Oracle Linux 9	python3.14 +13	3.14.5-1.el9_8	ELSA-2026-28247

Wolfi

Release	Package	Fixed in	Advisory
Wolfi rolling	python-3.10 +1	No fix yet	—
Wolfi rolling	python-3.12	3.12.16-r2	—
Wolfi rolling	python-3.13	3.13.13-r3	—
Wolfi rolling	python-3.14	3.14.4-r4	—

Advisories 50

WID-SEC-2026-2455 Oracle Solaris Drittanbieterkomponenten: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 12, 2026
SSA-457936 SSA-457936: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.7 Siemens ProductCERT · Nov 10, 2026
ALSA-2026:28247 Important: python3.14 security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
ALSA-2026:28581 Important: python3.14 security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
SUSE-SU-2026:4754-1 Security update for python3 SUSE / openSUSE Security Updates · Oct 21, 2026
RHSA-2026:28581 Red Hat Security Advisory: python3.14 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2026:28247 Red Hat Security Advisory: python3.14 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 17, 2026
SUSE-SU-2026:4583-1 Security update 5.2.1 for Multi-Linux Manager Client Tools SUSE / openSUSE Security Updates · Oct 8, 2026
SUSE-SU-2026:4585-1 Security update 5.2.1 for Multi-Linux Manager Client Tools SUSE / openSUSE Security Updates · Oct 8, 2026
SUSE-SU-2026:4580-1 Security update 5.2.1 for Multi-Linux Manager Client Tools SUSE / openSUSE Security Updates · Oct 8, 2026
SUSE-SU-2026:4584-1 Security update 5.2.1 for Multi-Linux Manager Client Tools SUSE / openSUSE Security Updates · Oct 8, 2026
SUSE-SU-2026:4581-1 Security update 5.2.1 for Multi-Linux Manager Client Tools SUSE / openSUSE Security Updates · Oct 8, 2026
SUSE-SU-2026:4582-1 Security update 5.2.1 for Multi-Linux Manager Client Tools SUSE / openSUSE Security Updates · Oct 8, 2026
RHSA-2026:57660 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update Red Hat Security Advisories (RHSA) · Oct 6, 2026
RHSA-2026:58420 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update Red Hat Security Advisories (RHSA) · Oct 6, 2026
RHSA-2026:32980 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update Red Hat Security Advisories (RHSA) · Oct 6, 2026
RHSA-2026:32997 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 6, 2026
RHSA-2026:22952 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 6, 2026
RHSA-2026:33885 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update Red Hat Security Advisories (RHSA) · Oct 6, 2026
USN-8744-1 python2.7, python3.4, python3.5, python3.6, python3.7, python3.8, python3.9, python3.10, python3.11, python3.12, python3.14 vulnerabilities Ubuntu Security Notices (USN) · Sep 15, 2026
SUSE-SU-2026:3855-1 Security update for python36 SUSE / openSUSE Security Updates · Sep 4, 2026
SUSE-SU-2026:23212-1 Security update for python311 SUSE / openSUSE Security Updates · Aug 26, 2026
SUSE-SU-2026:23191-1 Security update for python311 SUSE / openSUSE Security Updates · Aug 26, 2026
SUSE-SU-2026:3648-1 Security update for python311 SUSE / openSUSE Security Updates · Aug 21, 2026
SUSE-SU-2026:3601-1 Security update for python3 SUSE / openSUSE Security Updates · Aug 13, 2026
SUSE-SU-2026:22959-1 Security update for python313, python3 SUSE / openSUSE Security Updates · Aug 4, 2026
openSUSE-SU-2026:21459-1 Security update for python313, python3 SUSE / openSUSE Security Updates · Jul 30, 2026
SUSE-SU-2026:3132-1 Security update for python311 SUSE / openSUSE Security Updates · Jul 21, 2026
ALAS2-2026-3826 Important: python3 security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Jul 20, 2026
SUSE-SU-2026:3104-1 Security update for python311 SUSE / openSUSE Security Updates · Jul 18, 2026
ELSA-2026-28581 Important: python3.14 security, bug fix, and enhancement update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · Jul 16, 2026
USN-8509-1 python3.10, python3.12, python3.14 vulnerabilities Ubuntu Security Notices (USN) · Jul 6, 2026
openSUSE-SU-2026:11181-1 python314-3.14.6-1.1 on GA media SUSE / openSUSE Security Updates · Jul 3, 2026
SUSE-SU-2026:2664-1 Security update for python, python-base, python-doc SUSE / openSUSE Security Updates · Jun 27, 2026
RLSA-2026:28581 Important: python3.14 security, bug fix, and enhancement update Rocky Linux Security Advisories · Jun 27, 2026
ELSA-2026-28247 Important: python3.14 security, bug fix, and enhancement update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Jun 25, 2026
RLSA-2026:28247 Important: python3.14 security, bug fix, and enhancement update Rocky Linux Security Advisories · Jun 24, 2026
openSUSE-SU-2026:11100-1 python312-3.12.13-6.1 on GA media SUSE / openSUSE Security Updates · Jun 24, 2026
ALAS2-2026-3366 Moderate: python security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Jun 22, 2026
ALAS2023-2026-1832 Moderate: python3.11 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Jun 22, 2026
openSUSE-SU-2026:11068-1 python311-3.11.15-6.1 on GA media SUSE / openSUSE Security Updates · Jun 20, 2026
SUSE-SU-2026:2464-1 Security update for python313 SUSE / openSUSE Security Updates · Jun 20, 2026
SUSE-SU-2026:2387-1 Security update for python SUSE / openSUSE Security Updates · Jun 13, 2026
ALAS2023-2026-1774 Moderate: python3.14 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Jun 8, 2026
ALAS2023-2026-1785 Moderate: python3.9 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Jun 8, 2026
ALAS2023-2026-1786 Moderate: python3.13 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Jun 8, 2026
ALAS2023-2026-1821 Moderate: python3.12 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Jun 8, 2026
openSUSE-SU-2026:10667-1 python313-3.13.13-2.1 on GA media SUSE / openSUSE Security Updates · May 2, 2026
openSUSE-SU-2026:10648-1 python315-3.15.0~a8-3.1 on GA media SUSE / openSUSE Security Updates · Apr 29, 2026
openSUSE-SU-2026:10647-1 python310-3.10.20-6.1 on GA media SUSE / openSUSE Security Updates · Apr 29, 2026

CNA	v4.0	2.1
EUVD	v4.0	2.1

BaseCookie.js_output() does not neutralize embedded characters

Description

Affected products

Fixed in Linux distributions

Debian

Ubuntu

Red Hat

AlmaLinux

Rocky Linux

SUSE

openSUSE

Amazon Linux

Azure Linux

Oracle Linux

Wolfi

Advisories 50

References