Critical Security Update for Python 3.12: Addressing Multiple Vulnerabilities
Summary
RHSA-2026:19064: Red Hat Security Advisory: python3.12 security update. Affects python-unversioned-command versions < 0:3.12.13-2.el10_2. Fixed in 0:3.12.13-2.el10_2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Python 3.12 is a widely used programming language that supports various programming paradigms, including procedural, object-oriented, and functional programming. It is known for its simplicity and readability, making it a popular choice among developers. However, recent security advisories have highlighted vulnerabilities that could potentially compromise the integrity and security of applications built using this version. The vulnerabilities affect several packages associated with Python 3.12, including python-unversioned-command, python3, and python3-devel, among others.
Vulnerability Detail
The vulnerabilities identified in Python 3.12 stem from multiple sources, including improper input validation and insufficient access controls. These issues could allow an attacker to execute arbitrary code, leading to unauthorized access to sensitive data or system resources. The vulnerabilities are tracked under several CVEs, including CVE-2025-13837 and CVE-2026-0672, with a CVSS score of 8.1, indicating a high severity level. If exploited, these vulnerabilities could have severe ramifications for applications relying on Python 3.12, potentially leading to data breaches or system compromises.
How To Fix
Minimum fixed version
0:3.12.13-2.el10_2
This is the first release that contains the fix.
sudo dnf update python-unversioned-commandTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can restrict access to the affected applications and monitor for unusual activity. Additionally, consider implementing application-level security measures, such as input validation and sanitization, to reduce the risk of exploitation until the packages can be updated.
Conclusion
In summary, the recent vulnerabilities identified in Python 3.12 pose significant risks to applications utilizing this version. It is crucial for users to update their packages to the patched version to mitigate these risks. Additionally, employing temporary workarounds and monitoring tools like Vulert can help safeguard applications until updates are applied.
See every vulnerability recorded for python-unversioned-command →
FAQ
The CVSS score of the vulnerabilities is 8.1, indicating a high severity level.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to check if your application is affected without requiring signup.
The main packages affected include python-unversioned-command, python3, python3-devel, python3-libs, and others associated with Python 3.12.
If immediate updates are not possible, implement security measures such as restricting access to the affected applications and monitoring for unusual activity.
More information can be found in the Red Hat Security Advisory and the CVEs listed, such as CVE-2025-13837 and CVE-2026-0672.
Related vulnerabilities
Recent vulnerabilities recorded for python-unversioned-command.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
