Critical Security Update for Python 3.12: Addressing Multiple Vulnerabilities
Summary
RHSA-2026:19177: Red Hat Security Advisory: python3.12 security update. Affects python3.12 versions < 0:3.12.13-2.el9_8. Fixed in 0:3.12.13-2.el9_8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Python 3.12 is a widely used programming language that supports various programming paradigms, including procedural, object-oriented, and functional programming. It is known for its readability and simplicity, making it a popular choice among developers. However, recent vulnerabilities have been identified that could potentially compromise the security of applications utilizing this version, necessitating immediate attention and remediation.
Vulnerability Detail
The vulnerabilities affecting Python 3.12 include multiple CVEs such as CVE-2025-13837 and CVE-2026-0672, which could lead to unauthorized access, data breaches, and potential system compromise. These vulnerabilities arise from flaws in the language's handling of certain operations and libraries, allowing attackers to exploit them for malicious purposes. The ramifications of these vulnerabilities are severe, with a CVSS score of 8.1 indicating a high level of risk to affected systems.
How To Fix
Minimum fixed version
0:3.12.13-2.el9_8
This is the first release that contains the fix.
sudo dnf update python3.12Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit the exposure of their applications by implementing strict input validation and sanitization to mitigate the risk of exploitation until the update is applied.
Conclusion
In summary, Python 3.12 has critical vulnerabilities that require immediate attention. Updating to the patched version is essential to secure applications and prevent potential exploitation. Utilizing tools like Vulert can help monitor and manage vulnerabilities effectively.
See every vulnerability recorded for python3.12 →
FAQ
The CVSS score of the vulnerabilities is 8.1, indicating a high level of risk.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by these vulnerabilities without requiring any signup.
Failure to address these vulnerabilities could lead to unauthorized access, data breaches, and potential system compromise.
Yes, Vulert can monitor and alert you in real-time for open-source vulnerabilities using just a manifest file like package-lock.json.
If immediate updating is not possible, implement strict input validation and sanitization as a temporary measure to reduce risk.
Related vulnerabilities
Recent vulnerabilities recorded for python3.12.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
