Critical Security Update for Python 3.12: Addressing Multiple Vulnerabilities
Summary
RHSA-2026:77028: Red Hat Security Advisory: python3.12 security update. Affects python3.12 versions < 0:3.12.15-2.el8_10. Fixed in 0:3.12.15-2.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Python 3.12 is a widely used programming language that supports various programming paradigms, including procedural, object-oriented, and functional programming. It is known for its simplicity and readability, making it a popular choice among developers. However, recent vulnerabilities have been identified that could compromise the security of applications relying on this version.
Vulnerability Detail
The vulnerabilities identified in Python 3.12, specifically CVE-2026-19445 and CVE-2026-19553, stem from flaws in the language's handling of certain operations. These vulnerabilities could allow attackers to execute arbitrary code, potentially leading to unauthorized access to sensitive data or system resources. The severity of these vulnerabilities is underscored by a CVSS score of 8.1, indicating a high risk to affected systems.
How To Fix
Minimum fixed version
0:3.12.15-2.el8_10
This is the first release that contains the fix.
sudo dnf update python3.12Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit the execution of untrusted code and ensure that their applications do not expose sensitive functionalities that could be exploited. However, this is not a substitute for applying the necessary updates.
Conclusion
The vulnerabilities in Python 3.12 pose significant risks to applications using this version. It is crucial to apply the security update to mitigate these risks. Regular monitoring and proactive management of dependencies can further enhance security.
See every vulnerability recorded for python3.12 →
FAQ
The vulnerabilities are identified as CVE-2026-19445 and CVE-2026-19553, which could allow arbitrary code execution.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by these vulnerabilities without requiring any signup.
The CVSS score for these vulnerabilities is 8.1, indicating a high severity level.
Yes, Vulert can monitor and alert you in real-time for open-source vulnerabilities in your software using just a manifest file like package-lock.json.
If immediate updates are not possible, consider implementing security measures to limit exposure and monitor for any unusual activity.
Related vulnerabilities
Recent vulnerabilities recorded for python3.12.
