Msrc Azl3 Python3 3.12.9-4 On Azure Linux 3.0 vulnerabilities
4 known vulnerabilities affecting msrc/azl3_python3_3.12.9-4_on_azure_linux_3.0.
Total CVEs
4
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH2MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2025-8291MEDIUMCVSS 4.32025-10-14
CVE-2025-8291 [MEDIUM] ZIP64 End of Central Directory (EOCD) Locator record offset not checked
ZIP64 End of Central Directory (EOCD) Locator record offset not checked
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open sour
msrc
CVE-2025-59375HIGHCVSS 7.52025-09-09
CVE-2025-59375 [HIGH] CWE-770 libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.
libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our cu
msrc
CVE-2025-8194HIGHCVSS 7.52025-07-08
CVE-2025-8194 [HIGH] CWE-835 Tarfile infinite loop during parsing with negative member offset
Tarfile infinite loop during parsing with negative member offset
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libra
msrc
CVE-2023-27043MEDIUMCVSS 5.32023-04-11
CVE-2023-27043 [MEDIUM] CWE-20 The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In s
The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in w
msrc