CVE-2026-103995

CVSS 2.0 (low) · published 2026-10-27

Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents.

Weakness: CWE-444

Source: NVD CVE-2026-103995

References

• https://github.com/python/cpython/commit/2eb2af805c156ca52b316bb4ced5e0ab3971d0ae
• https://github.com/python/cpython/commit/9f52b443c002cccfb54bda0706a9276b6b4a109d
• https://github.com/python/cpython/issues/150751
• https://github.com/python/cpython/pull/150752

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.