Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2026-11972 tarfile opened in streaming mode mishandles EOF

🗓️ 23 Jun 2026 22:02:45Reported by GoogleType 
osv
 osv🔗 osv.dev👁 1 Views

CVE-2026-11972: Tarfile streaming mode mishandles EOF, causing exponential archive parsing slowdowns.

Related
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB		CVE-2026-11972
23 Jun 202622:02
–attackerkb
Chainguard		CVE-2026-11972 vulnerabilities
14 Jul 202614:17
–cgr
Circl		CVE-2026-11972
24 Jun 202600:00
–circl
CVE		CVE-2026-11972
23 Jun 202622:02
–cve
Cvelist		CVE-2026-11972 tarfile opened in streaming mode mishandles EOF
23 Jun 202622:02
–cvelist
Debian CVE		CVE-2026-11972
23 Jun 202622:02
–debiancve
EUVD		EUVD-2026-38630
24 Jun 202600:30
–euvd
NVD		CVE-2026-11972
23 Jun 202623:16
–nvd
OSV		BELL-CVE-2026-11972
26 Jun 202606:12
–osv
OSV		BIT-LIBPYTHON-2026-11972 tarfile opened in streaming mode mishandles EOF
29 Jun 202611:10
–osv
Rows per page
SourceLink
githubwww.github.com/CVEProject/cvelistV5/tree/main/cves/2026/11xxx/CVE-2026-11972.json
mailwww.mail.python.org/archives/list/[email protected]/thread/AXPSKKTSRKXTTJULW3XSIC74WZNAAPPB/
nvdwww.nvd.nist.gov/vuln/detail/CVE-2026-11972
githubwww.github.com/python/cpython/issues/151981
githubwww.github.com/python/cpython/commit/3f031d431f80668e14f3bc066bbf4369cd9281b9
githubwww.github.com/python/cpython/commit/4ce6bf7c8aa7725828a38981c306f214c1f29365
githubwww.github.com/python/cpython/commit/7f0dc59c9a70f8f3b4da33d7c4a2ba552a7acc21
githubwww.github.com/python/cpython/commit/e86666c9dd256d52d0fbef6feb1ea4a51768fdec
githubwww.github.com/python/cpython/commit/eb63c0f94dfcbea7fda8eab6213818e134d67192
githubwww.github.com/python/cpython/commit/f50bf13566189c8d0ce5a814f33eff3d89951896
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
14 Jul 2026 12:29Current
5.9Medium risk
Vulners AI Score5.9
CVSS 48.2
EPSS0.00433
tarfile modulestreaming modeEOF handlingparsing slowdownsecurity vulnerability
1