CVE-2026-2297

CVE-2026-2297 concerns CPython’s import system: the SourcelessFileLoader (legacy .pyc handling) is misimplemented in FileLoader, causing it not to use io.open_code() to read .pyc files. As a result, sys.audit events for this audit point do not fire. The description notes an audit-impacting behavi...