Lucene search
K

4 matches found

OSV
OSV
added 2026/01/26 2:49 p.m.3 views

BIT-PYTHON-MIN-2025-12781 base64.b64decode() always accepts "+/" characters, despite setting altchars

When passing data to the b64decode, standardb64decode, and urlsafeb64decode functions in the "base64" module the characters "+/" will always be accepted, regardless of the value of "altchars" parameter, typically used to establish an "alternative base64 alphabet" such as the URL safe alphabet. Th...

6.3CVSS5.8AI score0.00047EPSS
Exploits1References9
RedhatCVE
RedhatCVE
added 2026/01/22 8:22 p.m.2 views

CVE-2025-12781

A flaw was found in the base64 module in the Python standard library. The b64decode, standardb64decode and urlsafeb64decode functions will always accept the '+' and '/' characters even when an alternative base64 alphabet is specified via the altchars parameter that excludes them. This input...

6.3CVSS5.5AI score0.00047EPSS
Exploits1References6
OSV
OSV
added 2026/01/21 8:16 p.m.3 views

DEBIAN-CVE-2025-12781

When passing data to the b64decode, standardb64decode, and urlsafeb64decode functions in the "base64" module the characters "+/" will always be accepted, regardless of the value of "altchars" parameter, typically used to establish an "alternative base64 alphabet" such as the URL safe alphabet. Th...

5.3CVSS5.3AI score0.00047EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2026/01/21 8:16 p.m.3 views

CVE-2025-12781

When passing data to the b64decode, standardb64decode, and urlsafeb64decode functions in the "base64" module the characters "+/" will always be accepted, regardless of the value of "altchars" parameter, typically used to establish an "alternative base64 alphabet" such as the URL safe alphabet. Th...

6.3CVSS5.9AI score0.00047EPSS
Exploits1References3
Rows per page
Query Builder