CVE-2023-38898

An issue in Python cpython v.3.7 allows an attacker to obtain sensitive information via the asyncio.swapcurrenttask component. NOTE: this is disputed by the vendor because 1 neither 3.7 nor any other release is affected it is a bug in some 3.12 pre-releases; 2 there are no common scenarios in whi...

CVE-2023-38898

CVE-2023-38898 involves CPython’s asyncio._swap_current_task in Python 3.7 and could allow an attacker to obtain sensitive information. The vendor disputes that 3.7 (or any release) is affected and notes no common exploit scenarios; multiple OSV entries and vendor advisories corroborate the claim...