CVE-2024-0450

creationtimestamp| type| source ---|---|--- 2024-03-19 17:26:53+00:00| seen| https://t.me/ctinow/211729 2025-04-11 22:51:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11505 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0395/...

AZL-36894 CVE-2024-0450 affecting package python3 for versions less than 3.9.19-1

An issue was found in the CPython zipfile module affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior. The zipfile module is vulnerable to “quoted-overlap” zip-bombs which exploit the zip format to create a zip-bomb with a high compression ratio. The fixed versions of CPython...