Zero Day MonitorZDM

← Back to list

EST

PRE-CVEPATCHED

python software foundation · python

Python 3.15.1, 3.14.9 and 3.13.17 Security Releases

56% confidence

Description

Expedited security releases of Python 3.15.1, 3.14.9, and 3.13.17 that upgrade bundled pip to version 26.2.2 and certifi to 2026.10.19 to address the eMudhra / emSign CA certificate security incident. Additionally includes a fix for a possible hang on macOS 27.0 in tkinter applications.

Affected Products

Vendor	Product	Versions
python software foundation	python	< 3.15.1, < 3.14.9, < 3.13.17

Related News (1 articles)

Tier C

oss-security1d ago

Python 3.15.1, 3.14.9 and 3.13.17 are out

→ No new info (linked only)

Discussion (0)

Loading…

CISA KEV❌ No

Actively exploited❌ No

Patch available

3.15.13.14.93.13.17

PublishedOct 22, 2026

Last enriched1d ago

Tags

certificateemudhraemsignpipcertifitkinter

Trending Score18

Source articles1

Independent1

Info Completeness6/14

Missing: cve_id, cvss, epss, cwe, kev, exploit, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

HIGHCVE-2026-112390

Pillow: Infinite loop in MIC n_frames when the embedded TIFF

HIGHCVE-2026-112894

Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)

MEDIUMCVE-2026-112899

Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit

NONECVE-2026-96643

Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time

HIGHCVE-2026-96644

Pillow is a Python imaging library. Prior to 13.0.0 on Windows, src/PIL/WmfImagePlugin.py passes unchecked 32-bit WMF or EMF dimensions to the native drawwmf handler in src/display.c. The handler size

Pin to Dashboard

Verification

State: reported

Confidence: 56%

Vulnerability Timeline

CVE Published

Oct 22, 2026

Discovered by ZDM

Oct 22, 2026

Patch Available

Oct 22, 2026