CVE-2026-18503
Fixed in a distro release EPSS <1%CVSS 2.4
Attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU when applications pass unbounded input to csv.Sniffer.sniff().
Products: Python Software Foundation CPython
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2023 | python3.11 | 3.11.16-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.11-debug | 3.11.16-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.11-devel | 3.11.16-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.11-idle | 3.11.16-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.11-libs | 3.11.16-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.11-test | 3.11.16-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.11-tkinter | 3.11.16-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.12 | 3.12.14-2.amzn2023.0.1 |
| Amazon Linux 2023 | python3.12-debug | 3.12.14-2.amzn2023.0.1 |
| Amazon Linux 2023 | python3.12-devel | 3.12.14-2.amzn2023.0.1 |
| Amazon Linux 2023 | python3.12-idle | 3.12.14-2.amzn2023.0.1 |
| Amazon Linux 2023 | python3.12-libs | 3.12.14-2.amzn2023.0.1 |
| Amazon Linux 2023 | python3.12-test | 3.12.14-2.amzn2023.0.1 |
| Amazon Linux 2023 | python3.12-tkinter | 3.12.14-2.amzn2023.0.1 |
| Amazon Linux 2023 | python3.13 | 3.13.15-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.13-debug | 3.13.15-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.13-devel | 3.13.15-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.13-freethreading | 3.13.15-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.13-freethreading-debug | 3.13.15-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.13-idle | 3.13.15-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.13-libs | 3.13.15-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.13-test | 3.13.15-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.13-tkinter | 3.13.15-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.14 | 3.14.7-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.14-debug | 3.14.7-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.14-devel | 3.14.7-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.14-freethreading | 3.14.7-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.14-freethreading-debug | 3.14.7-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.14-freethreading-devel | 3.14.7-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.14-freethreading-idle | 3.14.7-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.14-freethreading-libs | 3.14.7-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.14-freethreading-test | 3.14.7-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.14-freethreading-tkinter | 3.14.7-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.14-idle | 3.14.7-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.14-libs | 3.14.7-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.14-test | 3.14.7-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.14-tkinter | 3.14.7-1.amzn2023.0.1 |
| Chainguard | python-3.10 | 3.10.21-r0 |
| Chainguard | python-3.11 | 3.11.16-r0 |
| Chainguard | python-3.12 | 3.12.14-r0 |
| Debian 12 | pypy3 | no fix |
| Debian 12 | python3.11 | 3.11.2-6+deb12u9 |
| Debian 13 | pypy3 | no fix |
| Debian 13 | python3.13 | no fix |
| Debian 14 | pypy3 | no fix |
| Debian 14 | python3.13 | 3.13.15-1 |
| Debian 14 | python3.14 | 3.14.7-1 |
| Debian 14 | python3.15 | 3.15.0~rc1-1 |
| Red Hat hummingbird 1 | python-unversioned-command | 0:3.14.7-1.hum1 |
| Red Hat hummingbird 1 | python3 | 0:3.14.7-1.hum1 |
| Red Hat hummingbird 1 | python3-debug | 0:3.14.7-1.hum1 |
| Red Hat hummingbird 1 | python3-devel | 0:3.14.7-1.hum1 |
| Red Hat hummingbird 1 | python3-idle | 0:3.14.7-1.hum1 |
| Red Hat hummingbird 1 | python3-libs | 0:3.14.7-1.hum1 |
| Red Hat hummingbird 1 | python3-test | 0:3.14.7-1.hum1 |
| Red Hat hummingbird 1 | python3-tkinter | 0:3.14.7-1.hum1 |
| Red Hat hummingbird 1 | python3.10 | 0:3.10.21-1.hum1 |
| Red Hat hummingbird 1 | python3.10-debug | 0:3.10.21-1.hum1 |
| Red Hat hummingbird 1 | python3.10-devel | 0:3.10.21-1.hum1 |
| Red Hat hummingbird 1 | python3.10-idle | 0:3.10.21-1.hum1 |
| Red Hat hummingbird 1 | python3.10-libs | 0:3.10.21-1.hum1 |
| Red Hat hummingbird 1 | python3.10-test | 0:3.10.21-1.hum1 |
| Red Hat hummingbird 1 | python3.10-tkinter | 0:3.10.21-1.hum1 |
| Red Hat hummingbird 1 | python3.11 | 0:3.11.16-1.hum1 |
| Red Hat hummingbird 1 | python3.11-debug | 0:3.11.16-1.hum1 |
| Red Hat hummingbird 1 | python3.11-devel | 0:3.11.16-1.hum1 |
| Red Hat hummingbird 1 | python3.11-idle | 0:3.11.16-1.hum1 |
| Red Hat hummingbird 1 | python3.11-libs | 0:3.11.16-1.hum1 |
| Red Hat hummingbird 1 | python3.11-test | 0:3.11.16-1.hum1 |
| Red Hat hummingbird 1 | python3.11-tkinter | 0:3.11.16-1.hum1 |
| Red Hat hummingbird 1 | python3.12 | 0:3.12.14-1.hum1 |
| Red Hat hummingbird 1 | python3.12-debug | 0:3.12.14-1.hum1 |
| Red Hat hummingbird 1 | python3.12-devel | 0:3.12.14-1.hum1 |
| Red Hat hummingbird 1 | python3.12-idle | 0:3.12.14-1.hum1 |
| Red Hat hummingbird 1 | python3.12-libs | 0:3.12.14-1.hum1 |
| Red Hat hummingbird 1 | python3.12-test | 0:3.12.14-1.hum1 |
| Red Hat hummingbird 1 | python3.12-tkinter | 0:3.12.14-1.hum1 |
| Red Hat hummingbird 1 | python3.13 | 0:3.13.15-1.hum1 |
| Red Hat hummingbird 1 | python3.13-debug | 0:3.13.15-1.hum1 |
| Red Hat hummingbird 1 | python3.13-devel | 0:3.13.15-1.hum1 |
| Red Hat hummingbird 1 | python3.13-freethreading | 0:3.13.15-1.hum1 |
| Red Hat hummingbird 1 | python3.13-freethreading-debug | 0:3.13.15-1.hum1 |
| Red Hat hummingbird 1 | python3.13-idle | 0:3.13.15-1.hum1 |
| Red Hat hummingbird 1 | python3.13-libs | 0:3.13.15-1.hum1 |
| Red Hat hummingbird 1 | python3.13-test | 0:3.13.15-1.hum1 |
| Red Hat hummingbird 1 | python3.13-tkinter | 0:3.13.15-1.hum1 |
| Red Hat hummingbird 1 | python3.14 | 0:3.14.7-1.hum1 |
| Red Hat hummingbird 1 | python3.14-freethreading | 0:3.14.7-1.hum1 |
| Red Hat hummingbird 1 | python3.14-freethreading-debug | 0:3.14.7-1.hum1 |
| Red Hat hummingbird 1 | python3.14-freethreading-devel | 0:3.14.7-1.hum1 |
| Red Hat hummingbird 1 | python3.14-freethreading-idle | 0:3.14.7-1.hum1 |
| Red Hat hummingbird 1 | python3.14-freethreading-libs | 0:3.14.7-1.hum1 |
| Red Hat hummingbird 1 | python3.14-freethreading-test | 0:3.14.7-1.hum1 |
| Red Hat hummingbird 1 | python3.14-freethreading-tkinter | 0:3.14.7-1.hum1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | python3 | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | python3-core | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | python3 | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | python3-core | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | python3 | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | python3-core | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | python3 | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | python3-core | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Micro 5.3 | python3 | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Micro 5.3 | python3-core | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Micro 5.4 | python3 | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Micro 5.4 | python3-core | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Micro 5.5 | python3 | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Micro 5.5 | python3-core | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | python3 | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | python3-core | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP7 | python3-core | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP7 | python | 2.7.18-150000.133.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP7 | python-base | 2.7.18-150000.133.1 |
| SUSE Linux Enterprise Module for Python 3 15 SP7 | python313 | 3.13.15-150700.4.56.1 |
| SUSE Linux Enterprise Module for Python 3 15 SP7 | python313-core | 3.13.15-150700.4.56.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | python3 | 3.4.10-25.199.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | python3-base | 3.4.10-25.199.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | python36 | 3.6.15-125.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | python36-core | 3.6.15-125.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | python3 | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | python3-core | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | python3 | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | python3-core | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | python3 | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | python3-core | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | python | 2.7.18-33.88.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | python-base | 2.7.18-33.88.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | python-doc | 2.7.18-33.88.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | python3 | 3.4.10-25.199.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | python3-base | 3.4.10-25.199.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | python36 | 3.6.15-125.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | python36-core | 3.6.15-125.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | python3 | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | python3-core | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | python3 | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | python3-core | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | python3 | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | python3-core | 3.6.15-150300.10.129.1 |
| Ubuntu 22.04 LTS | python3.10 | no fix |
| Ubuntu 24.04 LTS | python3.12 | no fix |
| Ubuntu 26.04 LTS | python3.14 | no fix |
| Ubuntu 26.10 | python3.14 | no fix |
| Ubuntu Pro 14.04 LTS | python2.7 | no fix |
| Ubuntu Pro 14.04 LTS | python3.4 | no fix |
| Ubuntu Pro 14.04 LTS | python3.5 | no fix |
| Ubuntu Pro 16.04 LTS | python2.7 | no fix |
| Ubuntu Pro 16.04 LTS | python3.5 | no fix |
| Ubuntu Pro 18.04 LTS | python2.7 | no fix |
| Ubuntu Pro 18.04 LTS | python3.6 | no fix |
| Ubuntu Pro 18.04 LTS | python3.7 | no fix |
| Ubuntu Pro 18.04 LTS | python3.8 | no fix |
| Ubuntu Pro 20.04 LTS | python2.7 | no fix |
| Ubuntu Pro 20.04 LTS | python3.8 | no fix |
| Ubuntu Pro 20.04 LTS | python3.9 | no fix |
| Ubuntu Pro 22.04 LTS | python2.7 | no fix |
| Ubuntu Pro 22.04 LTS | python3.11 | no fix |
| Wolfi | python-3.10 | 3.10.21-r0 |
| Wolfi | python-3.11 | 3.11.16-r0 |
| Wolfi | python-3.12 | 3.12.14-r0 |
| openSUSE Tumbleweed | python313 | 3.13.15-1.1 |
| openSUSE Tumbleweed | python315 | 3.15.0~rc2-1.1 |