CVE-2026-6879
Fixed in a distro release EPSS <1%CVSS 2.0
`Element.findall()` and fully-consumed `Element.iterfind()` exhibit `O(n^2)` time complexity when using XPath index predicates (e.g. `[1]`, `[last()]`, `[last()-N]`) on XML documents with many same-tag siblings. `Element.find()` is only affected when the first match is near the end of the sibling list, such as with `[last()]` or `[last()-N]`; `.//item[1]` short-circuits after the first match.
Products: Python Software Foundation CPython
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.24 | python3 | 3.14.7-r0 |
| Amazon Linux 2023 | python3.11 | 3.11.16-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.11-debug | 3.11.16-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.11-devel | 3.11.16-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.11-idle | 3.11.16-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.11-libs | 3.11.16-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.11-test | 3.11.16-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.11-tkinter | 3.11.16-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.12 | 3.12.14-2.amzn2023.0.1 |
| Amazon Linux 2023 | python3.12-debug | 3.12.14-2.amzn2023.0.1 |
| Amazon Linux 2023 | python3.12-devel | 3.12.14-2.amzn2023.0.1 |
| Amazon Linux 2023 | python3.12-idle | 3.12.14-2.amzn2023.0.1 |
| Amazon Linux 2023 | python3.12-libs | 3.12.14-2.amzn2023.0.1 |
| Amazon Linux 2023 | python3.12-test | 3.12.14-2.amzn2023.0.1 |
| Amazon Linux 2023 | python3.12-tkinter | 3.12.14-2.amzn2023.0.1 |
| Amazon Linux 2023 | python3.13 | 3.13.15-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.13-debug | 3.13.15-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.13-devel | 3.13.15-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.13-freethreading | 3.13.15-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.13-freethreading-debug | 3.13.15-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.13-idle | 3.13.15-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.13-libs | 3.13.15-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.13-test | 3.13.15-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.13-tkinter | 3.13.15-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.14 | 3.14.7-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.14-debug | 3.14.7-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.14-devel | 3.14.7-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.14-freethreading | 3.14.7-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.14-freethreading-debug | 3.14.7-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.14-freethreading-devel | 3.14.7-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.14-freethreading-idle | 3.14.7-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.14-freethreading-libs | 3.14.7-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.14-freethreading-test | 3.14.7-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.14-freethreading-tkinter | 3.14.7-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.14-idle | 3.14.7-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.14-libs | 3.14.7-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.14-test | 3.14.7-1.amzn2023.0.1 |
| Amazon Linux 2023 | python3.14-tkinter | 3.14.7-1.amzn2023.0.1 |
| Chainguard | python-3.10 | 3.10.21-r0 |
| Chainguard | python-3.11 | 3.11.16-r0 |
| Chainguard | python-3.12 | 3.12.14-r0 |
| Chainguard | python-3.13 | 3.13.15-r0 |
| Chainguard | python-3.14 | 3.14.7-r0 |
| Debian 12 | pypy3 | no fix |
| Debian 12 | python3.11 | no fix |
| Debian 13 | pypy3 | no fix |
| Debian 13 | python3.13 | 3.13.5-2+deb13u5 |
| Debian 14 | pypy3 | 8.0.0+dfsg-1 |
| Debian 14 | python3.13 | 3.13.15-1 |
| Debian 14 | python3.14 | 3.14.7-1 |
| Red Hat hummingbird 1 | python-unversioned-command | 0:3.14.7-1.hum1 |
| Red Hat hummingbird 1 | python-unversioned-command | 0:3.14.6-2.2.hum1 |
| Red Hat hummingbird 1 | python3 | 0:3.14.6-2.2.hum1 |
| Red Hat hummingbird 1 | python3 | 0:3.14.7-1.hum1 |
| Red Hat hummingbird 1 | python3-debug | 0:3.14.6-2.2.hum1 |
| Red Hat hummingbird 1 | python3-debug | 0:3.14.7-1.hum1 |
| Red Hat hummingbird 1 | python3-devel | 0:3.14.6-2.2.hum1 |
| Red Hat hummingbird 1 | python3-devel | 0:3.14.7-1.hum1 |
| Red Hat hummingbird 1 | python3-idle | 0:3.14.7-1.hum1 |
| Red Hat hummingbird 1 | python3-idle | 0:3.14.6-2.2.hum1 |
| Red Hat hummingbird 1 | python3-libs | 0:3.14.7-1.hum1 |
| Red Hat hummingbird 1 | python3-libs | 0:3.14.6-2.2.hum1 |
| Red Hat hummingbird 1 | python3-test | 0:3.14.6-2.2.hum1 |
| Red Hat hummingbird 1 | python3-test | 0:3.14.7-1.hum1 |
| Red Hat hummingbird 1 | python3-tkinter | 0:3.14.6-2.2.hum1 |
| Red Hat hummingbird 1 | python3-tkinter | 0:3.14.7-1.hum1 |
| Red Hat hummingbird 1 | python3.10 | 0:3.10.20-3.2.hum1 |
| Red Hat hummingbird 1 | python3.10-debug | 0:3.10.20-3.2.hum1 |
| Red Hat hummingbird 1 | python3.10-devel | 0:3.10.20-3.2.hum1 |
| Red Hat hummingbird 1 | python3.10-idle | 0:3.10.20-3.2.hum1 |
| Red Hat hummingbird 1 | python3.10-libs | 0:3.10.20-3.2.hum1 |
| Red Hat hummingbird 1 | python3.10-test | 0:3.10.20-3.2.hum1 |
| Red Hat hummingbird 1 | python3.10-tkinter | 0:3.10.20-3.2.hum1 |
| Red Hat hummingbird 1 | python3.11 | 0:3.11.15-5.5.hum1 |
| Red Hat hummingbird 1 | python3.11-debug | 0:3.11.15-5.5.hum1 |
| Red Hat hummingbird 1 | python3.11-devel | 0:3.11.15-5.5.hum1 |
| Red Hat hummingbird 1 | python3.11-idle | 0:3.11.15-5.5.hum1 |
| Red Hat hummingbird 1 | python3.11-libs | 0:3.11.15-5.5.hum1 |
| Red Hat hummingbird 1 | python3.11-test | 0:3.11.15-5.5.hum1 |
| Red Hat hummingbird 1 | python3.11-tkinter | 0:3.11.15-5.5.hum1 |
| Red Hat hummingbird 1 | python3.12 | 0:3.12.13-3.8.hum1 |
| Red Hat hummingbird 1 | python3.12-debug | 0:3.12.13-3.8.hum1 |
| Red Hat hummingbird 1 | python3.12-devel | 0:3.12.13-3.8.hum1 |
| Red Hat hummingbird 1 | python3.12-idle | 0:3.12.13-3.8.hum1 |
| Red Hat hummingbird 1 | python3.12-libs | 0:3.12.13-3.8.hum1 |
| Red Hat hummingbird 1 | python3.12-test | 0:3.12.13-3.8.hum1 |
| Red Hat hummingbird 1 | python3.12-tkinter | 0:3.12.13-3.8.hum1 |
| Red Hat hummingbird 1 | python3.13 | 0:3.13.15-1.hum1 |
| Red Hat hummingbird 1 | python3.13 | 0:3.13.14-1.7.hum1 |
| Red Hat hummingbird 1 | python3.13-debug | 0:3.13.15-1.hum1 |
| Red Hat hummingbird 1 | python3.13-debug | 0:3.13.14-1.7.hum1 |
| Red Hat hummingbird 1 | python3.13-devel | 0:3.13.15-1.hum1 |
| Red Hat hummingbird 1 | python3.13-devel | 0:3.13.14-1.7.hum1 |
| Red Hat hummingbird 1 | python3.13-freethreading | 0:3.13.15-1.hum1 |
| Red Hat hummingbird 1 | python3.13-freethreading | 0:3.13.14-1.7.hum1 |
| Red Hat hummingbird 1 | python3.13-freethreading-debug | 0:3.13.15-1.hum1 |
| Red Hat hummingbird 1 | python3.13-freethreading-debug | 0:3.13.14-1.7.hum1 |
| Red Hat hummingbird 1 | python3.13-idle | 0:3.13.14-1.7.hum1 |
| Red Hat hummingbird 1 | python3.13-idle | 0:3.13.15-1.hum1 |
| Red Hat hummingbird 1 | python3.13-libs | 0:3.13.15-1.hum1 |
| Red Hat hummingbird 1 | python3.13-libs | 0:3.13.14-1.7.hum1 |
| Red Hat hummingbird 1 | python3.13-test | 0:3.13.14-1.7.hum1 |
| Red Hat hummingbird 1 | python3.13-test | 0:3.13.15-1.hum1 |
| Red Hat hummingbird 1 | python3.13-tkinter | 0:3.13.15-1.hum1 |
| Red Hat hummingbird 1 | python3.13-tkinter | 0:3.13.14-1.7.hum1 |
| Red Hat hummingbird 1 | python3.14 | 0:3.14.7-1.hum1 |
| Red Hat hummingbird 1 | python3.14 | 0:3.14.6-2.2.hum1 |
| Red Hat hummingbird 1 | python3.14-freethreading | 0:3.14.7-1.hum1 |
| Red Hat hummingbird 1 | python3.14-freethreading | 0:3.14.6-2.2.hum1 |
| Red Hat hummingbird 1 | python3.14-freethreading-debug | 0:3.14.6-2.2.hum1 |
| Red Hat hummingbird 1 | python3.14-freethreading-debug | 0:3.14.7-1.hum1 |
| Red Hat hummingbird 1 | python3.14-freethreading-devel | 0:3.14.6-2.2.hum1 |
| Red Hat hummingbird 1 | python3.14-freethreading-devel | 0:3.14.7-1.hum1 |
| Red Hat hummingbird 1 | python3.14-freethreading-idle | 0:3.14.6-2.2.hum1 |
| Red Hat hummingbird 1 | python3.14-freethreading-idle | 0:3.14.7-1.hum1 |
| Red Hat hummingbird 1 | python3.14-freethreading-libs | 0:3.14.7-1.hum1 |
| Red Hat hummingbird 1 | python3.14-freethreading-libs | 0:3.14.6-2.2.hum1 |
| Red Hat hummingbird 1 | python3.14-freethreading-test | 0:3.14.6-2.2.hum1 |
| Red Hat hummingbird 1 | python3.14-freethreading-test | 0:3.14.7-1.hum1 |
| Red Hat hummingbird 1 | python3.14-freethreading-tkinter | 0:3.14.6-2.2.hum1 |
| Red Hat hummingbird 1 | python3.14-freethreading-tkinter | 0:3.14.7-1.hum1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | python3 | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | python3-core | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | python3 | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | python3-core | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | python3 | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | python3-core | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | python3 | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | python3-core | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Micro 5.3 | python3 | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Micro 5.3 | python3-core | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Micro 5.4 | python3 | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Micro 5.4 | python3-core | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Micro 5.5 | python3 | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Micro 5.5 | python3-core | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | python3 | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | python3-core | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP7 | python3-core | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP7 | python | 2.7.18-150000.133.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP7 | python-base | 2.7.18-150000.133.1 |
| SUSE Linux Enterprise Module for Python 3 15 SP7 | python313 | 3.13.15-150700.4.56.1 |
| SUSE Linux Enterprise Module for Python 3 15 SP7 | python313-core | 3.13.15-150700.4.56.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | python3 | 3.4.10-25.199.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | python3-base | 3.4.10-25.199.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | python36 | 3.6.15-125.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | python36-core | 3.6.15-125.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | python3 | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | python3-core | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | python3 | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | python3-core | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | python3 | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | python3-core | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | python | 2.7.18-33.88.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | python-base | 2.7.18-33.88.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | python-doc | 2.7.18-33.88.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | python3 | 3.4.10-25.199.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | python3-base | 3.4.10-25.199.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | python36 | 3.6.15-125.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | python36-core | 3.6.15-125.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | python3 | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | python3-core | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | python3 | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | python3-core | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | python3 | 3.6.15-150300.10.129.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | python3-core | 3.6.15-150300.10.129.1 |
| Ubuntu 20.04 LTS | pypy3 | no fix |
| Ubuntu 22.04 LTS | pypy3 | no fix |
| Ubuntu 22.04 LTS | python3.10 | no fix |
| Ubuntu 24.04 LTS | pypy3 | no fix |
| Ubuntu 24.04 LTS | python3.12 | no fix |
| Ubuntu 26.04 LTS | pypy3 | no fix |
| Ubuntu 26.04 LTS | python3.14 | no fix |
| Ubuntu 26.10 | pypy3 | no fix |
| Ubuntu 26.10 | python3.14 | no fix |
| Ubuntu Pro 14.04 LTS | python2.7 | no fix |
| Ubuntu Pro 14.04 LTS | python3.4 | no fix |
| Ubuntu Pro 14.04 LTS | python3.5 | no fix |
| Ubuntu Pro 16.04 LTS | python2.7 | no fix |
| Ubuntu Pro 16.04 LTS | python3.5 | no fix |
| Ubuntu Pro 18.04 LTS | python2.7 | no fix |
| Ubuntu Pro 18.04 LTS | python3.6 | no fix |
| Ubuntu Pro 18.04 LTS | python3.7 | no fix |
| Ubuntu Pro 18.04 LTS | python3.8 | no fix |
| Ubuntu Pro 20.04 LTS | python2.7 | no fix |
| Ubuntu Pro 20.04 LTS | python3.8 | no fix |
| Ubuntu Pro 20.04 LTS | python3.9 | no fix |
| Ubuntu Pro 22.04 LTS | python2.7 | no fix |
| Ubuntu Pro 22.04 LTS | python3.11 | no fix |
| Wolfi | python-3.10 | 3.10.21-r0 |
| Wolfi | python-3.11 | 3.11.16-r0 |
| Wolfi | python-3.12 | 3.12.14-r0 |
| Wolfi | python-3.13 | 3.13.15-r0 |
| Wolfi | python-3.14 | 3.14.7-r0 |
| openSUSE Tumbleweed | python313 | 3.13.15-1.1 |
| openSUSE Tumbleweed | python315 | 3.15.0~rc2-1.1 |