AZL-111179: CVE-2026-103995 affecting package python-py 1.11.0-1

Q: What systems are exposed to this issue?

Systems using the azure-linux/python-py package at version 1.11.0-1 are identified as affected by the provided data.

Q: What HTTP traffic is relevant to exploitation?

The issue involves HTTP response bodies that use chunk parsing with non-hex or negative integer values. Such values can cause response contents to be interpreted incorrectly.

Published Oct 27, 2026

Updated

Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents.

Affected Software

1 affected component

azure-linux/python-py<=1.11.0-1

Event History

Oct 27, 2026

Advisory Published

via OSV·08:17 PM

Data Sourced

via OSV·08:17 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-103995

Frequently Asked Questions

What systems are exposed to this issue?

Systems using the azure-linux/python-py package at version 1.11.0-1 are identified as affected by the provided data.

What HTTP traffic is relevant to exploitation?

The issue involves HTTP response bodies that use chunk parsing with non-hex or negative integer values. Such values can cause response contents to be interpreted incorrectly.

AZL-111179: CVE-2026-103995 affecting package python-py 1.11.0-1

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

What systems are exposed to this issue?

What HTTP traffic is relevant to exploitation?

Company

Resources

Contact

Frequently Asked Questions

What systems are exposed to this issue?

What HTTP traffic is relevant to exploitation?