https://seclists.org/oss-sec/2026/q1/319: [CVE-2026-4224] CPython Stack overflow parsing XML with deeply nested DTD content models
Published Mar 16, 2026
·Updated
Affected Software
1 affected component
pypi/cpython
Frequently Asked Questions
1
What is the severity of CVE-2026-4224?
CVE-2026-4224 has been classified as a high severity vulnerability due to the potential for stack overflow.
2
How do I fix CVE-2026-4224?
To fix CVE-2026-4224, update CPython to the latest version that addresses this vulnerability.
3
What versions of CPython are affected by CVE-2026-4224?
CVE-2026-4224 affects multiple versions of CPython prior to the patch release that addresses the issue.
4
What are the consequences of exploiting CVE-2026-4224?
Exploiting CVE-2026-4224 can lead to a stack overflow, potentially allowing an attacker to execute arbitrary code.
5
What conditions are needed for CVE-2026-4224 to be exploited?
CVE-2026-4224 can be exploited through XML parsing with deeply nested DTD content models.