https://seclists.org/oss-sec/2026/q2/99: CPython [CVE-2026-3446] Base64 decoding stops at first padded quad by default
Published Apr 11, 2026
·Updated
Affected Software
1 affected component
Python Software Foundation CPython
Frequently Asked Questions
1
What is the severity of CVE-2026-3446?
CVE-2026-3446 has a MEDIUM severity rating.
2
How do I fix CVE-2026-3446?
To mitigate CVE-2026-3446, upgrade to the latest version of CPython where the vulnerability is addressed.
3
What is the impact of CVE-2026-3446 on CPython applications?
CVE-2026-3446 could lead to issues in base64 decoding within CPython applications by stopping at the first padded quad.
4
Which versions of CPython are affected by CVE-2026-3446?
CVE-2026-3446 affects specific versions of CPython prior to the fix in the latest release.
5
What are the signs that CVE-2026-3446 has been exploited?
Signs of exploitation for CVE-2026-3446 may include unexpected behavior in base64 decoding operations.