AZL-109692

Import Source

JSON Data

https://api.osv.dev/v1/vulns/AZL-109692

Upstream

Published

2025-12-01T18:16:04Z

Modified

2026-10-21T05:36:09Z

Summary

CVE-2025-13837 affecting package python-py 1.11.0-1

Details

When loading a plist file, the plistlib module reads data in size specified by the file itself, meaning a malicious file can cause OOM and DoS issues

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Last Affected

1.11.0-1

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-109692.json"