CVE-2026-3276

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-3276
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-3276.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-3276
Aliases
Downstream
ALPINE (1)
AZL (1)
BELL (1)
CGA (10)
CLSA (3)
DEBIAN (1)
ECHO (1)
MINI (5)
OESA (5)
openSUSE (6)
RHSA (5)
ROOT (2)
SUSE (25)
UBUNTU (1)
Related
openSUSE (6)
SUSE (25)
Published
2026-06-03T14:29:39Z
Modified
2026-11-04T07:07:47Z
Severity
  • 6.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N CVSS Calculator
Summary
Potential DoS via quadratic complexity in unicodedata.normalize()
Details

unicodedata.normalize() can take excessive CPU time when processing specially crafted Unicode input containing long runs of combining characters with alternating Canonical Combining Class values. This affects all normalization forms.

Database specific 
{
    "cna_assigner": "PSF",
    "cwe_ids": [
        "CWE-407"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/3xxx/CVE-2026-3276.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "range": [
                        {
                            "fixed": "3.10.21"
                        },
                        {
                            "introduced": "3.11.0"
                        },
                        {
                            "fixed": "3.11.16"
                        },
                        {
                            "introduced": "3.12.0"
                        },
                        {
                            "fixed": "3.12.14"
                        },
                        {
                            "introduced": "3.13.0"
                        },
                        {
                            "fixed": "3.13.14"
                        },
                        {
                            "introduced": "3.14.0"
                        },
                        {
                            "fixed": "3.14.6"
                        },
                        {
                            "introduced": "3.15.0a1"
                        },
                        {
                            "fixed": "3.15.0b2"
                        }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "StandardRange"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/python/cpython

Affected ranges

Type
GIT
Repo
https://github.com/python/cpython
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
6b505d1f41f8f3ea0fe5a4786d3a8fff1875cfc0
Fixed
991224b1e8311c85f198f6dd8208bf8cff7fc26f
Fixed
ba785b88add96acbf403d65cb157fb2743a33a32
Fixed
c5512bd7c1dc28055660565275012766941d3066
Fixed
90748760d38ca3ac5fc6788a69becab905c95598
Fixed
d3ab945af25b28dfe13ac6cb40c124a01b33ce1f
Fixed
db744c0776c1d5dd11aaa70eff2a6993c408bacc
Fixed
e322a1857084d521f79f45181b776f62e6acfc2c
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "fixed": "6b505d1f41f8f3ea0fe5a4786d3a8fff1875cfc0"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "range": [
                {
                    "fixed": "991224b1e8311c85f198f6dd8208bf8cff7fc26f"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "range": [
                {
                    "fixed": "ba785b88add96acbf403d65cb157fb2743a33a32"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "range": [
                {
                    "fixed": "c5512bd7c1dc28055660565275012766941d3066"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "range": [
                {
                    "fixed": "90748760d38ca3ac5fc6788a69becab905c95598"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "range": [
                {
                    "fixed": "d3ab945af25b28dfe13ac6cb40c124a01b33ce1f"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "range": [
                {
                    "fixed": "db744c0776c1d5dd11aaa70eff2a6993c408bacc"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "range": [
                {
                    "fixed": "e322a1857084d521f79f45181b776f62e6acfc2c"
                }
            ],
            "source": "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

v0.*
v0.9.8
v0.9.9
v1.*
v1.0.1
v1.0.2
v1.1
v1.1.1
v1.2
v1.2b1
v1.2b2
v1.2b3
v1.2b4
v1.3
v1.3b1
v1.4
v1.4b1
v1.4b2
v1.4b3
v1.5
v1.5.1
v1.5.2
v1.5.2a1
v1.5.2a2
v1.5.2b1
v1.5.2b2
v1.5.2c1
v1.5a1
v1.5a2
v1.5a3
v1.5a4
v1.5b1
v1.5b2
v1.6a1
v1.6a2
v2.*
v2.0
v2.0b1
v2.0b2
v2.0c1
v2.1
v2.1a1
v2.1a2
v2.1b1
v2.1b2
v2.1c1
v2.1c2
v2.2a3
v2.3c1
v2.3c2
v2.4
v2.4a1
v2.4a2
v2.4a3
v2.4b1
v2.4b2
v2.4c1
v3.*
v3.0a1
v3.0a2
v3.0a3
v3.0a4
v3.0a5
v3.0b1
v3.0b2
v3.0b3
v3.0rc1
v3.0rc2
v3.0rc3
v3.1
v3.10.0a1
v3.10.0a7
v3.10.0b1
v3.10.0b2
v3.10.0b3
v3.10.0b4
v3.10.0rc1
v3.10.0rc2
v3.10.1
v3.10.10
v3.10.11
v3.10.12
v3.10.13
v3.10.14
v3.10.15
v3.10.16
v3.10.17
v3.10.18
v3.10.19
v3.10.2
v3.10.20
v3.10.3
v3.10.4
v3.10.5
v3.10.6
v3.10.7
v3.10.8
v3.10.9
v3.11.0a3
v3.11.0a4
v3.11.0a5
v3.11.0a6
v3.11.0a7
v3.11.0b1
v3.11.0b2
v3.11.0b3
v3.11.0b4
v3.11.0b5
v3.11.0rc1
v3.11.0rc2
v3.11.1
v3.11.10
v3.11.11
v3.11.12
v3.11.13
v3.11.14
v3.11.15
v3.11.2
v3.11.3
v3.11.4
v3.11.5
v3.11.6
v3.11.7
v3.11.8
v3.11.9
v3.12.0
v3.12.0a1
v3.12.0a2
v3.12.0a3
v3.12.0a4
v3.12.0a5
v3.12.0a6
v3.12.0a7
v3.12.0b1
v3.12.0b2
v3.12.0b3
v3.12.0b4
v3.12.0rc1
v3.12.0rc2
v3.12.0rc3
v3.12.1
v3.12.10
v3.12.11
v3.12.12
v3.12.13
v3.12.2
v3.12.3
v3.12.4
v3.12.5
v3.12.6
v3.12.7
v3.12.8
v3.12.9
v3.13.0
v3.13.0a1
v3.13.0a2
v3.13.0a3
v3.13.0a4
v3.13.0a5
v3.13.0a6
v3.13.0b1
v3.13.0b2
v3.13.0b3
v3.13.0b4
v3.13.0rc1
v3.13.0rc2
v3.13.0rc3
v3.13.1
v3.13.10
v3.13.11
v3.13.12
v3.13.13
v3.13.2
v3.13.3
v3.13.4
v3.13.5
v3.13.6
v3.13.7
v3.13.8
v3.14.0
v3.14.0a1
v3.14.0a2
v3.14.0a3
v3.14.0a4
v3.14.0a5
v3.14.0a6
v3.14.0a7
v3.14.0b1
v3.14.0b2
v3.14.0b3
v3.14.0b4
v3.14.0rc1
v3.14.0rc2
v3.14.0rc3
v3.14.1
v3.14.2
v3.14.3
v3.14.4
v3.14.5
v3.14.5rc1
v3.15.0a1
v3.15.0a2
v3.15.0a3
v3.15.0a4
v3.15.0a5
v3.15.0a6
v3.15.0a7
v3.15.0a8
v3.15.0b1
v3.1a1
v3.1a2
v3.1b1
v3.1rc1
v3.1rc2
v3.2a1
v3.2a2
v3.2a3
v3.2a4
v3.2b1
v3.2b2
v3.2rc1
v3.2rc2
v3.2rc3
v3.3.0a2
v3.3.0a3
v3.3.0a4
v3.3.0b1
v3.3.0b2
v3.3.0rc1
v3.3.0rc2
v3.3.0rc3
v3.4.0a1
v3.4.0a2
v3.4.0a3
v3.4.0a4
v3.4.0b1
v3.4.0b2
v3.4.0b3
v3.5.0a1
v3.5.0a2
v3.5.0a3
v3.5.0a4
v3.5.0b1
v3.6.0a3
v3.6.0b1
v3.7.0a2
v3.9.0a2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-3276.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "digest": {
            "function_hash": "144035335497625844550758799517770941173",
            "length": 2548
        },
        "id": "CVE-2026-3276-07b9fa61",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/python/cpython/commit/90748760d38ca3ac5fc6788a69becab905c95598",
        "target": {
            "file": "Modules/unicodedata.c",
            "function": "nfd_nfkd"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "83315346568182266784319473164310304476",
            "length": 742
        },
        "id": "CVE-2026-3276-1dc8674e",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/python/cpython/commit/90748760d38ca3ac5fc6788a69becab905c95598",
        "target": {
            "file": "Modules/unicodedata.c",
            "function": "canonical_ordering_sort_counting"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "268023228427852566166778512071357440600",
                "49146083870971075955850832180074366424",
                "161672440834380912063121567226975060960",
                "153085767786823762895735790163658016389",
                "135509388062542668278157600424988217870",
                "40432734503210116425854705190800869105",
                "67917629224510527522426034072535157781",
                "166059517570380481219309316964869990163",
                "294360439454152527808199495974781540585",
                "170330277675488459509468124667336941004",
                "184053942208226878460548629848761958422",
                "240045722696411144875232246105586979129",
                "93710467222427039179910580139128872663",
                "209237957012120494894586662202902686465",
                "147654122287567650578738412833181847981",
                "24990523950584544933005789034442021776",
                "1264985441848487617347146654540945009",
                "133330517599374281998429843403409091794",
                "127443196720502476492358266579536038067",
                "3181874749795572638750267391225425145",
                "307914191939463532258847797789855238334",
                "286412164138618208239887763369097989485",
                "37581859737422359197274500597813990409",
                "307593036341876832873496387178886053544",
                "180009021221470715406240491680011005097",
                "156465678391889216761798254167431182266",
                "82836382254405138165517379031607017540",
                "227968830222571029245542858130173244620",
                "67182187083228673263224222914878921244",
                "57736110775017630481064347297403175377",
                "302653350848325407386670540887022255768",
                "286226533525041986095987183448852403072",
                "80182737293428689637757344597563484626",
                "142560442433471134166656314351965641631",
                "17745141639070398683318578068814680478",
                "218952618749510052119157813261456705701",
                "102036494579086370049475867152140605174",
                "201649383242728164902186177763329708614",
                "284486070469665139152058084000943158718",
                "282125080222604138545009578927394278576",
                "209263334470273031857898668634517540189",
                "97167674396009702908517784832796456039",
                "228351455830612818484346341007161794228",
                "3845685004980929502917890862926582016",
                "90552866213243599336765302395377852569",
                "104656373242435013484262366179006480249",
                "190308209830565771410520664941609283320",
                "223157110990009253730597991692455861773",
                "65160796642085047173564505076705510442",
                "67461273610231228418032117386320498105",
                "99660230946440346439155050003271657315"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-3276-1e399c6f",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/python/cpython/commit/d3ab945af25b28dfe13ac6cb40c124a01b33ce1f",
        "target": {
            "file": "Modules/unicodedata.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "268023228427852566166778512071357440600",
                "49146083870971075955850832180074366424",
                "161672440834380912063121567226975060960",
                "153085767786823762895735790163658016389",
                "135509388062542668278157600424988217870",
                "40432734503210116425854705190800869105",
                "67917629224510527522426034072535157781",
                "166059517570380481219309316964869990163",
                "294360439454152527808199495974781540585",
                "170330277675488459509468124667336941004",
                "184053942208226878460548629848761958422",
                "240045722696411144875232246105586979129",
                "93710467222427039179910580139128872663",
                "209237957012120494894586662202902686465",
                "147654122287567650578738412833181847981",
                "24990523950584544933005789034442021776",
                "1264985441848487617347146654540945009",
                "133330517599374281998429843403409091794",
                "127443196720502476492358266579536038067",
                "3181874749795572638750267391225425145",
                "307914191939463532258847797789855238334",
                "286412164138618208239887763369097989485",
                "307593036341876832873496387178886053544",
                "180009021221470715406240491680011005097",
                "156465678391889216761798254167431182266",
                "82836382254405138165517379031607017540",
                "227968830222571029245542858130173244620",
                "67182187083228673263224222914878921244",
                "57736110775017630481064347297403175377",
                "302653350848325407386670540887022255768",
                "286226533525041986095987183448852403072",
                "80182737293428689637757344597563484626",
                "142560442433471134166656314351965641631",
                "17745141639070398683318578068814680478",
                "218952618749510052119157813261456705701",
                "102036494579086370049475867152140605174",
                "201649383242728164902186177763329708614",
                "284486070469665139152058084000943158718",
                "282125080222604138545009578927394278576",
                "209263334470273031857898668634517540189",
                "97167674396009702908517784832796456039",
                "228351455830612818484346341007161794228",
                "3845685004980929502917890862926582016",
                "90552866213243599336765302395377852569",
                "104656373242435013484262366179006480249",
                "190308209830565771410520664941609283320",
                "223157110990009253730597991692455861773",
                "65160796642085047173564505076705510442",
                "67461273610231228418032117386320498105",
                "99660230946440346439155050003271657315"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-3276-3eafbb86",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/python/cpython/commit/c5512bd7c1dc28055660565275012766941d3066",
        "target": {
            "file": "Modules/unicodedata.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "268023228427852566166778512071357440600",
                "49146083870971075955850832180074366424",
                "161672440834380912063121567226975060960",
                "153085767786823762895735790163658016389",
                "135509388062542668278157600424988217870",
                "40432734503210116425854705190800869105",
                "67917629224510527522426034072535157781",
                "166059517570380481219309316964869990163",
                "294360439454152527808199495974781540585",
                "170330277675488459509468124667336941004",
                "184053942208226878460548629848761958422",
                "240045722696411144875232246105586979129",
                "93710467222427039179910580139128872663",
                "209237957012120494894586662202902686465",
                "147654122287567650578738412833181847981",
                "24990523950584544933005789034442021776",
                "1264985441848487617347146654540945009",
                "133330517599374281998429843403409091794",
                "127443196720502476492358266579536038067",
                "3181874749795572638750267391225425145",
                "307914191939463532258847797789855238334",
                "286412164138618208239887763369097989485",
                "37581859737422359197274500597813990409",
                "307593036341876832873496387178886053544",
                "180009021221470715406240491680011005097",
                "156465678391889216761798254167431182266",
                "82836382254405138165517379031607017540",
                "227968830222571029245542858130173244620",
                "67182187083228673263224222914878921244",
                "57736110775017630481064347297403175377",
                "302653350848325407386670540887022255768",
                "286226533525041986095987183448852403072",
                "80182737293428689637757344597563484626",
                "142560442433471134166656314351965641631",
                "17745141639070398683318578068814680478",
                "218952618749510052119157813261456705701",
                "102036494579086370049475867152140605174",
                "201649383242728164902186177763329708614",
                "284486070469665139152058084000943158718",
                "282125080222604138545009578927394278576",
                "209263334470273031857898668634517540189",
                "97167674396009702908517784832796456039",
                "228351455830612818484346341007161794228",
                "3845685004980929502917890862926582016",
                "90552866213243599336765302395377852569",
                "104656373242435013484262366179006480249",
                "190308209830565771410520664941609283320",
                "223157110990009253730597991692455861773",
                "65160796642085047173564505076705510442",
                "67461273610231228418032117386320498105",
                "99660230946440346439155050003271657315"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-3276-405651fc",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/python/cpython/commit/ba785b88add96acbf403d65cb157fb2743a33a32",
        "target": {
            "file": "Modules/unicodedata.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "270458269494266437035779711836134373027",
                "4830826185831106575609930506826682585",
                "177892493128311910345442063776363337938",
                "9508616715805632025528511481983886289",
                "2660604914331154706243946208425187565",
                "89104363561978680787000293751572118854",
                "34207563698937734207434875803617619181",
                "148694188881677184021692881360759214932",
                "285820681075334372714554368723563779888",
                "137982554815788908352277909217582960891",
                "323392828537724943916487183302269105005",
                "230900258296302282911716973829626974494",
                "83449348695991571012437294391731717794",
                "242245983782484803057633672072693373846",
                "82367958106220731461677013404574818897",
                "10013612239563834121926643745264799201",
                "297074666275479054175830143947376984469",
                "275305874949403906056760742992583594680",
                "251780288780052676497412083872334042543",
                "68681019948918713478502846900473105522",
                "173878156555487118740790950504304142821",
                "126107133858796067516675265927639341432",
                "217339423973972364295618039889428504423",
                "170658806509300125001400399978982862420",
                "9824622485799417281229650646516306222",
                "92270370289217451596033295951411236048",
                "234438458577971486072632555611250351799",
                "84410158457326232063457568965135413908",
                "271558314925933432629680364247234147992",
                "290335690203308863630024696544164351079",
                "88270844123717184209805401455691547187",
                "240925497138625369624205222049424942170",
                "80984221560511341397870054446468331540",
                "320113539841395992497163423296544997689",
                "238700662852159973516110448388051753381",
                "274158781428797416959772329548703041224",
                "213427798654765322027930367965318428015",
                "13672547653467451102065142969991840546",
                "335431678231012363991085975652756207027",
                "268295444426941110895040590228482070259",
                "157826918545189952247281504526840619966",
                "24883481414144204187995807355052056037",
                "155885031664257734376475507593586797664",
                "19260921468791949871503531556077259677",
                "114969174927273756607188626557218285746",
                "32919900293221134002848481533681177589",
                "156712077801558119893328766038358838169",
                "93664521548501990867316807370859821251",
                "65680065827623401023572686232192901328",
                "76485121485824808026542928928144400013",
                "334482287383601056061685239036278173570",
                "40967456973789400342802371994592616440",
                "209567612582411897726317591622995692852",
                "307854278132356573930080736740316322940",
                "37581859737422359197274500597813990409",
                "294508234674737065253207232562257546353",
                "173000282878731172865023665582177124417",
                "55761978747633650510733099604401473816",
                "176793915649597352530949477628173064535",
                "156615108789637392668079694127163550612",
                "36934873375958620702979388141946880836",
                "271276554700656898440839263714098674376",
                "270581051265712344217087580567113386020",
                "145362821466007037123037313550925923302",
                "318319276868246001047665383528458239952",
                "299002233820683225089283206019679479629",
                "279067526258476711755814979977139869721",
                "144412782360944815755349439460976587278",
                "50913118562689765609130628635501469136",
                "254382933656197175264403954822256676416",
                "206707776439564880051643869135338458010",
                "221619747249291121759908037890896140464",
                "282535284480595729850967968770305745951",
                "136897789422038637158050704580963122054",
                "259118045042481124064497553410104779284",
                "305008239172898219824719665004301744409",
                "84241012877610624709826000886607145143",
                "332576339267242963381236948190203321684",
                "118509198143320217545914163583427686888",
                "158806006922124866789763544035758487682",
                "165091444329243960316053311759989566878",
                "240145363426458220027583452484965686202",
                "168332321894067231043250910052730208972",
                "94855212629766645053439461036444056862",
                "141793438074147279576088623222754436576",
                "167059481587872911038528425702404455903",
                "293201733645120580540333599912175279583",
                "338107393523563011528409323757197531628",
                "173445598366485875599617509758902446249",
                "183422204680217348443783551973605803748",
                "149326445506972279710958595368288474395",
                "46797825797490528220013377091344630465",
                "15859702224261084534069040318112497911"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-3276-425e9597",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/python/cpython/commit/90748760d38ca3ac5fc6788a69becab905c95598",
        "target": {
            "file": "Modules/unicodedata.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "162589632402962372351893321289505254809",
            "length": 2340
        },
        "id": "CVE-2026-3276-4a4779ed",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/python/cpython/commit/ba785b88add96acbf403d65cb157fb2743a33a32",
        "target": {
            "file": "Modules/unicodedata.c",
            "function": "nfd_nfkd"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "162589632402962372351893321289505254809",
            "length": 2340
        },
        "id": "CVE-2026-3276-52b41288",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/python/cpython/commit/6b505d1f41f8f3ea0fe5a4786d3a8fff1875cfc0",
        "target": {
            "file": "Modules/unicodedata.c",
            "function": "nfd_nfkd"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "162589632402962372351893321289505254809",
            "length": 2340
        },
        "id": "CVE-2026-3276-53c664f5",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/python/cpython/commit/db744c0776c1d5dd11aaa70eff2a6993c408bacc",
        "target": {
            "file": "Modules/unicodedata.c",
            "function": "nfd_nfkd"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "162589632402962372351893321289505254809",
            "length": 2340
        },
        "id": "CVE-2026-3276-59104a75",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/python/cpython/commit/d3ab945af25b28dfe13ac6cb40c124a01b33ce1f",
        "target": {
            "file": "Modules/unicodedata.c",
            "function": "nfd_nfkd"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "268023228427852566166778512071357440600",
                "49146083870971075955850832180074366424",
                "161672440834380912063121567226975060960",
                "153085767786823762895735790163658016389",
                "135509388062542668278157600424988217870",
                "40432734503210116425854705190800869105",
                "67917629224510527522426034072535157781",
                "166059517570380481219309316964869990163",
                "294360439454152527808199495974781540585",
                "170330277675488459509468124667336941004",
                "184053942208226878460548629848761958422",
                "240045722696411144875232246105586979129",
                "93710467222427039179910580139128872663",
                "209237957012120494894586662202902686465",
                "147654122287567650578738412833181847981",
                "24990523950584544933005789034442021776",
                "1264985441848487617347146654540945009",
                "133330517599374281998429843403409091794",
                "127443196720502476492358266579536038067",
                "3181874749795572638750267391225425145",
                "307914191939463532258847797789855238334",
                "286412164138618208239887763369097989485",
                "37581859737422359197274500597813990409",
                "307593036341876832873496387178886053544",
                "180009021221470715406240491680011005097",
                "156465678391889216761798254167431182266",
                "82836382254405138165517379031607017540",
                "227968830222571029245542858130173244620",
                "67182187083228673263224222914878921244",
                "57736110775017630481064347297403175377",
                "302653350848325407386670540887022255768",
                "286226533525041986095987183448852403072",
                "80182737293428689637757344597563484626",
                "142560442433471134166656314351965641631",
                "17745141639070398683318578068814680478",
                "218952618749510052119157813261456705701",
                "102036494579086370049475867152140605174",
                "201649383242728164902186177763329708614",
                "284486070469665139152058084000943158718",
                "282125080222604138545009578927394278576",
                "209263334470273031857898668634517540189",
                "97167674396009702908517784832796456039",
                "228351455830612818484346341007161794228",
                "3845685004980929502917890862926582016",
                "90552866213243599336765302395377852569",
                "104656373242435013484262366179006480249",
                "190308209830565771410520664941609283320",
                "223157110990009253730597991692455861773",
                "65160796642085047173564505076705510442",
                "67461273610231228418032117386320498105",
                "99660230946440346439155050003271657315"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-3276-68efca87",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/python/cpython/commit/e322a1857084d521f79f45181b776f62e6acfc2c",
        "target": {
            "file": "Modules/unicodedata.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "162589632402962372351893321289505254809",
            "length": 2340
        },
        "id": "CVE-2026-3276-79e19cf0",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/python/cpython/commit/e322a1857084d521f79f45181b776f62e6acfc2c",
        "target": {
            "file": "Modules/unicodedata.c",
            "function": "nfd_nfkd"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "268023228427852566166778512071357440600",
                "49146083870971075955850832180074366424",
                "161672440834380912063121567226975060960",
                "153085767786823762895735790163658016389",
                "135509388062542668278157600424988217870",
                "40432734503210116425854705190800869105",
                "67917629224510527522426034072535157781",
                "166059517570380481219309316964869990163",
                "294360439454152527808199495974781540585",
                "170330277675488459509468124667336941004",
                "184053942208226878460548629848761958422",
                "240045722696411144875232246105586979129",
                "93710467222427039179910580139128872663",
                "209237957012120494894586662202902686465",
                "147654122287567650578738412833181847981",
                "24990523950584544933005789034442021776",
                "1264985441848487617347146654540945009",
                "133330517599374281998429843403409091794",
                "127443196720502476492358266579536038067",
                "3181874749795572638750267391225425145",
                "307914191939463532258847797789855238334",
                "286412164138618208239887763369097989485",
                "307593036341876832873496387178886053544",
                "180009021221470715406240491680011005097",
                "156465678391889216761798254167431182266",
                "82836382254405138165517379031607017540",
                "227968830222571029245542858130173244620",
                "67182187083228673263224222914878921244",
                "57736110775017630481064347297403175377",
                "302653350848325407386670540887022255768",
                "286226533525041986095987183448852403072",
                "80182737293428689637757344597563484626",
                "142560442433471134166656314351965641631",
                "17745141639070398683318578068814680478",
                "218952618749510052119157813261456705701",
                "102036494579086370049475867152140605174",
                "201649383242728164902186177763329708614",
                "284486070469665139152058084000943158718",
                "282125080222604138545009578927394278576",
                "209263334470273031857898668634517540189",
                "97167674396009702908517784832796456039",
                "228351455830612818484346341007161794228",
                "3845685004980929502917890862926582016",
                "90552866213243599336765302395377852569",
                "104656373242435013484262366179006480249",
                "190308209830565771410520664941609283320",
                "223157110990009253730597991692455861773",
                "65160796642085047173564505076705510442",
                "67461273610231228418032117386320498105",
                "99660230946440346439155050003271657315"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-3276-cc49dc6a",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/python/cpython/commit/6b505d1f41f8f3ea0fe5a4786d3a8fff1875cfc0",
        "target": {
            "file": "Modules/unicodedata.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "162589632402962372351893321289505254809",
            "length": 2340
        },
        "id": "CVE-2026-3276-d51f7394",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/python/cpython/commit/c5512bd7c1dc28055660565275012766941d3066",
        "target": {
            "file": "Modules/unicodedata.c",
            "function": "nfd_nfkd"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "268023228427852566166778512071357440600",
                "49146083870971075955850832180074366424",
                "161672440834380912063121567226975060960",
                "153085767786823762895735790163658016389",
                "135509388062542668278157600424988217870",
                "40432734503210116425854705190800869105",
                "67917629224510527522426034072535157781",
                "166059517570380481219309316964869990163",
                "294360439454152527808199495974781540585",
                "170330277675488459509468124667336941004",
                "184053942208226878460548629848761958422",
                "240045722696411144875232246105586979129",
                "93710467222427039179910580139128872663",
                "209237957012120494894586662202902686465",
                "147654122287567650578738412833181847981",
                "24990523950584544933005789034442021776",
                "1264985441848487617347146654540945009",
                "133330517599374281998429843403409091794",
                "127443196720502476492358266579536038067",
                "3181874749795572638750267391225425145",
                "307914191939463532258847797789855238334",
                "286412164138618208239887763369097989485",
                "307593036341876832873496387178886053544",
                "180009021221470715406240491680011005097",
                "156465678391889216761798254167431182266",
                "82836382254405138165517379031607017540",
                "227968830222571029245542858130173244620",
                "67182187083228673263224222914878921244",
                "57736110775017630481064347297403175377",
                "302653350848325407386670540887022255768",
                "286226533525041986095987183448852403072",
                "80182737293428689637757344597563484626",
                "142560442433471134166656314351965641631",
                "17745141639070398683318578068814680478",
                "218952618749510052119157813261456705701",
                "102036494579086370049475867152140605174",
                "201649383242728164902186177763329708614",
                "284486070469665139152058084000943158718",
                "282125080222604138545009578927394278576",
                "209263334470273031857898668634517540189",
                "97167674396009702908517784832796456039",
                "228351455830612818484346341007161794228",
                "3845685004980929502917890862926582016",
                "90552866213243599336765302395377852569",
                "104656373242435013484262366179006480249",
                "190308209830565771410520664941609283320",
                "223157110990009253730597991692455861773",
                "65160796642085047173564505076705510442",
                "67461273610231228418032117386320498105",
                "99660230946440346439155050003271657315"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-3276-dff6b0ea",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/python/cpython/commit/991224b1e8311c85f198f6dd8208bf8cff7fc26f",
        "target": {
            "file": "Modules/unicodedata.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "162589632402962372351893321289505254809",
            "length": 2340
        },
        "id": "CVE-2026-3276-e319104f",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/python/cpython/commit/991224b1e8311c85f198f6dd8208bf8cff7fc26f",
        "target": {
            "file": "Modules/unicodedata.c",
            "function": "nfd_nfkd"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "315405099070728016735343620779668890174",
            "length": 494
        },
        "id": "CVE-2026-3276-e8078547",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/python/cpython/commit/90748760d38ca3ac5fc6788a69becab905c95598",
        "target": {
            "file": "Modules/unicodedata.c",
            "function": "canonical_ordering_sort_insertion"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "268023228427852566166778512071357440600",
                "49146083870971075955850832180074366424",
                "161672440834380912063121567226975060960",
                "153085767786823762895735790163658016389",
                "135509388062542668278157600424988217870",
                "40432734503210116425854705190800869105",
                "67917629224510527522426034072535157781",
                "166059517570380481219309316964869990163",
                "294360439454152527808199495974781540585",
                "170330277675488459509468124667336941004",
                "184053942208226878460548629848761958422",
                "240045722696411144875232246105586979129",
                "93710467222427039179910580139128872663",
                "209237957012120494894586662202902686465",
                "147654122287567650578738412833181847981",
                "24990523950584544933005789034442021776",
                "1264985441848487617347146654540945009",
                "133330517599374281998429843403409091794",
                "127443196720502476492358266579536038067",
                "3181874749795572638750267391225425145",
                "307914191939463532258847797789855238334",
                "286412164138618208239887763369097989485",
                "37581859737422359197274500597813990409",
                "307593036341876832873496387178886053544",
                "180009021221470715406240491680011005097",
                "156465678391889216761798254167431182266",
                "82836382254405138165517379031607017540",
                "227968830222571029245542858130173244620",
                "67182187083228673263224222914878921244",
                "57736110775017630481064347297403175377",
                "302653350848325407386670540887022255768",
                "286226533525041986095987183448852403072",
                "80182737293428689637757344597563484626",
                "142560442433471134166656314351965641631",
                "17745141639070398683318578068814680478",
                "218952618749510052119157813261456705701",
                "102036494579086370049475867152140605174",
                "201649383242728164902186177763329708614",
                "284486070469665139152058084000943158718",
                "282125080222604138545009578927394278576",
                "209263334470273031857898668634517540189",
                "97167674396009702908517784832796456039",
                "228351455830612818484346341007161794228",
                "3845685004980929502917890862926582016",
                "90552866213243599336765302395377852569",
                "104656373242435013484262366179006480249",
                "190308209830565771410520664941609283320",
                "223157110990009253730597991692455861773",
                "65160796642085047173564505076705510442",
                "67461273610231228418032117386320498105",
                "99660230946440346439155050003271657315"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-3276-f965fef5",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/python/cpython/commit/db744c0776c1d5dd11aaa70eff2a6993c408bacc",
        "target": {
            "file": "Modules/unicodedata.c"
        }
    }
]
vanir_signatures_modified 
"2026-11-04T07:07:47Z"