Likely permanent: GitHub doesn’t review this ecosystem
GHSA-hhv7-p4pg-wm6p
Python on other · published in google/security-research
Facts
- Severity
- Medium
- Affected versions
- Python 3.12.9 and Python 3.13.5As entered by the maintainer. Not reviewed. Scanners can’t read this range. How to fix it
- Fixed in
- not stated
- CVE
- None cited by the advisory
- GitHub Advisory Database
- Not reviewed
- OSV.dev
- Not present
- Other CVEs pointing here
- None found in the CVE List
If you use Python Python 3.12.9 and Python 3.13.5
No fixed version is listed yet. Check the advisory for workarounds. Dependabot, npm audit and OSV-Scanner probably never will.
Timeline
2025-10-27 13:07 UTC
Published by the maintainers
No CVE cited
2026-10-28 07:19 UTC
First seen by Limbowatch
not reviewed · not in OSV
Not expected
Reviewed by GitHub
GitHub doesn’t review this ecosystem
Machine-readable record: feed/GHSA-hhv7-p4pg-wm6p.json