CVE-2025-12781
1 advisory.
python/python CVE-2025-12781: medium 6.3
base64.b64decode() always accepts "+/" characters, despite setting altchars
Action: Upgrade python to 3.13.10 (3.13.x) or 3.14.1 (3.14.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.13.10 | - |
| 3.14.0 | 3.14.1 | - |
Fixed versions
| 3.13.10 | 3.14.1 |
Sources
- python-runtime: PSF-2026-7
- https://mail.python.org/archives/list/security-announce@python.org/thread/KRI7GC6S27YV5NJ4FPDALS2WI5ENAFJ6/
- https://www.cve.org/CVERecord?id=CVE-2025-12781
CVE-2025-12781 · published · modified · JSON