{"id":"CVE-2026-103995","aliases":[],"title":"Lenient parsing of integers for response body and chunk framing","titleSource":"PSF","descriptionSource":"PSF","products":[{"vendor":"Python Software Foundation","name":"CPython","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"3.16.0","versionType":"python"}],"defaultStatus":"unaffected","source":"PSF","url":"https://www.cve.org/CVERecord?id=CVE-2026-103995"}],"remediation":[],"description":"Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents.","severity":"low","score":2,"published":"2026-10-27T19:58:52.521Z","modified":"2026-10-28T00:33:14.944Z","withdrawn":false,"knownExploited":false,"affected":[],"references":["https://github.com/python/cpython/pull/150752","https://github.com/python/cpython/issues/150751","https://github.com/python/cpython/commit/2eb2af805c156ca52b316bb4ced5e0ab3971d0ae","https://github.com/python/cpython/commit/9f52b443c002cccfb54bda0706a9276b6b4a109d"],"sources":[{"name":"CVE","id":"CVE-2026-103995","modified":"2026-10-28T00:33:14.944Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-103995"}],"assessments":[{"source":"PSF","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N","score":2}],"sourceAffected":[],"kev":{"status":"not-listed","checkedAt":"2026-10-29T03:20:31.263Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}