A vulnerability in Python libraries lzma, bz2, and gzip, which could potentially lead to code execution.
A vulnerability (CVE-2026-6100) has been identified in the CPython classes responsible for unpacking compressed data in formats lzma, bz2, and gzip (lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile), leading to access to memory after it has been freed. The issue has been assigned a critical severity level (9.1 out of 10) — if successfully exploited, the vulnerability could lead to information leakage from the process memory or the execution of code […]
