CVE-2025-13836

Name of the Vulnerable Software and Affected Versions python3.9 python3.11 python3.13

Description When reading an HTTP response from a server, if no read amount is specified, the default behavior is to use Content-Length. This allows a malicious server to cause the client to read large amounts of data into memory, potentially causing Out Of Memory (OOM) errors or other Denial of Service (DoS) conditions. The issue resides in the http.client module.

Recommendations For python3.9, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For python3.11, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For python3.13, at the moment, there is no information about a newer version that contains a fix for this vulnerability.