PT-2026-138040
CVE-2026-119170
·
Published
2026-11-06
·
Updated
2026-11-06
Description by
CVSS 4.0
8.2
HighMetricsAV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
There was a regression in how FIPS algorithms were enforced for the hashlib module. Only users that are using OpenSSL in FIPS mode are affected. Only Python 3.14.10 is affected, all other Python versions are unaffected.
Found an issue in the description? Have something to add? Feel free to write us 👾