{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3apythonpython3.14.10/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:python:python:3.14.10:*:*:*:*:*:*:*"],"_cs_cves":[{"id":"CVE-2026-119170"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["CPython (3.14.10)"],"_cs_severities":["high"],"_cs_tags":["vulnerability","fips","compliance"],"_cs_type":"advisory","_cs_vendors":["Python"],"content_html":"\u003cp\u003eCPython version 3.14.10 contains a regression that prevents the correct enforcement of FIPS-compliant hash algorithm restrictions. This vulnerability may result in the use of non-FIPS compliant algorithms in environments where such security policies are strictly required. The vulnerability is confirmed to affect only version 3.14.10.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eOrganizations operating in environments requiring strict FIPS compliance may inadvertently utilize prohibited hashing algorithms, potentially violating regulatory or security mandates.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade all instances of CPython 3.14.10 to the next available secure version released by the Python Software Foundation.\u003c/li\u003e\n\u003cli\u003eAudit environments where FIPS mode is enabled and CPython 3.14.10 is deployed to identify potential unauthorized use of legacy hash algorithms.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-06T23:27:33Z","date_published":"2026-11-06T23:27:33Z","id":"https://feed.craftedsignal.io/briefs/2026-11-python-fips-regression/","summary":"A high-severity regression in CPython 3.14.10 fails to enforce mandatory FIPS-compliant hash algorithm restrictions, allowing the use of prohibited algorithms in sensitive environments.","title":"Python: CPython FIPS enforcement regression (CVE-2026-119170)","url":"https://feed.craftedsignal.io/briefs/2026-11-python-fips-regression/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:python:python:3.14.10:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}