Cpe:2.3:a:python:python:3.14.10:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3apythonpython3.14.10/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioFri, 06 Nov 2026 23:27:33 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgPython: CPython FIPS enforcement regression (CVE-2026-119170)https://feed.craftedsignal.io/briefs/2026-11-python-fips-regression/Fri, 06 Nov 2026 23:27:33 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-python-fips-regression/A high-severity regression in CPython 3.14.10 fails to enforce mandatory FIPS-compliant hash algorithm restrictions, allowing the use of prohibited algorithms in sensitive environments.CPython version 3.14.10 contains a regression that prevents the correct enforcement of FIPS-compliant hash algorithm restrictions. This vulnerability may result in the use of non-FIPS compliant algorithms in environments where such security policies are strictly required. The vulnerability is confirmed to affect only version 3.14.10.

Impact

Organizations operating in environments requiring strict FIPS compliance may inadvertently utilize prohibited hashing algorithms, potentially violating regulatory or security mandates.

Recommendation

  • Upgrade all instances of CPython 3.14.10 to the next available secure version released by the Python Software Foundation.
  • Audit environments where FIPS mode is enabled and CPython 3.14.10 is deployed to identify potential unauthorized use of legacy hash algorithms.
]]>highadvisoryvulnerabilityfipscompliance