{
  "schema_version": "1.5.0",
  "id": "PSF-2026-47",
  "published": "2026-10-27T19:58:52.521Z",
  "modified": "2026-10-28T00:33:14.944Z",
  "aliases": [
    "CVE-2026-103995"
  ],
  "details": "Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents.",
  "affected": [
    {
      "ranges": [
        {
          "type": "GIT",
          "repo": "https://github.com/python/cpython",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2eb2af805c156ca52b316bb4ced5e0ab3971d0ae"
            },
            {
              "fixed": "9f52b443c002cccfb54bda0706a9276b6b4a109d"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/python/cpython/pull/150752"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/python/cpython/issues/150751"
    },
    {
      "type": "FIX",
      "url": "https://github.com/python/cpython/commit/2eb2af805c156ca52b316bb4ced5e0ab3971d0ae"
    },
    {
      "type": "FIX",
      "url": "https://github.com/python/cpython/commit/9f52b443c002cccfb54bda0706a9276b6b4a109d"
    }
  ],
  "database_specific": {
    "cwe_ids": []
  }
}