AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
← CVE index
Δ / VULNERABILITY RECORD

CVE-2026-3219.

Source-reported disclosure and enrichment record.

SEVERITY / CVSSUnscoredNo severity score in this snapshot.
EXPLOITATION STATUSNot listed in the cached KEV catalogThis does not establish absence of exploitation.
RECORD STATUSMicrosoft vendor recordModified Sep 24, 2026

Disclosure summary

pip doesn't reject concatenated ZIP and tar archives

Source-specific records & product guidance

Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.

Microsoft Security Updates (CVRF) · 2026-Apr

Open original source · Updated Sep 24, 2026

pip doesn't reject concatenated ZIP and tar archives

Maximum of vendor-reported product scores; products and fixed builds are associations, not a universal affected-version statement.

VendorProduct / associationVersion / bounds
Microsoft update guideazl3 python-pip 24.2-6 on Azure Linux 3.0 (MSRC status code 3)
Microsoft update guideazl3 python-virtualenv 20.36.1-2 on Azure Linux 3.0 (MSRC status code 3)
Microsoft update guidecbl2 python-virtualenv 20.26.6-3 on CBL Mariner 2.0 (MSRC status code 3)
Microsoft update guideazl3 python-virtualenv 20.36.1-4 on Azure Linux 3.0 (MSRC status code 3)
Microsoft update guidecbl2 python-virtualenv 20.26.6-3 (MSRC status code 3)
Microsoft update guidecbl2 python3 3.9.19-19 on CBL Mariner 2.0 (MSRC status code 3)
Microsoft update guideazl3 python-pip 24.2-8 on Azure Linux 3.0 (MSRC status code 3)
Microsoft update guidecbl2 python-virtualenv 20.26.6-3 on CBL-Mariner 2.0 (MSRC status code 3)
Microsoft update guidecbl2 python3 3.9.19-19 on CBL-Mariner 2.0 (MSRC status code 3)

Vendor remediation references

  • CBL-Mariner Releases · build 24.2-7 · product IDs 20965-17084
  • Vendor guidance · product IDs 20965-17084
  • CBL-Mariner Releases · build 20.36.1-3 · product IDs 21144-17084
  • Vendor guidance · product IDs 21144-17084
  • CBL-Mariner Releases · build 20.36.1-4 · product IDs 21388-17084
  • Vendor guidance · product IDs 21388-17084
  • CBL-Mariner Releases · build 24.2-8 · product IDs 21381-17084
  • Vendor guidance · product IDs 21381-17084
  • Release Notes · product IDs 21139-21692, 20937-21692
  • Vendor guidance · product IDs 21139-21692, 20937-21692

Original records & references

PUBLISHED 2026-04-22T21:03:56-04:00
MODIFIED 2026-09-24T22:08:01-04:00
INGESTED 2026-10-08T12:45:03-04:00