Windows apps · Application version · February 3, 2026

Python 3.13 3.13.12

Python 3.13 3.13.12, released February 3, 2026, fixes 5 CVEs in Python 3.13 (version 3.13.12). None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0062

49th percentile

Priority of the 5 CVEs

Patch now 0
                                Urgent 0
                                High 1
                                Routine 4

Applies to

Product	Version
Python 3.13	3.13.12

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2026-1299	email BytesGenerator header injection due to unquoted newlines	7.1	0.0057	None reported
Routine	CVE-2025-11468	Folding email comments of unfoldable characters doesn't preserve parenthesis	5.7	0.0062	None reported
Routine	CVE-2026-0865	wsgiref.headers.Headers allows header newline injection	5.9	0.0055	None reported
Routine	CVE-2025-15282	Header injection via newlines in data URL mediatype	6.0	0.0054	None reported
Routine	CVE-2026-0672	Header injection in http.cookies.Morsel	6.0	0.0048	None reported