Windows apps · Application version · February 3, 2026

Python 3.14 3.14.3

Python 3.14 3.14.3, released February 3, 2026, fixes 5 CVEs in Python 3.14 (version 3.14.3). None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0062

49th percentile

Priority of the 5 CVEs

Patch now 0
                                Urgent 0
                                High 1
                                Routine 4

Applies to

Product	Version
Python 3.14	3.14.3

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2026-1299	email BytesGenerator header injection due to unquoted newlines	7.1	0.0057	None reported
Routine	CVE-2025-11468	Folding email comments of unfoldable characters doesn't preserve parenthesis	5.7	0.0062	None reported
Routine	CVE-2026-0865	wsgiref.headers.Headers allows header newline injection	5.9	0.0055	None reported
Routine	CVE-2025-15282	Header injection via newlines in data URL mediatype	6.0	0.0054	None reported
Routine	CVE-2026-0672	Header injection in http.cookies.Morsel	6.0	0.0048	None reported