What is GHSA-vq78-g94j-3ppp?

GHSA-vq78-g94j-3ppp is a security advisory published by GitHub Security Advisories with High severity. There was a regression in how FIPS algorithms were enforced for the hashlib module. Only users...

Which CVE IDs does GHSA-vq78-g94j-3ppp cover?

GHSA-vq78-g94j-3ppp covers the following CVE IDs: CVE-2026-119170. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-vq78-g94j-3pppHigh

There was a regression in how FIPS algorithms were enforced for the hashlib module. Only users...

Vendor

GitHub Security Advisories

Published

November 6, 2026

Last Modified

November 7, 2026

🔗 CVE IDs covered (1)

CVE-2026-119170 →

📋 Description

There was a regression in how FIPS algorithms were enforced for the hashlib module. Only users that are using OpenSSL in FIPS mode are affected. Only Python 3.14.10 is affected, all other Python versions are unaffected.

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2026-119170
https://github.com/python/cpython/issues/160923
https://github.com/python/cpython/pull/160984
https://mail.python.org/archives/list/security-announce@python.org/thread/PXVTTOBPUMFJSSUXN6XCS7FC5DZOSZXK
http://www.openwall.com/lists/oss-security/2026/11/06/30
https://github.com/advisories/GHSA-vq78-g94j-3ppp