Ecosystem	Package	Version

Vulnerabilities

CVE-2026-21226

CVE-2026-21226

Deserialization of untrusted data in Azure Core shared client library for Python allows an authorized attacker to execute code over a network.

Published Jan 14, 2026

https://github.com/advisories/GHSA-jm66-cg57-jjv5

CVSS ScoreHigh

7.5

Ecosystem	Package	Version


pypi	azure-core	1.0.0
pypi	azure-core	1.0.0b1
pypi	azure-core	1.0.0b2
pypi	azure-core	1.0.0b3
pypi	azure-core	1.0.0b4
pypi	azure-core	1.1.0
pypi	azure-core	1.1.1
pypi	azure-core	1.10.0
pypi	azure-core	1.11.0
pypi	azure-core	1.12.0
pypi	azure-core	1.12.0b1
pypi	azure-core	1.13.0
pypi	azure-core	1.13.0b1
pypi	azure-core	1.14.0
pypi	azure-core	1.14.0b1
pypi	azure-core	1.15.0
pypi	azure-core	1.15.0b1
pypi	azure-core	1.16.0
pypi	azure-core	1.17.0
pypi	azure-core	1.18.0
pypi	azure-core	1.19.0
pypi	azure-core	1.19.1
pypi	azure-core	1.2.0
pypi	azure-core	1.2.1
pypi	azure-core	1.2.2
pypi	azure-core	1.20.0
pypi	azure-core	1.20.1
pypi	azure-core	1.21.0
pypi	azure-core	1.21.1
pypi	azure-core	1.22.0
pypi	azure-core	1.22.1
pypi	azure-core	1.23.0
pypi	azure-core	1.23.1
pypi	azure-core	1.24.0
pypi	azure-core	1.24.1
pypi	azure-core	1.24.2
pypi	azure-core	1.25.0
pypi	azure-core	1.25.1
pypi	azure-core	1.26.0
pypi	azure-core	1.26.1
pypi	azure-core	1.26.2
pypi	azure-core	1.26.3
pypi	azure-core	1.26.4
pypi	azure-core	1.27.0
pypi	azure-core	1.27.1
pypi	azure-core	1.28.0
pypi	azure-core	1.29.0
pypi	azure-core	1.29.1
pypi	azure-core	1.29.2
pypi	azure-core	1.29.3

CVE-2026-21226 | Components Impacted | Sonatype Guide | Sonatype Guide