Login Request a demo
CP
Product
CPython
by Python Software Foundation · last CVE Oct 27, 2026
35
CVEs
0
On KEV
9.4
Max CVSS
6
New 30D
Vulnerabilities35In the news0Timeline
Severity mix
Critical 2High 12Medium 16Low 5
Severity
All severities35Critical2High12Medium16Low5
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add CPython to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-18503
2.4
0%
Aug 10
Super-linear CPU usage for unbounded input to csv.Sniffer.sniff()
Affected: before 3.10.21; 3.11.0 before 3.11.16; 3.12.0 before 3.12.14; 3.13.0 before 3.13.15; 3.14.0 before 3.14.7; 3.15.0a1 before 3.15.0rc1; +1 more
CVE-2024-3220
2.3
1%
Feb 14
Default mimetype known files writeable on Windows
Affected: before 3.11.18; 3.12.0 before 3.12.16; 3.13.0 before 3.13.18; 3.14.0 before 3.14.9; 3.15.0 before 3.15.1; 3.16.0a1 before 3.16.0
CVE-2026-15310
2.1
1%
Aug 25
zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits
Affected: before 3.10.22; 3.11.0 before 3.11.17; 3.12.0 before 3.12.15; 3.13.0 before 3.13.16; 3.14.0 before 3.14.8; 3.15.0a1 before 3.15.0rc2
CVE-2026-103995
New
2.0–Oct 27
Lenient parsing of integers for response body and chunk framing
Affected: before 3.16.0
CVE-2026-6879
2.0
0%
Jul 28
Quadratic Behavior in xml.etree.ElementPath Index Predicates
Affected: before 3.10.21; 3.11.0 before 3.11.16; 3.12.0 before 3.12.14; 3.13.0 before 3.13.15; 3.14.0 before 3.14.7; 3.15.0a1 before 3.15.0rc1
Showing 5