Login Request a demo
PY
Vendor
Python
30 products with CVEs on record
313
CVEs
0
On KEV
41
New 30D
Products
PI
Pillow
Python
9.8
111 CVEs0 on KEV38 new
UR
Urllib3
Python
9.8
22 CVEs0 on KEV3 new
PY
python
Python
9.8
140 CVEs0 on KEV0 new
RE
Requests
Python
7.5
6 CVEs0 on KEV0 new
SE
Setuptools
Python
8.8
4 CVEs0 on KEV0 new
KE
Keyring
Python
7.5
3 CVEs0 on KEV0 new
BL
Black
Python
9.8
2 CVEs0 on KEV0 new
PY
Pyxdg
Python
7.5
2 CVEs0 on KEV0 new
TA
Typed Ast
Python
7.5
2 CVEs0 on KEV0 new
BE
Beaker
Python
–
1 CVEs0 on KEV0 new
CP
Cpython
Python
7.5
1 CVEs0 on KEV0 new
HP
Hpack
Python
7.5
1 CVEs0 on KEV0 new
HY
Hyper
Python
7.5
1 CVEs0 on KEV0 new
JW
Jw.util
Python
9.8
1 CVEs0 on KEV0 new
NO
Novajoin
Python
8.8
1 CVEs0 on KEV0 new
OP
Openpyxl
Python
8.2
1 CVEs0 on KEV0 new
PY
Py-bcrypt
Python
7.5
1 CVEs0 on KEV0 new
PY
Pybluemonday
Python
9.8
1 CVEs0 on KEV0 new
PY
Pymanager
Python
7.8
1 CVEs0 on KEV0 new
PY
Pypi
Python
9.8
1 CVEs0 on KEV0 new
PY
Pypiserver
Python
6.1
1 CVEs0 on KEV0 new
PY
Python-gnupg
Python
7.5
1 CVEs0 on KEV0 new
PP
Python Priority Library
Python
7.5
1 CVEs0 on KEV0 new
PY
Pyxml
Python
7.5
1 CVEs0 on KEV0 new
RP
Rply
Python
–
1 CVEs0 on KEV0 new
RS
Rsa
Python
5.3
1 CVEs0 on KEV0 new
TA
Tablib
Python
9.8
1 CVEs0 on KEV0 new
TG
Tgcaptcha2
Python
7.5
1 CVEs0 on KEV0 new
TK
Tkvideoplayer
Python
4.3
1 CVEs0 on KEV0 new
VI
Virtualenv
Python
–
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-114501
New
PI
Pillow
Python
5.3
0%
Oct 21Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1
CVE-2026-96639
New
PI
Pillow
Python
9.8
1%
Oct 21Pillow multi-frame loaders can reuse stale native image storage after mode transitions
CVE-2026-96636
New
PI
Pillow
Python
6.5
0%
Oct 21Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)
CVE-2026-96640
New
PI
Pillow
Python
7.5
1%
Oct 21Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion
CVE-2026-96637
New
PI
Pillow
Python
6.5
0%
Oct 21Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS
CVE-2026-96778
New
PI
Pillow
Python
8.8
1%
Oct 21Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer
CVE-2026-96643
New
PI
Pillow
Python
6.5
0%
Oct 21Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time
CVE-2026-96644
New
PI
Pillow
Python
8.1
0%
Oct 21Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds)
CVE-2026-96641
New
PI
Pillow
Python
6.5
0%
Oct 21Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise
CVE-2026-96642
New
PI
Pillow
Python
6.5
0%
Oct 21Pillow: TarIO negative size field causes infinite CPU-spin loop
CVE-2026-96638
New
PI
Pillow
Python
6.5
0%
Oct 21Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode
CVE-2026-112901
PI
Pillow
Python
7.5
0%
Oct 19Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes
CVE-2026-112900
PI
Pillow
Python
9.8
1%
Oct 19Pillow: Argument Injection in Ghostscript call, potentially leading into RCE
CVE-2026-112898
PI
Pillow
Python
5.3
0%
Oct 19Pillow: Image.quantize() with empty palette leaks uninitialized stack memory
CVE-2026-112897
PI
Pillow
Python
6.2
1%
Oct 19Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips
CVE-2026-112896
PI
Pillow
Python
7.1
0%
Oct 19Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read
CVE-2026-112895
PI
Pillow
Python
7.5
0%
Oct 19Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310)
CVE-2026-112894
PI
Pillow
Python
7.5
1%
Oct 19Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)
CVE-2026-112893
PI
Pillow
Python
7.5
0%
Oct 19Pillow: Invalid free in FreeType glyph rendering when a stroker is active
CVE-2026-112892
PI
Pillow
Python
7.5
0%
Oct 19Pillow: MSP RLE decoder expands a tiny file into unbounded memory
CVE-2026-112891
PI
Pillow
Python
7.5
0%
Oct 19Pillow: Quadratic GIF comment copying during save
CVE-2026-112406
PI
Pillow
Python
7.5
0%
Oct 19Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle
CVE-2026-112405
PI
Pillow
Python
7.5
0%
Oct 19Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0
CVE-2026-112404
PI
Pillow
Python
8.2
0%
Oct 19Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels
CVE-2026-112403
PI
Pillow
Python
9.8
1%
Oct 19Pillow: Heap buffer overflow in ImagingJpegDecode
CVE-2026-112402
PI
Pillow
Python
7.5
1%
Oct 19Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform
CVE-2026-112397
PI
Pillow
Python
7.5
0%
Oct 19Pillow: Out-of-bounds access in _imagingmorph on a zero-width image
CVE-2026-112392
PI
Pillow
Python
7.5
1%
Oct 19Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images
CVE-2026-112401
PI
Pillow
Python
7.5
0%
Oct 19Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()
CVE-2026-112400
PI
Pillow
Python
7.5
1%
Oct 19Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS
CVE-2026-112399
PI
Pillow
Python
7.5
0%
Oct 19Pillow: APNG background disposal allocates full canvas before decompression bomb check
CVE-2026-112398
PI
Pillow
Python
9.8
1%
Oct 19Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution
CVE-2026-112396
PI
Pillow
Python
7.5
1%
Oct 19Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer
CVE-2026-112395
PI
Pillow
Python
8.2
1%
Oct 19Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)
CVE-2026-112394
PI
Pillow
Python
8.2
1%
Oct 19Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size
CVE-2026-112393
PI
Pillow
Python
9.8
1%
Oct 19Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO
CVE-2026-112391
PI
Pillow
Python
7.5
1%
Oct 19Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()
CVE-2026-112390
PI
Pillow
Python
7.5
1%
Oct 19Pillow: Infinite loop in MIC n_frames when the embedded TIFF
CVE-2026-97689
UR
Urllib3
Python
7.5
0%
Sep 29urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory
CVE-2026-97688
UR
Urllib3
Python
5.3
0%
Sep 29urllib3: Chunked Deflate streaming can enter an infinite loop
CVE-2026-97687
UR
Urllib3
Python
8.1
0%
Sep 29urllib3: HTTPS proxy TLS configuration may be ignored or overridden
CVE-2026-54058
PI
Pillow
Python
9.1
1%
Jul 14Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)
CVE-2026-59197
PI
Pillow
Python
8.2
0%
Jul 14Pillow: Heap out-of-bounds write in Pillow `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`
CVE-2026-59200
PI
Pillow
Python
7.5
0%
Jul 14Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()
CVE-2026-59198
PI
Pillow
Python
7.5
0%
Jul 14Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images
CVE-2026-59205
PI
Pillow
Python
7.5
0%
Jul 14Pillow: Controlled heap out-of-bounds write in `ImageCmsTransform.apply()` via output mode mismatch
CVE-2026-59203
PI
Pillow
Python
7.5
0%
Jul 14Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service
CVE-2026-59199
PI
Pillow
Python
7.5
0%
Jul 14Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow
CVE-2026-59204
PI
Pillow
Python
7.5
0%
Jul 14Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service
CVE-2026-15308
PY
Python
Python
7.5
1%
Jul 9Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations
CVE-2026-59890
SE
Setuptools
Python
6.1
0%
Jul 8setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+
CVE-2026-55379
PI
Pillow
Python
7.5
1%
Jul 6Pillow BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading
CVE-2026-55380
PI
Pillow
Python
7.5
1%
Jul 6Pillow GdImageFile decompression bomb protection bypass
CVE-2026-54060
PI
Pillow
Python
7.5
0%
Jul 6Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`
CVE-2026-54059
PI
Pillow
Python
7.5
0%
Jul 6Pillow: PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading
CVE-2026-55798
PI
Pillow
Python
4.5
0%
Jul 6Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path
CVE-2026-4360
PY
Python
Python
5.3
0%
Jun 30Tarfile.extract() doesn't fully respect filter parameter
CVE-2026-0864
PY
Python
Python
5.5
0%
Jun 23Configuration Injection via Carriage Return (\r) in write() method
CVE-2026-44431
UR
Urllib3
Python
5.3
0%
May 13urllib3: Sensitive headers forwarded across origins in proxied low-level redirects
CVE-2026-44432
UR
Urllib3
Python
7.5
1%
May 13urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API