PS
Vendor
Python Software Foundation
39
CVEs
0
On KEV
6
New 30D
Products
CP9.4
CPython
Python Software Foundation
35 CVEs0 on KEV6 new
PY–
Python
Python Software Foundation
2 CVEs0 on KEV0 new
PA–
Paramiko
Python Software Foundation
1 CVEs0 on KEV0 new
PY7.8
pymanager
Python Software Foundation
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-103995 New | CP CPython Python Software Foundation | 2.0 | Oct 27 | Lenient parsing of integers for response body and chunk framing |
| CVE-2026-115557 New | CP CPython Python Software Foundation | 9.4 | Oct 24 | Distrust compromised intermediate certificates in ssl module |
| CVE-2026-114583 New | CP CPython Python Software Foundation | 6.9 | Oct 22 | tar filter allows writing outside destination via empty-named symlink |
| CVE-2026-19553 | CP CPython Python Software Foundation | 7.6 | Sep 30 | SSLContext.wrap_bio() missing validation of server_hostname parameter |
| CVE-2026-19445 | CP CPython Python Software Foundation | 9.2 | Sep 30 | Use-after-free of a server-side SSLContext when sni_callback switches contexts |
| CVE-2026-12345 | CP CPython Python Software Foundation | 5.9 | Sep 29 | Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory |
| CVE-2026-82049 | CP CPython Python Software Foundation | 8.4 | Sep 14 | tarfile extraction filters allow file modification and content disclosure via hard link to symlink |
| CVE-2026-87910 | CP CPython Python Software Foundation | 5.7 | Sep 11 | tarfile hardlink fallback ignores custom extraction filter rejection via None |
| CVE-2026-15310 | CP CPython Python Software Foundation | 2.1 | Aug 25 | zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits |
| CVE-2026-19672 | CP CPython Python Software Foundation | 6.3 | Aug 19 | tarfile extraction filter bypass allows creation of directories outside the destination |
| CVE-2026-15806 | CP CPython Python Software Foundation | 6.0 | Aug 18 | `HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matching |
| CVE-2026-17084 | CP CPython Python Software Foundation | 6.0 | Aug 18 | stringprep.map_table_b2() deviates from RFC 3454 Table B.2 |
| CVE-2026-18503 | CP CPython Python Software Foundation | 2.4 | Aug 10 | Super-linear CPU usage for unbounded input to csv.Sniffer.sniff() |
| CVE-2026-6879 | CP CPython Python Software Foundation | 2.0 | Jul 28 | Quadratic Behavior in xml.etree.ElementPath Index Predicates |
| CVE-2026-15308 | CP CPython Python Software Foundation | 7.5 | Jul 9 | Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations |
| CVE-2026-4360 | CP CPython Python Software Foundation | 5.3 | Jun 30 | Tarfile.extract() doesn't fully respect filter parameter |
| CVE-2026-11972 | CP CPython Python Software Foundation | 8.2 | Jun 23 | tarfile opened in streaming mode mishandles EOF |
| CVE-2026-0864 | CP CPython Python Software Foundation | 5.5 | Jun 23 | Configuration Injection via Carriage Return (\r) in write() method |
| CVE-2026-11940 | CP CPython Python Software Foundation | 7.8 | Jun 23 | tarfile extraction filter bypass allows escaping the destination directory |
| CVE-2026-12003 | CP CPython Python Software Foundation | 5.3 | Jun 16 | CPython >3.11 Insecure Input Validation resulting in privilege escalation |
| CVE-2026-9669 | CP CPython Python Software Foundation | 8.2 | Jun 8 | bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow |
| CVE-2026-7774 | CP CPython Python Software Foundation | 6.9 | Jun 4 | tarfile.data_filter path traversal bypass allows writing outside the extraction directory |
| CVE-2026-3276 | CP CPython Python Software Foundation | 6.3 | Jun 3 | Potential DoS via quadratic complexity in unicodedata.normalize() |
| CVE-2026-8328 | CP CPython Python Software Foundation | 5.9 | May 13 | FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address |
| CVE-2026-7210 | CP CPython Python Software Foundation | 7.5 | May 11 | The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection |
| CVE-2026-3087 | CP CPython Python Software Foundation | 7.5 | Apr 27 | shutil.unpack_archive() doesn't check for Windows absolute paths in ZIPs |
| CVE-2026-6019 | CP CPython Python Software Foundation | 6.1 | Apr 22 | BaseCookie.js_output() does not neutralize embedded characters |
| CVE-2026-3298 | CP CPython Python Software Foundation | 8.8 | Apr 21 | Out-of-bounds write in Windows asyncio.ProacterEventLoop.sock_recvfrom_into() when using nbytes |
| CVE-2026-5713 | CP CPython Python Software Foundation | 5.3 | Apr 14 | Out-of-bounds read/write during remote profiling and asyncio process introspection when connecting to malicious target |
| CVE-2026-4786 | CP CPython Python Software Foundation | 7.1 | Apr 13 | Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open() |
| CVE-2026-6100 | CP CPython Python Software Foundation | 8.1 | Apr 13 | Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure |
| CVE-2026-3446 | CP CPython Python Software Foundation | 6.0 | Apr 10 | Base64 decoding stops at first padded quad by default |
| CVE-2026-1502 | CP CPython Python Software Foundation | 5.7 | Apr 10 | HTTP client proxy tunnel headers not validated for CR/LF |
| CVE-2026-5271 | PY pymanager Python Software Foundation | 7.8 | Apr 1 | Possible to hijack modules in current working directory |
| CVE-2024-3220 | CP CPython Python Software Foundation | 2.3 | Feb 14 | Default mimetype known files writeable on Windows |
| CVE-2024-6232 | CP CPython Python Software Foundation | 7.5 | Sep 3 | Regular-expression DoS when parsing TarFile headers |
| CVE-2008-4108 | PY Python Python Software Foundation | – | Sep 18 | Tools/faqwiz/move-faqwiz.sh (aka the generic FAQ wizard moving tool) in Python 2.4.5 might allow local users to overwrite arbitrary files via a symlink attack on a tmp$RANDOM.tmp… |
| CVE-2008-0299 | PA Paramiko Python Software Foundation | – | Jan 16 | common.py in Paramiko 1.7.1 and earlier, when using threads or forked processes, does not properly use RandomPool, which allows one session to obtain sensitive information from… |
| CVE-2007-1657 | PY Python Python Software Foundation | – | Mar 24 | Stack-based buffer overflow in the file_compress function in minigzip (Modules/zlib) in Python 2.5 allows context-dependent attackers to execute arbitrary code via a long file… |