Python Software Foundation CPython
78 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-103995 | < 3.16.0 | Lenient parsing of integers for response body and chunk framing | LOW 2.0 | |||
| CVE-2026-115557 | < 3.11.18 ; 3.12.0 – < 3.12.16 ; 3.13.0 – < 3.13.18 ; … | Distrust compromised intermediate certificates in ssl module | CRITICAL 9.4 | 0.5 % | ||
| CVE-2026-114583 | < 3.11.18 ; 3.12.0 – < 3.12.16 ; 3.13.0 – < 3.13.18 ; … | tar filter allows writing outside destination via empty-named symlink | MEDIUM 6.9 | 0.2 % | ||
| CVE-2026-19553 | < 3.10.22 ; 3.11.0 – < 3.11.17 ; 3.12.0 – < 3.12.15 ; … | SSLContext.wrap_bio() missing validation of server_hostname parameter | HIGH 7.6 | 0.5 % | ||
| CVE-2026-19445 | < 3.10.22 ; 3.11.0 – < 3.11.17 ; 3.12.0 – < 3.12.15 ; … | Use-after-free of a server-side SSLContext when sni_callback switches contexts | CRITICAL 9.2 | 0.5 % | ||
| CVE-2026-12345 | < 3.12.15 ; 3.13.0 – < 3.13.18 ; 3.14.0 – < 3.14.9 ; … | Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory | MEDIUM 5.9 | 0.3 % | ||
| CVE-2026-82049 | < 3.10.22 ; 3.11.0 – < 3.11.17 ; 3.12.0 – < 3.12.15 ; … | tarfile extraction filters allow file modification and content disclosure via hard link to symlink | HIGH 8.4 | 0.2 % | ||
| CVE-2026-87910 | < 3.10.22 ; 3.11.0 – < 3.11.17 ; 3.12.0 – < 3.12.15 ; … | tarfile hardlink fallback ignores custom extraction filter rejection via None | MEDIUM 5.7 | 0.6 % | ||
| CVE-2026-15310 | < 3.10.22 ; 3.11.0 – < 3.11.17 ; 3.12.0 – < 3.12.15 ; … | zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits | LOW 2.1 | 0.5 % | ||
| CVE-2026-19672 | < 3.16.0 | tarfile extraction filter bypass allows creation of directories outside the destination | MEDIUM 6.3 | 0.5 % | ||
| CVE-2026-15806 | < 3.10.22 ; 3.11.0 – < 3.11.17 ; 3.12.0 – < 3.12.15 ; … | `HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matching | MEDIUM 6.0 | 0.5 % | ||
| CVE-2026-17084 | < 3.10.22 ; 3.11.0 – < 3.11.17 ; 3.12.0 – < 3.12.15 ; … | stringprep.map_table_b2() deviates from RFC 3454 Table B.2 | MEDIUM 6.0 | 0.7 % | ||
| CVE-2026-18503 | < 3.10.21 ; 3.11.0 – < 3.11.16 ; 3.12.0 – < 3.12.14 ; … | Super-linear CPU usage for unbounded input to csv.Sniffer.sniff() | LOW 2.4 | 0.1 % | ||
| CVE-2026-6879 | < 3.10.21 ; 3.11.0 – < 3.11.16 ; 3.12.0 – < 3.12.14 ; … | Quadratic Behavior in xml.etree.ElementPath Index Predicates | LOW 2.0 | 0.4 % | ||
| CVE-2026-15308 | < 3.10.21 ; 3.11.0 – < 3.11.16 ; 3.12.0 – < 3.12.14 ; … | Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations | HIGH 8.7 | 0.6 % | ||
| CVE-2026-4360 | < 3.10.21 ; 3.11.0 – < 3.11.16 ; 3.12.0 – < 3.12.14 ; … | Tarfile.extract() doesn't fully respect filter parameter | LOW 2.0 | 0.5 % | ||
| CVE-2026-11972 | < 3.10.21 ; 3.11.0 – < 3.11.16 ; 3.12.0 – < 3.12.14 ; … | tarfile opened in streaming mode mishandles EOF | HIGH 8.2 | 0.7 % | ||
| CVE-2026-0864 | < 3.10.21 ; 3.11.0 – < 3.11.16 ; 3.12.0 – < 3.12.14 ; … | Configuration Injection via Carriage Return (\r) in write() method | MEDIUM 4.1 | 0.1 % | ||
| CVE-2026-11940 | < 3.10.21 ; 3.11.0 – < 3.11.16 ; 3.12.0 – < 3.12.14 ; … | tarfile extraction filter bypass allows escaping the destination directory | HIGH 7.8 | 0.8 % | ||
| CVE-2026-12003 | < 3.11.16 ; 3.12.0 – < 3.12.14 ; 3.13.0 – < 3.13.15 ; … | CPython >3.11 Insecure Input Validation resulting in privilege escalation | MEDIUM 5.3 | 0.1 % | ||
| CVE-2026-9669 | < 3.10.21 ; 3.11.0 – < 3.11.16 ; 3.12.0 – < 3.12.14 ; … | bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow | HIGH 8.2 | 0.4 % | ||
| CVE-2026-7774 | < 3.10.21 ; 3.11.0 – < 3.11.16 ; 3.12.0 – < 3.12.14 ; … | tarfile.data_filter path traversal bypass allows writing outside the extraction directory | MEDIUM 6.9 | 0.6 % | ||
| CVE-2026-3276 | < 3.10.21 ; 3.11.0 – < 3.11.16 ; 3.12.0 – < 3.12.14 ; … | Potential DoS via quadratic complexity in unicodedata.normalize() | MEDIUM 6.3 | 0.5 % | ||
| CVE-2026-8328 | < 3.10.21 ; 3.11.0 – < 3.11.16 ; 3.12.0 – < 3.12.14 ; … | FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address | MEDIUM 5.9 | 0.5 % | ||
| CVE-2026-7210 | < 3.10.22 ; 3.11.0 – < 3.11.16 ; 3.12.0 – < 3.12.14 ; … | The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection | MEDIUM 6.3 | 0.7 % | ||
| CVE-2026-3087 | < 3.10.21 ; 3.11.0 – < 3.11.16 ; 3.12.0 – < 3.12.14 ; … | shutil.unpack_archive() doesn't check for Windows absolute paths in ZIPs | MEDIUM 6.0 | 0.6 % | ||
| CVE-2026-6019 | < 3.13.14 ; 3.14.0a1 – < 3.14.5rc1 ; 3.15.0a1 – < 3.15.0b1 | BaseCookie.js_output() does not neutralize embedded characters | LOW 2.1 | 0.2 % | ||
| CVE-2026-3298 | < 3.11.16 ; 3.12.0 – < 3.12.14 ; 3.13.0 – < 3.13.14 ; … | Out-of-bounds write in Windows asyncio.ProacterEventLoop.sock_recvfrom_into() when using nbytes | HIGH 8.8 | 0.4 % | ||
| CVE-2026-5713 | < 3.14.5 ; 3.15.0a1 – < 3.15.0b1 | Out-of-bounds read/write during remote profiling and asyncio process introspection when connecting to malicious target | MEDIUM 5.3 | 0.1 % | ||
| CVE-2026-4786 | < 3.10.21 ; 3.11.0 – < 3.11.16 ; 3.12.0 – < 3.12.14 ; … | Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open() | HIGH 7.0 | 0.3 % | ||
| CVE-2026-6100 | < 3.10.21 ; 3.11.0 – < 3.11.16 ; 3.12.0 – < 3.12.14 ; … | Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure | CRITICAL 9.1 | 0.6 % | ||
| CVE-2026-3446 | < 3.13.13 ; 3.14.0 – < 3.14.4 ; 3.15.0a1 – < 3.15.0a8 | Base64 decoding stops at first padded quad by default | MEDIUM 6.0 | 0.2 % | ||
| CVE-2026-1502 | < 3.10.21 ; 3.11.0 – < 3.11.16 ; 3.12.0 – < 3.12.14 ; … | HTTP client proxy tunnel headers not validated for CR/LF | MEDIUM 5.7 | 0.6 % | ||
| CVE-2026-4519 | < 3.10.21 ; 3.11.0 – < 3.11.16 ; 3.12.0 – < 3.12.14 ; … | webbrowser.open() allows leading dashes in URLs | HIGH 7.0 | 0.3 % | ||
| CVE-2026-3479 | < 3.13.13 ; 3.14.0 – < 3.14.4 ; 3.15.0a1 – < 3.15.0a8 | pkgutil.get_data() does not enforce documented restrictions | NONE 0.0 | 0.2 % | ||
| CVE-2026-4224 | < 3.10.21 ; 3.11.0 – < 3.11.16 ; 3.12.0 – < 3.12.14 ; … | Stack overflow parsing XML with deeply nested DTD content models | MEDIUM 6.0 | 0.7 % | ||
| CVE-2026-3644 | < 3.10.21 ; 3.11.0 – < 3.11.16 ; 3.12.0 – < 3.12.14 ; … | Incomplete control character validation in http.cookies | MEDIUM 6.0 | 0.5 % | ||
| CVE-2025-13462 | < 3.10.21 ; 3.11.0 – < 3.11.16 ; 3.12.0 – < 3.12.14 ; … | tarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handling | LOW 2.0 | 0.2 % | ||
| CVE-2026-2297 | < 3.10.21 ; 3.11.0 – < 3.11.16 ; 3.12.0 – < 3.12.14 ; … | SourcelessFileLoader does not use io.open_code() | MEDIUM 5.7 | 0.2 % | ||
| CVE-2026-1299 | < 3.10.20 ; 3.11.0 – < 3.11.15 ; 3.12.0 – < 3.12.13 ; … | email BytesGenerator header injection due to unquoted newlines | MEDIUM 6.0 | 0.6 % | ||
| CVE-2025-12781 | < 3.13.10 ; 3.14.0 – < 3.14.1 ; 3.15.0a1 – < 3.15.0a2 | base64.b64decode() always accepts "+/" characters, despite setting altchars | MEDIUM 6.3 | 0.9 % | ||
| CVE-2026-0672 | < 3.10.20 ; 3.11.0 – < 3.11.15 ; 3.12.0 – < 3.12.13 ; … | Header injection in http.cookies.Morsel | MEDIUM 6.0 | 0.5 % | ||
| CVE-2025-15367 | < 3.15.0a6 | POP3 command injection in user-controlled commands | MEDIUM 5.9 | 0.4 % | ||
| CVE-2025-15366 | < 3.13.15 ; 3.14.0 – < 3.14.7 ; 3.15.0a1 – < 3.15.0a6 | IMAP command injection in user-controlled commands | MEDIUM 5.9 | 0.4 % | ||
| CVE-2025-15282 | < 3.10.20 ; 3.11.0 – < 3.11.15 ; 3.12.0 – < 3.12.13 ; … | Header injection via newlines in data URL mediatype | MEDIUM 6.0 | 0.5 % | ||
| CVE-2026-0865 | < 3.10.20 ; 3.11.0 – < 3.11.15 ; 3.12.0 – < 3.12.13 ; … | wsgiref.headers.Headers allows header newline injection | MEDIUM 5.9 | 0.6 % | ||
| CVE-2025-11468 | < 3.10.20 ; 3.11.0 – < 3.11.15 ; 3.12.0 – < 3.12.13 ; … | Folding email comments of unfoldable characters doesn't preserve parenthesis | MEDIUM 5.7 | 0.6 % | ||
| CVE-2025-12084 | < 3.10.20 ; 3.11.0 – < 3.11.15 ; 3.12.0 – < 3.12.13 ; … | Quadratic complexity in node ID cache clearing | MEDIUM 6.3 | 0.8 % | ||
| CVE-2025-13837 | < 3.10.20 ; 3.11.0 – < 3.11.15 ; 3.12.0 – < 3.12.13 ; … | Out-of-memory when loading Plist | LOW 2.1 | 0.2 % | ||
| CVE-2025-13836 | < 3.10.20 ; 3.11.0 – < 3.11.15 ; 3.12.0 – < 3.12.13 ; … | Excessive read buffering DoS in http.client | MEDIUM 6.3 | 1.6 % | ||
| CVE-2025-6075 | < 3.9.25 ; 3.10.0 – < 3.10.20 ; 3.11.0 – < 3.11.15 ; … | Quadratic complexity in os.path.expandvars() with user-controlled template | LOW 1.8 | 0.1 % | ||
| CVE-2025-8291 | < 3.9.24 ; 3.10.0 – < 3.10.19 ; 3.11.0 – < 3.11.14 ; … | ZIP64 End of Central Directory (EOCD) Locator record offset not checked | MEDIUM 4.3 | 0.5 % | ||
| CVE-2025-8194 | < 3.9.24 ; 3.10.0 – < 3.10.19 ; 3.11.0 – < 3.11.14 ; … | Tarfile infinite loop during parsing with negative member offset | HIGH 7.5 | 0.7 % | ||
| CVE-2025-6069 | < 3.9.24 ; 3.10.0 – < 3.10.19 ; 3.11.0 – < 3.11.14 ; … | HTMLParser quadratic complexity when processing malformed inputs | MEDIUM 4.3 | 0.6 % | ||
| CVE-2024-12718 | < 3.9.23 ; 3.10.0 – < 3.10.18 ; 3.11.0 – < 3.11.13 ; … | Bypass extraction filter to modify file metadata outside extraction directory | MEDIUM 5.3 | 0.8 % | ||
| CVE-2025-4435 | < 3.9.23 ; 3.10.0 – < 3.10.18 ; 3.11.0 – < 3.11.13 ; … | Tarfile extracts filtered members when errorlevel=0 | HIGH 7.5 | 0.6 % | ||
| CVE-2025-4138 | < 3.9.23 ; 3.10.0 – < 3.10.18 ; 3.11.0 – < 3.11.13 ; … | Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory | HIGH 7.5 | 1.4 % | ||
| CVE-2025-4330 | < 3.9.23 ; 3.10.0 – < 3.10.18 ; 3.11.0 – < 3.11.13 ; … | Extraction filter bypass for linking outside extraction directory | HIGH 7.5 | 0.9 % | ||
| CVE-2025-4517 | < 3.9.23 ; 3.10.0 – < 3.10.18 ; 3.11.0 – < 3.11.13 ; … | Arbitrary writes via tarfile realpath overflow | CRITICAL 9.4 | 1.4 % | ||
| CVE-2025-4516 | < 3.9.23 ; 3.10.0 – < 3.10.18 ; 3.11.0 – < 3.11.13 ; … | Use-after-free in "unicode_escape" decoder with error handler | MEDIUM 5.9 | 0.2 % | ||
| CVE-2025-1795 | < 3.9.23 ; 3.10.0 – < 3.10.17 ; 3.11.0 – < 3.11.9 ; … | Mishandling of comma during folding and unicode-encoding of email headers | LOW 2.3 | 0.6 % | ||
| CVE-2024-3220 | < 3.11.18 ; 3.12.0 – < 3.12.16 ; 3.13.0 – < 3.13.18 ; … | Default mimetype known files writeable on Windows | LOW 2.3 | 0.7 % | ||
| CVE-2025-0938 | < 3.9.22 ; 3.10.0 – < 3.10.17 ; 3.11.0 – < 3.11.12 ; … | URL parser allowed square brackets in domain names | MEDIUM 6.3 | 1.6 % | ||
| CVE-2024-12254 | < 3.12.9 ; 3.13.0 – < 3.13.2 ; 3.14.0a1 – < 3.14.0a3 | Unbounded memory buffering in SelectorSocketTransport.writelines() | HIGH 8.7 | 1.9 % | ||
| CVE-2024-11168 | < 3.9.21 ; 3.10.0 – < 3.10.16 ; 3.11.0 – < 3.11.4 ; … | Improper validation of IPv6 and IPvFuture addresses | MEDIUM 6.3 | 0.7 % | ||
| CVE-2024-9287 | < 3.9.21 ; 3.10.0 – < 3.10.16 ; 3.11.0 – < 3.11.11 ; … | Virtual environment (venv) activation scripts don't quote paths | MEDIUM 5.3 | 0.6 % | ||
| CVE-2024-6232 | < 3.8.20 ; 3.9.0 – < 3.9.20 ; 3.10.0 – < 3.10.15 ; … | Regular-expression DoS when parsing TarFile headers | HIGH 7.5 | 2.2 % | ||
| CVE-2024-8088 | < 3.8.20 ; 3.9.0 – < 3.9.20 ; 3.10.0 – < 3.10.15 ; … | Infinite loop when iterating over zip archive entry names from zipfile.Path | HIGH 8.7 | 1.3 % | ||
| CVE-2024-7592 | < 3.8.20 ; 3.9.0 – < 3.9.20 ; 3.10.0 – < 3.10.15 ; … | Quadratic complexity parsing cookies with backslashes | HIGH 7.5 | 2.3 % | ||
| CVE-2024-6923 | < 3.8.20 ; 3.9.0 – < 3.9.20 ; 3.10.0 – < 3.10.15 ; … | Email header injection due to unquoted newlines | MEDIUM 5.5 | 1.1 % | ||
| CVE-2024-3219 | < 3.8.20 ; 3.9.0 – < 3.9.20 ; 3.10.0 – < 3.10.15 ; … | Pure-Python fallback of socket.socketpair() doesn’t authenticate peer connection | MEDIUM 5.1 | 0.2 % | ||
| CVE-2024-5642 | < 3.9.24 ; 3.10.0a1 – < 3.10.0b1 | Buffer overread when using an empty list with SSLContext.set_npn_protocols() | MEDIUM 6.5 | 0.7 % | ||
| CVE-2024-0397 | < 3.8.20 ; 3.9.0 – < 3.9.20 ; 3.10.0 – < 3.10.14 ; … | Memory race condition in ssl.SSLContext certificate store methods | HIGH 7.4 | 0.8 % | ||
| CVE-2024-4032 | < 3.8.20 ; 3.9.0 – < 3.9.20 ; 3.10.0 – < 3.10.15 ; … | Incorrect IPv4 and IPv6 private ranges | HIGH 7.5 | 1.1 % | ||
| CVE-2024-4030 | < 3.8.20 ; 3.9.0 – < 3.9.20 ; 3.10.0 – < 3.10.15 ; … | tempfile.mkdtemp() may be readable and writeable by all users on Windows | HIGH 7.1 | 0.3 % | ||
| CVE-2023-6597 | < 3.8.19 ; 3.9.0 – < 3.9.19 ; 3.10.0 – < 3.10.14 ; … | An issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and pri | HIGH 7.8 | 0.3 % | ||
| CVE-2024-0450 | < 3.8.19 ; 3.9.0 – < 3.9.19 ; 3.10.0 – < 3.10.14 ; … | Quoted zip-bomb protection for zipfile | MEDIUM 6.2 | 0.3 % | ||
| CVE-2023-6507 | < 3.12.1 ; 3.13.0a1 – < 3.13.0a3 | Groups not dropped before running subprocess when using empty 'extra_groups' parameter | MEDIUM 6.1 | 1.3 % |