CVE-2024-4030: Python Software Foundation CPython

Affected products, as the CNA wrote them
Vendor	Product	Versions
Python Software Foundation	CPython	affected before 3.8.20 python affected 3.9.0 to before 3.9.20 python affected 3.10.0 to before 3.10.15 python affected 3.11.0 to before 3.11.10 python affected 3.12.0 to before 3.12.4 python affected 3.13.0a1 to before 3.13.0b1 python Other versions: unaffected

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

Score	Rating	CVSS	Vector	Source
7.1	High	3.1	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N	ADP (CISA-ADP)

CISA KEV Not listed.
EPSS 0.0030, the 22nd percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 7 May 2024. New records show when each source confirmed them.

Sources

CVE List: CVE-2024-4030
NVD: CVE-2024-4030

References from the CNA

mail.python.org/archives/list/[email protected]/thread/PRGS5OR3N3PNPT4BMV2VAGN5GMUI5636/ vendor-advisory
github.com/python/cpython/issues/118486 issue-tracking
github.com/python/cpython/commit/81939dad77001556c527485d31a2d0f4a759033e patch
github.com/python/cpython/commit/8ed546679524140d8282175411fd141fe7df070d patch
github.com/python/cpython/commit/35c799d79177b962ddace2fa068101465570a29a patch
github.com/python/cpython/commit/5130731c9e779b97d00a24f54cdce73ce9975dfd patch
github.com/python/cpython/commit/66f8bb76a15e64a1bb7688b177ed29e26230fdee patch
github.com/python/cpython/commit/6d0850c4c8188035643586ab4d8ec2468abd699e patch
github.com/python/cpython/commit/91e3669e01245185569d09e9e6e11641282971ee patch
github.com/python/cpython/commit/94591dca510c796c7d40e9b4167ea56f2fdf28ca patch
github.com/python/cpython/commit/c8f868dc52f98011d0f9b459b6487920bfb0ac4d patch
github.com/python/cpython/commit/d86b49411753bf2c83291e3a14ae43fefded2f84 patch
github.com/python/cpython/commit/e1dfa978b1ad210d551385ad8073ec6154f53763 patch
github.com/python/cpython/commit/eb29e2f5905da93333d1ce78bc98b151e763ff46 patch
security.netapp.com/advisory/ntap-20240705-0005/

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.