Advisories · Technology

Python Software Foundation CPython.

Every CVE that names Python Software Foundation CPython among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-116566 CVE record

CVSS 5.3 Medium

socket.getaddrinfo() accepts embedded null bytes in host and port
- Python Software Foundation CPython
- CWE-158
Not analysed yet 29 Oct 2026
CVE-2026-103995 CVE record

CVSS 2.0 Low

Lenient parsing of integers for response body and chunk framing
- Python Software Foundation CPython
- HTTP request smuggling
Not analysed yet 27 Oct 2026
CVE-2026-115557 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Distrust compromised intermediate certificates in ssl module
- Python Software Foundation CPython
- CWE-299
Not analysed yet 24 Oct 2026
CVE-2026-114583 CVE record

CVSS 6.9 Medium

tar filter allows writing outside destination via empty-named symlink
- Python Software Foundation CPython
- Path traversal
Not analysed yet 22 Oct 2026
CVE-2026-19553 CVE record

CVSS 7.6 High

SSLContext.wrap_bio() missing validation of server_hostname parameter
- Python Software Foundation CPython
- Weak cryptography or TLS
Not analysed yet 30 Sept 2026
CVE-2026-19445 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

Use-after-free of a server-side SSLContext when sni_callback switches contexts
- Python Software Foundation CPython
- Memory corruption
Not analysed yet 30 Sept 2026
CVE-2026-12345 CVE record

CVSS 5.9 Medium

Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory
- Python Software Foundation CPython
- Path traversal
Not analysed yet 29 Sept 2026
CVE-2026-82049 CVE record

CVSS 8.4 High

tarfile extraction filters allow file modification and content disclosure via hard link to symlink
- Python Software Foundation CPython
- Path traversal
Not analysed yet 14 Sept 2026
CVE-2026-87910 CVE record

CVSS 5.7 Medium

tarfile hardlink fallback ignores custom extraction filter rejection via None
- Python Software Foundation CPython
- Path traversal
Not analysed yet 11 Sept 2026
CVE-2026-15310 CVE record

CVSS 2.1 Low

zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits
- Python Software Foundation CPython
- Denial of service
Not analysed yet 25 Aug 2026
CVE-2026-19672 CVE record

CVSS 6.3 Medium

tarfile extraction filter bypass allows creation of directories outside the destination
- Python Software Foundation CPython
- Path traversal
Not analysed yet 19 Aug 2026
CVE-2026-15806 CVE record

CVSS 6.0 Medium

`HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matching
- Python Software Foundation CPython
- Weak cryptography or TLS
- Hard-coded credentials
Not analysed yet 18 Aug 2026
CVE-2026-17084 CVE record

CVSS 6.0 Medium

stringprep.map_table_b2() deviates from RFC 3454 Table B.2
- Python Software Foundation CPython
- CWE-436
Not analysed yet 18 Aug 2026
CVE-2026-18503 CVE record

CVSS 2.4 Low

Super-linear CPU usage for unbounded input to csv.Sniffer.sniff()
- Python Software Foundation CPython
- CWE-1176
Not analysed yet 10 Aug 2026
CVE-2026-6879 CVE record

CVSS 2.0 Low

Quadratic Behavior in xml.etree.ElementPath Index Predicates
- Python Software Foundation CPython
- Denial of service
Not analysed yet 28 Jul 2026
CVE-2026-15308 CVE record

CVSS 8.7 High

Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations
- Python Software Foundation CPython
- Denial of service
Not analysed yet 9 Jul 2026
CVE-2026-4360 CVE record

CVSS 2.0 Low

Tarfile.extract() doesn't fully respect filter parameter
- Python Software Foundation CPython
- CWE-281
Not analysed yet 30 Jun 2026
CVE-2026-11972 CVE record

CVSS 8.2 High

tarfile opened in streaming mode mishandles EOF
- Python Software Foundation CPython
- Denial of service
- CWE-252
Not analysed yet 23 Jun 2026
CVE-2026-0864 CVE record

CVSS 4.1 Medium

Configuration Injection via Carriage Return (\r) in write() method
- Python Software Foundation CPython
- Other injection
Not analysed yet 23 Jun 2026
CVE-2026-11940 CVE record

CVSS 7.8 High

tarfile extraction filter bypass allows escaping the destination directory
- Python Software Foundation CPython
- Path traversal
Not analysed yet 23 Jun 2026
CVE-2026-12003 CVE record

CVSS 5.3 Medium

CPython >3.11 Insecure Input Validation resulting in privilege escalation
- Python Software Foundation CPython
- CWE-427
Not analysed yet 16 Jun 2026
CVE-2026-9669 CVE record

CVSS 8.2 High

bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow
- Python Software Foundation CPython
- Memory corruption
Not analysed yet 8 Jun 2026
CVE-2026-7774 CVE record

CVSS 6.9 Medium

tarfile.data_filter path traversal bypass allows writing outside the extraction directory
- Python Software Foundation CPython
- Path traversal
Not analysed yet 4 Jun 2026
CVE-2026-3276 CVE record

CVSS 6.3 Medium

Potential DoS via quadratic complexity in unicodedata.normalize()
- Python Software Foundation CPython
- Denial of service
Not analysed yet 3 Jun 2026
CVE-2026-8328 CVE record

CVSS 5.9 Medium

FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address
- Python Software Foundation CPython
- Server-side request forgery (SSRF)
Not analysed yet 13 May 2026
CVE-2026-7210 CVE record

CVSS 6.3 Medium

The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection
- Python Software Foundation CPython
- CWE-331
Not analysed yet 11 May 2026
CVE-2026-3087 CVE record

CVSS 6.0 Medium

shutil.unpack_archive() doesn't check for Windows absolute paths in ZIPs
- Python Software Foundation CPython
- Path traversal
Not analysed yet 27 Apr 2026
CVE-2026-6019 CVE record

CVSS 2.1 Low

BaseCookie.js_output() does not neutralize embedded characters
- Python Software Foundation CPython
- CWE-150
Not analysed yet 22 Apr 2026
CVE-2026-3298 CVE record

CVSS 8.8 High

Out-of-bounds write in Windows asyncio.ProacterEventLoop.sock_recvfrom_into() when using nbytes
- Python Software Foundation CPython
- Memory corruption
Not analysed yet 21 Apr 2026
CVE-2026-5713 CVE record

CVSS 5.3 Medium

Out-of-bounds read/write during remote profiling and asyncio process introspection when connecting to malicious target
- Python Software Foundation CPython
- Memory corruption
Not analysed yet 14 Apr 2026
CVE-2026-4786 CVE record

CVSS 7.0 High

Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open()
- Python Software Foundation CPython
- Command injection
Not analysed yet 13 Apr 2026
CVE-2026-6100 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure
- Python Software Foundation CPython
- Memory corruption
Not analysed yet 13 Apr 2026
CVE-2026-3446 CVE record

CVSS 6.0 Medium

Base64 decoding stops at first padded quad by default
- Python Software Foundation CPython
- CWE-345
Not analysed yet 10 Apr 2026
CVE-2026-1502 CVE record

CVSS 5.7 Medium

HTTP client proxy tunnel headers not validated for CR/LF
- Python Software Foundation CPython
- Other injection
Not analysed yet 10 Apr 2026
CVE-2026-4519 CVE record

CVSS 7.0 High

webbrowser.open() allows leading dashes in URLs
- Python Software Foundation CPython
- Command injection
- CWE-20
Not analysed yet 20 Mar 2026
CVE-2026-3479 CVE record

CVSS 0.0 None

pkgutil.get_data() does not enforce documented restrictions
- Python Software Foundation CPython
- Path traversal
Not analysed yet 18 Mar 2026
CVE-2026-4224 CVE record

CVSS 6.0 Medium

Stack overflow parsing XML with deeply nested DTD content models
- Python Software Foundation CPython
- Denial of service
Not analysed yet 16 Mar 2026
CVE-2026-3644 CVE record

CVSS 6.0 Medium

Incomplete control character validation in http.cookies
- Python Software Foundation CPython
- CWE-20
- CWE-116
Not analysed yet 16 Mar 2026
CVE-2025-13462 CVE record

CVSS 2.0 Low

tarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handling
- Python Software Foundation CPython
- Other injection
- Unrestricted file upload
Not analysed yet 12 Mar 2026
CVE-2026-2297 CVE record

CVSS 5.7 Medium

SourcelessFileLoader does not use io.open_code()
- Python Software Foundation CPython
- Information disclosure
Not analysed yet 4 Mar 2026
CVE-2026-1299 CVE record

CVSS 6.0 Medium

email BytesGenerator header injection due to unquoted newlines
- Python Software Foundation CPython
- Other injection
Not analysed yet 23 Jan 2026
CVE-2025-12781 CVE record

CVSS 6.3 Medium

base64.b64decode() always accepts "+/" characters, despite setting altchars
- Python Software Foundation CPython
- CWE-704
Not analysed yet 21 Jan 2026
CVE-2026-0672 CVE record

CVSS 6.0 Medium

Header injection in http.cookies.Morsel
- Python Software Foundation CPython
- Other injection
Not analysed yet 20 Jan 2026
CVE-2025-15367 CVE record

CVSS 5.9 Medium

POP3 command injection in user-controlled commands
- Python Software Foundation CPython
- Command injection
Not analysed yet 20 Jan 2026
CVE-2025-15366 CVE record

CVSS 5.9 Medium

IMAP command injection in user-controlled commands
- Python Software Foundation CPython
- Command injection
Not analysed yet 20 Jan 2026
CVE-2025-15282 CVE record

CVSS 6.0 Medium

Header injection via newlines in data URL mediatype
- Python Software Foundation CPython
- Other injection
Not analysed yet 20 Jan 2026
CVE-2026-0865 CVE record

CVSS 5.9 Medium

wsgiref.headers.Headers allows header newline injection
- Python Software Foundation CPython
- Other injection
Not analysed yet 20 Jan 2026
CVE-2025-11468 CVE record

CVSS 5.7 Medium

Folding email comments of unfoldable characters doesn't preserve parenthesis
- Python Software Foundation CPython
- Other injection
Not analysed yet 20 Jan 2026
CVE-2025-12084 CVE record

CVSS 6.3 Medium

Quadratic complexity in node ID cache clearing
- Python Software Foundation CPython
- Denial of service
Not analysed yet 3 Dec 2025
CVE-2025-13837 CVE record

CVSS 2.1 Low

Out-of-memory when loading Plist
- Python Software Foundation CPython
- Denial of service
Not analysed yet 1 Dec 2025
CVE-2025-13836 CVE record

CVSS 6.3 Medium

Excessive read buffering DoS in http.client
- Python Software Foundation CPython
- Denial of service
Not analysed yet 1 Dec 2025
CVE-2025-6075 CVE record

CVSS 1.8 Low

Quadratic complexity in os.path.expandvars() with user-controlled template
- Python Software Foundation CPython
- Denial of service
Not analysed yet 31 Oct 2025
CVE-2025-8291 CVE record

CVSS 4.3 Medium

ZIP64 End of Central Directory (EOCD) Locator record offset not checked
- Python Software Foundation CPython
- CWE-1285
Not analysed yet 7 Oct 2025
CVE-2025-8194 CVE record

CVSS 7.5 High

Tarfile infinite loop during parsing with negative member offset
- Python Software Foundation CPython
- Denial of service
Not analysed yet 28 Jul 2025
CVE-2025-6069 CVE record

CVSS 4.3 Medium

HTMLParser quadratic complexity when processing malformed inputs
- Python Software Foundation CPython
- Denial of service
Not analysed yet 17 Jun 2025
CVE-2024-12718 CVE record

CVSS 5.3 Medium

Bypass extraction filter to modify file metadata outside extraction directory
- Python Software Foundation CPython
- Path traversal
Not analysed yet 3 Jun 2025
CVE-2025-4435 CVE record

CVSS 7.5 High

Tarfile extracts filtered members when errorlevel=0
- Python Software Foundation CPython
- CWE-682
Not analysed yet 3 Jun 2025
CVE-2025-4138 CVE record

CVSS 7.5 High

Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory
- Python Software Foundation CPython
- Path traversal
Not analysed yet 3 Jun 2025
CVE-2025-4330 CVE record

CVSS 7.5 High

Extraction filter bypass for linking outside extraction directory
- Python Software Foundation CPython
- Path traversal
Not analysed yet 3 Jun 2025
CVE-2025-4517 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Arbitrary writes via tarfile realpath overflow
- Python Software Foundation CPython
- Path traversal
Not analysed yet 3 Jun 2025