Advisories · Technology

Python Software Foundation CPython.

Every CVE that names Python Software Foundation CPython among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-4516 CVE record

CVSS 5.9 Medium

Use-after-free in "unicode_escape" decoder with error handler
- Python Software Foundation CPython
- Memory corruption
Not analysed yet 15 May 2025
CVE-2025-1795 CVE record

CVSS 2.3 Low

Mishandling of comma during folding and unicode-encoding of email headers
- Python Software Foundation CPython
- CWE-116
Not analysed yet 28 Feb 2025
CVE-2024-3220 CVE record

CVSS 2.3 Low

Default mimetype known files writeable on Windows
- Python Software Foundation CPython
- CWE-426
Not analysed yet 14 Feb 2025
CVE-2025-0938 CVE record

CVSS 6.3 Medium

URL parser allowed square brackets in domain names
- Python Software Foundation CPython
- CWE-20
Not analysed yet 31 Jan 2025
CVE-2024-12254 CVE record

CVSS 8.7 High

Unbounded memory buffering in SelectorSocketTransport.writelines()
- Python Software Foundation CPython
- Denial of service
Not analysed yet 6 Dec 2024
CVE-2024-11168 CVE record

CVSS 6.3 Medium

Improper validation of IPv6 and IPvFuture addresses
- Python Software Foundation CPython
- Server-side request forgery (SSRF)
Not analysed yet 12 Nov 2024
CVE-2024-9287 CVE record

CVSS 5.3 Medium

Virtual environment (venv) activation scripts don't quote paths
- Python Software Foundation CPython
- CWE-428
Not analysed yet 22 Oct 2024
CVE-2024-6232 CVE record

CVSS 7.5 High

Regular-expression DoS when parsing TarFile headers
- Python Software Foundation CPython
- Denial of service
Not analysed yet 3 Sept 2024
CVE-2024-8088 CVE record

CVSS 8.7 High

Infinite loop when iterating over zip archive entry names from zipfile.Path
- Python Software Foundation CPython
- Denial of service
Not analysed yet 22 Aug 2024
CVE-2024-7592 CVE record

CVSS 7.5 High

Quadratic complexity parsing cookies with backslashes
- Python Software Foundation CPython
- Denial of service
Not analysed yet 19 Aug 2024
CVE-2024-6923 CVE record

CVSS 5.5 Medium

Email header injection due to unquoted newlines
- Python Software Foundation CPython
- Code injection
Not analysed yet 1 Aug 2024
CVE-2024-3219 CVE record

CVSS 5.1 Medium

Pure-Python fallback of socket.socketpair() doesn’t authenticate peer connection
- Python Software Foundation CPython
- Authentication bypass
Not analysed yet 29 Jul 2024
CVE-2024-5642 CVE record

CVSS 6.5 Medium

Buffer overread when using an empty list with SSLContext.set_npn_protocols()
- Python Software Foundation CPython
Not analysed yet 27 Jun 2024
CVE-2024-0397 CVE record

CVSS 7.4 High

Memory race condition in ssl.SSLContext certificate store methods
- Python Software Foundation CPython
- Race condition
Not analysed yet 17 Jun 2024
CVE-2024-4032 CVE record

CVSS 7.5 High

Incorrect IPv4 and IPv6 private ranges
- Python Software Foundation CPython
- CWE-697
Not analysed yet 17 Jun 2024
CVE-2024-4030 CVE record

CVSS 7.1 High

tempfile.mkdtemp() may be readable and writeable by all users on Windows
- Python Software Foundation CPython
- Broken access control
Not analysed yet 7 May 2024
CVE-2023-6597 CVE record

CVSS 7.8 High

Python Software Foundation CPython: An issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions…
- Python Software Foundation CPython
Not analysed yet 19 Mar 2024
CVE-2024-0450 CVE record

CVSS 6.2 Medium

Quoted zip-bomb protection for zipfile
- Python Software Foundation CPython
- CWE-405
Not analysed yet 19 Mar 2024
CVE-2023-6507 CVE record

CVSS 6.1 Medium

Groups not dropped before running subprocess when using empty 'extra_groups' parameter
- Python Software Foundation CPython
- Privilege escalation
Not analysed yet 8 Dec 2023