{"items":[{"id":"CVE-2026-116566","published":"2026-10-29T17:45:47.583Z","updated":"2026-10-30T17:18:15.574Z","title":"socket.getaddrinfo() accepts embedded null bytes in host and port","severity":"MEDIUM","score":5.3,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00259,"kevAdded":null},{"id":"CVE-2026-103995","published":"2026-10-27T19:58:52.521Z","updated":"2026-10-28T00:33:14.944Z","title":"Lenient parsing of integers for response body and chunk framing","severity":"LOW","score":2,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.0036,"kevAdded":null},{"id":"CVE-2026-115557","published":"2026-10-24T14:15:14.283Z","updated":"2026-11-02T14:11:17.949Z","title":"Distrust compromised intermediate certificates in ssl module","severity":"CRITICAL","score":9.4,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00534,"kevAdded":null},{"id":"CVE-2026-114583","published":"2026-10-22T20:57:36.019Z","updated":"2026-11-02T12:32:42.085Z","title":"tar filter allows writing outside destination via empty-named symlink","severity":"MEDIUM","score":6.9,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00261,"kevAdded":null},{"id":"CVE-2026-19553","published":"2026-09-30T16:17:39.368Z","updated":"2026-10-16T18:33:12.475Z","title":"SSLContext.wrap_bio() missing validation of server_hostname parameter","severity":"HIGH","score":7.6,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00547,"kevAdded":null},{"id":"CVE-2026-19445","published":"2026-09-30T16:16:04.923Z","updated":"2026-10-03T00:36:46.398Z","title":"Use-after-free of a server-side SSLContext when sni_callback switches contexts","severity":"CRITICAL","score":9.2,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00524,"kevAdded":null},{"id":"CVE-2026-12345","published":"2026-09-29T17:46:01.811Z","updated":"2026-10-26T00:36:23.425Z","title":"Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory","severity":"MEDIUM","score":5.9,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00344,"kevAdded":null},{"id":"CVE-2026-82049","published":"2026-09-14T19:14:03.873Z","updated":"2026-10-11T00:39:42.376Z","title":"tarfile extraction filters allow file modification and content disclosure via hard link to symlink","severity":"HIGH","score":8.4,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00188,"kevAdded":null},{"id":"CVE-2026-87910","published":"2026-09-11T17:27:04.339Z","updated":"2026-10-22T00:31:28.666Z","title":"tarfile hardlink fallback ignores custom extraction filter rejection via None","severity":"MEDIUM","score":5.7,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00609,"kevAdded":null},{"id":"CVE-2026-15310","published":"2026-08-25T15:07:58.054Z","updated":"2026-10-02T00:39:36.038Z","title":"zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits","severity":"LOW","score":2.1,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00526,"kevAdded":null},{"id":"CVE-2026-19672","published":"2026-08-19T15:24:08.616Z","updated":"2026-08-27T19:41:14.871Z","title":"tarfile extraction filter bypass allows creation of directories outside the destination","severity":"MEDIUM","score":6.3,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00472,"kevAdded":null},{"id":"CVE-2026-15806","published":"2026-08-18T15:50:57.983Z","updated":"2026-10-02T00:39:20.429Z","title":"`HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matching","severity":"MEDIUM","score":6,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00528,"kevAdded":null},{"id":"CVE-2026-17084","published":"2026-08-18T13:57:31.876Z","updated":"2026-10-02T00:39:09.384Z","title":"stringprep.map_table_b2() deviates from RFC 3454 Table B.2","severity":"MEDIUM","score":6,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00734,"kevAdded":null},{"id":"CVE-2026-18503","published":"2026-08-10T13:45:31.618Z","updated":"2026-10-14T00:34:46.583Z","title":"Super-linear CPU usage for unbounded input to csv.Sniffer.sniff()","severity":"LOW","score":2.4,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2026-6879","published":"2026-07-28T13:46:30.650Z","updated":"2026-08-13T00:27:08.214Z","title":"Quadratic Behavior in xml.etree.ElementPath Index Predicates","severity":"LOW","score":2,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00355,"kevAdded":null},{"id":"CVE-2026-15308","published":"2026-07-09T17:10:57.317Z","updated":"2026-08-13T00:28:26.690Z","title":"Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations","severity":"HIGH","score":8.7,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00637,"kevAdded":null},{"id":"CVE-2026-4360","published":"2026-06-30T14:45:35.601Z","updated":"2026-08-13T00:27:33.412Z","title":"Tarfile.extract() doesn't fully respect filter parameter","severity":"LOW","score":2,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00481,"kevAdded":null},{"id":"CVE-2026-11972","published":"2026-06-23T22:02:45.434Z","updated":"2026-08-13T00:28:46.899Z","title":"tarfile opened in streaming mode mishandles EOF","severity":"HIGH","score":8.2,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00715,"kevAdded":null},{"id":"CVE-2026-0864","published":"2026-06-23T17:42:01.947Z","updated":"2026-08-13T00:29:03.258Z","title":"Configuration Injection via Carriage Return (\\r) in write() method","severity":"MEDIUM","score":4.1,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00126,"kevAdded":null},{"id":"CVE-2026-11940","published":"2026-06-23T16:04:17.321Z","updated":"2026-08-13T00:28:51.345Z","title":"tarfile extraction filter bypass allows escaping the destination directory","severity":"HIGH","score":7.8,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.0075,"kevAdded":null},{"id":"CVE-2026-12003","published":"2026-06-16T15:18:42.998Z","updated":"2026-08-13T00:28:42.174Z","title":"CPython >3.11 Insecure Input Validation resulting in privilege escalation","severity":"MEDIUM","score":5.3,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00142,"kevAdded":null},{"id":"CVE-2026-9669","published":"2026-06-08T22:01:15.420Z","updated":"2026-08-13T00:26:48.913Z","title":"bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow","severity":"HIGH","score":8.2,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00428,"kevAdded":null},{"id":"CVE-2026-7774","published":"2026-06-04T14:21:23.904Z","updated":"2026-08-13T00:26:58.538Z","title":"tarfile.data_filter path traversal bypass allows writing outside the extraction directory","severity":"MEDIUM","score":6.9,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00598,"kevAdded":null},{"id":"CVE-2026-3276","published":"2026-06-03T14:29:39.727Z","updated":"2026-08-13T00:28:05.768Z","title":"Potential DoS via quadratic complexity in unicodedata.normalize()","severity":"MEDIUM","score":6.3,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00486,"kevAdded":null},{"id":"CVE-2026-8328","published":"2026-05-13T20:14:33.751Z","updated":"2026-08-13T00:26:54.111Z","title":"FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address","severity":"MEDIUM","score":5.9,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00457,"kevAdded":null},{"id":"CVE-2026-7210","published":"2026-05-11T17:19:09.784Z","updated":"2026-10-02T00:35:51.824Z","title":"The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection","severity":"MEDIUM","score":6.3,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00672,"kevAdded":null},{"id":"CVE-2026-3087","published":"2026-04-27T20:46:43.201Z","updated":"2026-08-13T00:28:13.615Z","title":"shutil.unpack_archive() doesn't check for Windows absolute paths in ZIPs","severity":"MEDIUM","score":6,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00551,"kevAdded":null},{"id":"CVE-2026-6019","published":"2026-04-22T19:28:08.720Z","updated":"2026-06-10T18:58:07.798Z","title":"BaseCookie.js_output() does not neutralize embedded characters","severity":"LOW","score":2.1,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00211,"kevAdded":null},{"id":"CVE-2026-3298","published":"2026-04-21T14:45:01.919Z","updated":"2026-08-13T00:27:55.667Z","title":"Out-of-bounds write in Windows asyncio.ProacterEventLoop.sock_recvfrom_into() when using nbytes","severity":"HIGH","score":8.8,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00392,"kevAdded":null},{"id":"CVE-2026-5713","published":"2026-04-14T15:11:51.122Z","updated":"2026-07-31T13:56:32.041Z","title":"Out-of-bounds read/write during remote profiling and asyncio process introspection when connecting to malicious target","severity":"MEDIUM","score":5.3,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00132,"kevAdded":null},{"id":"CVE-2026-4786","published":"2026-04-13T21:52:19.036Z","updated":"2026-08-13T00:27:20.638Z","title":"Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open()","severity":"HIGH","score":7,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.0029,"kevAdded":null},{"id":"CVE-2026-6100","published":"2026-04-13T17:15:47.606Z","updated":"2026-08-13T00:27:12.761Z","title":"Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure","severity":"CRITICAL","score":9.1,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00579,"kevAdded":null},{"id":"CVE-2026-3446","published":"2026-04-10T18:17:35.045Z","updated":"2026-04-13T16:07:24.229Z","title":"Base64 decoding stops at first padded quad by default","severity":"MEDIUM","score":6,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00188,"kevAdded":null},{"id":"CVE-2026-1502","published":"2026-04-10T17:54:44.121Z","updated":"2026-08-13T00:28:30.757Z","title":"HTTP client proxy tunnel headers not validated for CR/LF","severity":"MEDIUM","score":5.7,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00562,"kevAdded":null},{"id":"CVE-2026-5271","published":"2026-04-01T13:48:07.534Z","updated":"2026-04-01T23:12:18.741Z","title":"Possible to hijack modules in current working directory","severity":"MEDIUM","score":5.6,"vendor":"Python Software Foundation","product":"pymanager","kev":false,"epss":0.0018,"kevAdded":null},{"id":"CVE-2026-4519","published":"2026-03-20T15:08:32.576Z","updated":"2026-08-13T00:27:28.648Z","title":"webbrowser.open() allows leading dashes in URLs","severity":"HIGH","score":7,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00314,"kevAdded":null},{"id":"CVE-2026-3479","published":"2026-03-18T18:13:42.288Z","updated":"2026-04-07T22:01:35.724Z","title":"pkgutil.get_data() does not enforce documented restrictions","severity":"NONE","score":0,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00253,"kevAdded":null},{"id":"CVE-2026-4224","published":"2026-03-16T17:52:26.639Z","updated":"2026-08-13T00:27:37.326Z","title":"Stack overflow parsing XML with deeply nested DTD content models","severity":"MEDIUM","score":6,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00717,"kevAdded":null},{"id":"CVE-2026-3644","published":"2026-03-16T17:37:31.344Z","updated":"2026-08-13T00:27:41.980Z","title":"Incomplete control character validation in http.cookies","severity":"MEDIUM","score":6,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00508,"kevAdded":null},{"id":"CVE-2025-13462","published":"2026-03-12T17:59:26.620Z","updated":"2026-08-13T00:30:19.927Z","title":"tarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handling","severity":"LOW","score":2,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00171,"kevAdded":null},{"id":"CVE-2026-2297","published":"2026-03-04T22:10:43.297Z","updated":"2026-08-13T00:28:17.928Z","title":"SourcelessFileLoader does not use io.open_code()","severity":"MEDIUM","score":5.7,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.0022,"kevAdded":null},{"id":"CVE-2026-1299","published":"2026-01-23T16:27:13.346Z","updated":"2026-03-03T14:43:35.655Z","title":"email BytesGenerator header injection due to unquoted newlines","severity":"MEDIUM","score":6,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00573,"kevAdded":null},{"id":"CVE-2025-12781","published":"2026-01-21T19:34:47.979Z","updated":"2026-01-22T20:12:56.421Z","title":"base64.b64decode() always accepts \"+/\" characters, despite setting altchars","severity":"MEDIUM","score":6.3,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00859,"kevAdded":null},{"id":"CVE-2026-0672","published":"2026-01-20T21:52:33.925Z","updated":"2026-03-03T14:43:20.490Z","title":"Header injection in http.cookies.Morsel","severity":"MEDIUM","score":6,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.0048,"kevAdded":null},{"id":"CVE-2025-15367","published":"2026-01-20T21:47:09.885Z","updated":"2026-02-26T14:44:41.341Z","title":"POP3 command injection in user-controlled commands","severity":"MEDIUM","score":5.9,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00377,"kevAdded":null},{"id":"CVE-2025-15366","published":"2026-01-20T21:40:24.938Z","updated":"2026-08-06T00:37:36.230Z","title":"IMAP command injection in user-controlled commands","severity":"MEDIUM","score":5.9,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00431,"kevAdded":null},{"id":"CVE-2025-15282","published":"2026-01-20T21:35:13.865Z","updated":"2026-03-03T14:42:00.488Z","title":"Header injection via newlines in data URL mediatype","severity":"MEDIUM","score":6,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00537,"kevAdded":null},{"id":"CVE-2026-0865","published":"2026-01-20T21:26:15.274Z","updated":"2026-03-03T14:43:30.596Z","title":"wsgiref.headers.Headers allows header newline injection","severity":"MEDIUM","score":5.9,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00554,"kevAdded":null},{"id":"CVE-2025-11468","published":"2026-01-20T21:09:11.229Z","updated":"2026-03-03T14:41:28.324Z","title":"Folding email comments of unfoldable characters doesn't preserve parenthesis","severity":"MEDIUM","score":5.7,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00616,"kevAdded":null},{"id":"CVE-2025-12084","published":"2025-12-03T18:55:32.222Z","updated":"2026-03-03T14:41:38.821Z","title":"Quadratic complexity in node ID cache clearing","severity":"MEDIUM","score":6.3,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00856,"kevAdded":null},{"id":"CVE-2025-13837","published":"2025-12-01T18:13:32.739Z","updated":"2026-03-03T14:41:54.597Z","title":"Out-of-memory when loading Plist","severity":"LOW","score":2.1,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00239,"kevAdded":null},{"id":"CVE-2025-13836","published":"2025-12-01T18:02:38.483Z","updated":"2026-03-03T14:41:48.702Z","title":"Excessive read buffering DoS in http.client","severity":"MEDIUM","score":6.3,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.01748,"kevAdded":null},{"id":"CVE-2025-6075","published":"2025-10-31T16:41:34.983Z","updated":"2026-07-31T14:01:32.417Z","title":"Quadratic complexity in os.path.expandvars() with user-controlled template","severity":"LOW","score":1.8,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00149,"kevAdded":null},{"id":"CVE-2025-8291","published":"2025-10-07T18:10:05.908Z","updated":"2026-07-31T14:01:02.211Z","title":"ZIP64 End of Central Directory (EOCD) Locator record offset not checked","severity":"MEDIUM","score":4.3,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00466,"kevAdded":null},{"id":"CVE-2025-8194","published":"2025-07-28T18:42:44.847Z","updated":"2026-07-31T14:01:18.178Z","title":"Tarfile infinite loop during parsing with negative member offset","severity":"HIGH","score":7.5,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00761,"kevAdded":null},{"id":"CVE-2025-6069","published":"2025-06-17T13:39:46.058Z","updated":"2026-07-31T14:01:47.064Z","title":"HTMLParser quadratic complexity when processing malformed inputs","severity":"MEDIUM","score":4.3,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00603,"kevAdded":null},{"id":"CVE-2024-12718","published":"2025-06-03T12:59:10.908Z","updated":"2026-07-31T14:08:19.099Z","title":"Bypass extraction filter to modify file metadata outside extraction directory","severity":"MEDIUM","score":5.3,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00825,"kevAdded":null},{"id":"CVE-2025-4435","published":"2025-06-03T12:59:06.792Z","updated":"2026-07-31T14:02:43.230Z","title":"Tarfile extracts filtered members when errorlevel=0","severity":"HIGH","score":7.5,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00616,"kevAdded":null},{"id":"CVE-2025-4138","published":"2025-06-03T12:59:02.717Z","updated":"2026-07-31T14:03:14.616Z","title":"Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory","severity":"HIGH","score":7.5,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.01487,"kevAdded":null},{"id":"CVE-2025-4330","published":"2025-06-03T12:58:57.452Z","updated":"2026-08-04T14:27:14.209Z","title":"Extraction filter bypass for linking outside extraction directory","severity":"HIGH","score":7.5,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00971,"kevAdded":null},{"id":"CVE-2025-4517","published":"2025-06-03T12:58:50.352Z","updated":"2026-08-04T14:26:54.922Z","title":"Arbitrary writes via tarfile realpath overflow","severity":"CRITICAL","score":9.4,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.0148,"kevAdded":null},{"id":"CVE-2025-4516","published":"2025-05-15T13:29:20.126Z","updated":"2026-07-31T14:02:21.178Z","title":"Use-after-free in \"unicode_escape\" decoder with error handler","severity":"MEDIUM","score":5.9,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00225,"kevAdded":null},{"id":"CVE-2025-1795","published":"2025-02-28T18:59:31.784Z","updated":"2026-07-31T14:03:23.564Z","title":"Mishandling of comma during folding and unicode-encoding of email headers","severity":"LOW","score":2.3,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00628,"kevAdded":null},{"id":"CVE-2024-3220","published":"2025-02-14T16:18:00.918Z","updated":"2026-10-26T00:41:57.165Z","title":"Default mimetype known files writeable on Windows","severity":"LOW","score":2.3,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00715,"kevAdded":null},{"id":"CVE-2025-0938","published":"2025-01-31T17:51:35.898Z","updated":"2026-07-31T14:05:21.438Z","title":"URL parser allowed square brackets in domain names","severity":"MEDIUM","score":6.3,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.01556,"kevAdded":null},{"id":"CVE-2024-12254","published":"2024-12-06T15:19:41.576Z","updated":"2026-07-31T14:08:25.397Z","title":"Unbounded memory buffering in SelectorSocketTransport.writelines()","severity":"HIGH","score":8.7,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.01868,"kevAdded":null},{"id":"CVE-2024-11168","published":"2024-11-12T21:22:23.438Z","updated":"2025-11-03T21:51:45.721Z","title":"Improper validation of IPv6 and IPvFuture addresses","severity":"MEDIUM","score":6.3,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00656,"kevAdded":null},{"id":"CVE-2024-9287","published":"2024-10-22T16:34:39.210Z","updated":"2026-10-30T10:50:52.314Z","title":"Virtual environment (venv) activation scripts don't quote paths","severity":"MEDIUM","score":5.3,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00648,"kevAdded":null},{"id":"CVE-2024-6232","published":"2024-09-03T12:29:00.102Z","updated":"2025-11-03T22:32:42.630Z","title":"Regular-expression DoS when parsing TarFile headers","severity":"HIGH","score":7.5,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.02203,"kevAdded":null},{"id":"CVE-2024-8088","published":"2024-08-22T18:45:31.807Z","updated":"2025-11-03T22:32:54.340Z","title":"Infinite loop when iterating over zip archive entry names from zipfile.Path","severity":"HIGH","score":8.7,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.01275,"kevAdded":null},{"id":"CVE-2024-7592","published":"2024-08-19T19:06:45.311Z","updated":"2025-11-03T22:32:52.863Z","title":"Quadratic complexity parsing cookies with backslashes","severity":"HIGH","score":7.5,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.02303,"kevAdded":null},{"id":"CVE-2024-6923","published":"2024-08-01T13:40:11.069Z","updated":"2025-11-03T22:32:47.018Z","title":"Email header injection due to unquoted newlines","severity":"MEDIUM","score":5.5,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.011,"kevAdded":null},{"id":"CVE-2024-3219","published":"2024-07-29T21:54:05.830Z","updated":"2025-05-02T23:02:58.327Z","title":"Pure-Python fallback of socket.socketpair() doesn’t authenticate peer connection","severity":"MEDIUM","score":5.1,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00247,"kevAdded":null},{"id":"CVE-2024-5642","published":"2024-06-27T21:05:31.281Z","updated":"2026-07-31T14:06:47.138Z","title":"Buffer overread when using an empty list with SSLContext.set_npn_protocols()","severity":"MEDIUM","score":6.5,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00744,"kevAdded":null},{"id":"CVE-2024-0397","published":"2024-06-17T15:09:40.896Z","updated":"2025-11-03T21:50:55.091Z","title":"Memory race condition in ssl.SSLContext certificate store methods","severity":"HIGH","score":7.4,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.0081,"kevAdded":null},{"id":"CVE-2024-4032","published":"2024-06-17T15:05:58.827Z","updated":"2025-11-03T21:57:16.975Z","title":"Incorrect IPv4 and IPv6 private ranges","severity":"HIGH","score":7.5,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.01079,"kevAdded":null},{"id":"CVE-2024-4030","published":"2024-05-07T21:02:55.284Z","updated":"2024-09-07T02:44:36.613Z","title":"tempfile.mkdtemp() may be readable and writeable by all users on Windows","severity":"HIGH","score":7.1,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.003,"kevAdded":null},{"id":"CVE-2023-6597","published":"2024-03-19T15:44:28.989Z","updated":"2025-11-03T21:50:47.799Z","title":"An issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior. The…","severity":"HIGH","score":7.8,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00313,"kevAdded":null},{"id":"CVE-2024-0450","published":"2024-03-19T15:12:07.789Z","updated":"2025-11-03T21:50:58.107Z","title":"Quoted zip-bomb protection for zipfile","severity":"MEDIUM","score":6.2,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00336,"kevAdded":null},{"id":"CVE-2023-6507","published":"2023-12-08T18:20:49.583Z","updated":"2026-07-31T14:09:16.715Z","title":"Groups not dropped before running subprocess when using empty 'extra_groups' parameter","severity":"MEDIUM","score":6.1,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.01337,"kevAdded":null}]}