Access Control

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. Groups not dropped before running subprocess when using empty 'extra_groups' parameterCVE-2023-6507Python Software Foundation · CVSS 6.1 · 1.3% likely

   CWE-269

2. Tarfile.extract() doesn't fully respect filter parameterCVE-2026-4360Python Software Foundation · CVSS 2 · 0.5% likely

   CWE-281

3. Python keyring has insecure permissions on new databases allowing world-readable files to be createdCVE-2012-5578Python · 0.4% likely

   CWE-276

4. tempfile.mkdtemp() may be readable and writeable by all users on WindowsCVE-2024-4030Python Software Foundation · CVSS 7.1 · 0.3% likely

   CWE-276

5. `http.cookiejar` applies expired `Set-Cookie` to cookie store before policy validationCVE-2026-124249Python Software Foundation · CVSS 6.3 · 0.3% likely

   CWE-346

6. SourcelessFileLoader does not use io.open_code()CVE-2026-2297Python Software Foundation · CVSS 5.7 · 0.2% likely

   CWE-668

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.