CVEs

Atlas

Every published CVE. Without a filter the list holds those exploited, with a public check, or likely to be exploited; pick a year and month or a vendor for the rest.

Vendor:Python

Weakness:Misconfiguration and Insecure Design

Memory Corruption68
Denial of Service41
File and Path Handling33
Injection and Smuggling27
Input Validation and Logic26
Cryptography15
Access Control10
Command and Code Injection10
Information Disclosure5
Other weaknesses4
Race Conditions4
Open Redirect3
Cross-site Scripting3
Authentication2
Misconfiguration and Insecure Design2
Server-Side Request Forgery2
Deserialization and Object Injection1
Supply Chain and Malicious Code1
No weakness recorded27

Product

Clear filters2 CVEs

CVEs: Python · Misconfiguration and Insecure Design
CVE	Vendor · product	Exploitation	CVSS	EPSS	Published
CVE-2016-0772The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-midd…	Python · Python	Likely	–	15%	2016-09-02
CVE-2026-119170Regression in FIPS enforcement of hash algorithms affecting only Python 3.14.10	Python Software Foundation · CPython	Unlikely	8.2	0.5%	2026-11-06

Exploitation: exploited (CISA KEV), a public nuclei check, then EPSS: likely 10% or more, possible 1 to 10%, unlikely under 1%. Data as of 2026-11-15.