CVEs
Every published CVE. Without a filter the list holds those exploited, with a public check, or likely to be exploited; pick a year and month or a vendor for the rest.
| CVE | Vendor · product | Exploitation | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2007-4559Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary file… | Python · Python | Likely | 9.8 | 27% | 2007-08-28 |
| CVE-2014-4650The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attackers to read script so… | Python · Python | Likely | – | 24% | 2020-02-20 |
| CVE-2019-9948urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: URIs, as demon… | Python · Python | Likely | 9.1 | 12% | 2019-03-23 |
| CVE-2020-15801In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations. The <executable-name>._pth file (e.g., t… | Python · Python | Possible | – | 3.6% | 2020-07-17 |
| CVE-2023-41105An issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed to os.path.normpath(), the path will be truncated unexpectedly at the first '\0' b… | Python · Python | Possible | – | 2.6% | 2023-08-23 |
| CVE-2022-26488In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured. The installer may allow a local attacker to add user-writable… | Python · Python | Possible | – | 1.5% | 2022-03-07 |
| CVE-2025-4138Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory | Python Software Foundation · CPython | Possible | 7.5 | 1.5% | 2025-06-03 |
| CVE-2025-4517Arbitrary writes via tarfile realpath overflow | Python Software Foundation · CPython | Possible | 9.4 | 1.5% | 2025-06-03 |
| CVE-2020-8315In Python (CPython) 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1, an insecure dependency load upon launch on Windows 7 may result in an attacker's copy of api-ms-w… | Python · Python | Possible | – | 1.5% | 2020-01-28 |
| CVE-2017-20052Python pgAdmin4 uncontrolled search path | Python · Python | Possible | 5.0 | 1.3% | 2022-06-16 |
| CVE-2019-13404The MSI installer for Python through 2.7.16 on Windows defaults to the C:\Python27 directory, which makes it easier for local users to deploy Trojan horse code. (This also affects… | Python · Python | Possible | – | 1.3% | 2019-07-08 |
| CVE-2025-4330Extraction filter bypass for linking outside extraction directory | Python Software Foundation · CPython | Unlikely | 7.5 | 1.0% | 2025-06-03 |
| CVE-2020-15523In Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on Windows, a Trojan horse python3.dll might be used in cases where CPython is embed… | Python · Python | Unlikely | – | 0.9% | 2020-07-04 |
| CVE-2024-12718Bypass extraction filter to modify file metadata outside extraction directory | Python Software Foundation · CPython | Unlikely | 5.3 | 0.8% | 2025-06-03 |
| CVE-2026-11940tarfile extraction filter bypass allows escaping the destination directory | Python Software Foundation · CPython | Unlikely | 7.8 | 0.8% | 2026-06-23 |
| CVE-2024-3220Default mimetype known files writeable on Windows | Python Software Foundation · CPython | Unlikely | 2.3 | 0.7% | 2025-02-14 |
| CVE-2024-9287Virtual environment (venv) activation scripts don't quote paths | Python Software Foundation · CPython | Unlikely | 5.3 | 0.6% | 2024-10-22 |
| CVE-2026-87910tarfile hardlink fallback ignores custom extraction filter rejection via None | Python Software Foundation · CPython | Unlikely | 5.7 | 0.6% | 2026-09-11 |
| CVE-2026-7774tarfile.data_filter path traversal bypass allows writing outside the extraction directory | Python Software Foundation · CPython | Unlikely | 6.9 | 0.6% | 2026-06-04 |
| CVE-2026-3087shutil.unpack_archive() doesn't check for Windows absolute paths in ZIPs | Python Software Foundation · CPython | Unlikely | 6.0 | 0.6% | 2026-04-27 |
| CVE-2014-1932The (1) load_djpeg function in JpegImagePlugin.py, (2) Ghostscript function in EpsImagePlugin.py, (3) load function in IptcImagePlugin.py, and (4) _copy function in Image.py in Py… | Python · Pillow | Unlikely | – | 0.5% | 2014-04-17 |
| CVE-2008-5983Untrusted search path vulnerability in the PySys_SetArgv API function in Python 2.6 and earlier, and possibly later versions, prepends an empty string to sys.path when the argv[0]… | Python · Python | Unlikely | – | 0.5% | 2009-01-28 |
| CVE-2026-19672tarfile extraction filter bypass allows creation of directories outside the destination | Python Software Foundation · CPython | Unlikely | 6.3 | 0.5% | 2026-08-19 |
| CVE-2008-4108Tools/faqwiz/move-faqwiz.sh (aka the generic FAQ wizard moving tool) in Python 2.4.5 might allow local users to overwrite arbitrary files via a symlink attack on a tmp$RANDOM.tmp… | Python Software Foundation · Python | Unlikely | – | 0.4% | 2008-09-18 |
| CVE-2026-12345Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory | Python Software Foundation · CPython | Unlikely | 5.9 | 0.3% | 2026-09-29 |
| CVE-2014-1624Race condition in the xdg.BaseDirectory.get_runtime_dir function in python-xdg 0.25 allows local users to overwrite arbitrary files by pre-creating /tmp/pyxdg-runtime-dir-fallback… | Python · Pyxdg | Unlikely | – | 0.3% | 2014-01-28 |
| CVE-2011-4617virtualenv.py in virtualenv before 1.5 allows local users to overwrite arbitrary files via a symlink attack on a certain file in /tmp/. | Python · Virtualenv | Unlikely | – | 0.3% | 2011-12-31 |
| CVE-2026-3479pkgutil.get_data() does not enforce documented restrictions | Python Software Foundation · CPython | Unlikely | 0.0 | 0.3% | 2026-03-18 |
| CVE-2026-114583tar filter allows writing outside destination via empty-named symlink | Python Software Foundation · CPython | Unlikely | 6.9 | 0.3% | 2026-10-22 |
| CVE-2026-82049tarfile extraction filters allow file modification and content disclosure via hard link to symlink | Python Software Foundation · CPython | Unlikely | 8.4 | 0.2% | 2026-09-14 |
| CVE-2025-13462tarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handling | Python Software Foundation · CPython | Unlikely | 2.0 | 0.2% | 2026-03-12 |
| CVE-2026-5271Possible to hijack modules in current working directory | Python Software Foundation · pymanager | Unlikely | 5.6 | 0.2% | 2026-04-01 |
| CVE-2026-12003CPython >3.11 Insecure Input Validation resulting in privilege escalation | Python Software Foundation · CPython | Unlikely | 5.3 | 0.1% | 2026-06-16 |
Exploitation: exploited (CISA KEV), a public nuclei check, then EPSS: likely 10% or more, possible 1 to 10%, unlikely under 1%. Data as of 2026-11-15.