Skip to content

CVEs

Every published CVE. Without a filter the list holds those exploited, with a public check, or likely to be exploited; pick a year and month or a vendor for the rest.

CVEs: Python · Server-Side Request Forgery
CVEVendor · productExploitationCVSSEPSSPublished
CVE-2024-11168Improper validation of IPv6 and IPvFuture addressesPython Software Foundation · CPythonUnlikely3.70.7%2024-11-12
CVE-2026-8328FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host addressPython Software Foundation · CPythonUnlikely5.90.5%2026-05-13

Exploitation: exploited (CISA KEV), a public nuclei check, then EPSS: likely 10% or more, possible 1 to 10%, unlikely under 1%. Data as of 2026-11-15.