CVEs

Atlas

Every published CVE. Without a filter the list holds those exploited, with a public check, or likely to be exploited; pick a year and month or a vendor for the rest.

Vendor:Python

Weakness:Supply Chain and Malicious Code

Memory Corruption68
Denial of Service41
File and Path Handling33
Injection and Smuggling27
Input Validation and Logic26
Cryptography15
Access Control10
Command and Code Injection10
Information Disclosure5
Other weaknesses4
Race Conditions4
Open Redirect3
Cross-site Scripting3
Authentication2
Misconfiguration and Insecure Design2
Server-Side Request Forgery2
Deserialization and Object Injection1
Supply Chain and Malicious Code1
No weakness recorded27

Product

Clear filters1 CVEs

CVEs: Python · Supply Chain and Malicious Code
CVE	Vendor · product	Exploitation	CVSS	EPSS	Published
CVE-2026-115791Prevent shadowing stdlib in gzip/tarfile/zipfile CLI during extraction	Python Software Foundation · CPython	Unlikely	5.3	0.2%	2026-11-10

Exploitation: exploited (CISA KEV), a public nuclei check, then EPSS: likely 10% or more, possible 1 to 10%, unlikely under 1%. Data as of 2026-11-15.