CVEs
Every published CVE. Without a filter the list holds those exploited, with a public check, or likely to be exploited; pick a year and month or a vendor for the rest.
| CVE | Vendor · product | Exploitation | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2025-8291ZIP64 End of Central Directory (EOCD) Locator record offset not checked | Python Software Foundation · CPython | Unlikely | 4.3 | 0.5% | 2025-10-07 |
| CVE-2026-8328FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address | Python Software Foundation · CPython | Unlikely | 5.9 | 0.5% | 2026-05-13 |
| CVE-2025-15366IMAP command injection in user-controlled commands | Python Software Foundation · CPython | Unlikely | 5.9 | 0.4% | 2026-01-20 |
| CVE-2026-9669bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow | Python Software Foundation · CPython | Unlikely | 8.2 | 0.4% | 2026-06-08 |
| CVE-2026-3298Out-of-bounds write in Windows asyncio.ProacterEventLoop.sock_recvfrom_into() when using nbytes | Python Software Foundation · CPython | Unlikely | 8.8 | 0.4% | 2026-04-21 |
| CVE-2025-15367POP3 command injection in user-controlled commands | Python Software Foundation · CPython | Unlikely | 5.9 | 0.4% | 2026-01-20 |
| CVE-2026-103995Lenient parsing of integers for response body and chunk framing | Python Software Foundation · CPython | Unlikely | 2.0 | 0.4% | 2026-10-27 |
| CVE-2026-6879Quadratic Behavior in xml.etree.ElementPath Index Predicates | Python Software Foundation · CPython | Unlikely | 2.0 | 0.4% | 2026-07-28 |
| CVE-2026-12345Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory | Python Software Foundation · CPython | Unlikely | 5.9 | 0.3% | 2026-09-29 |
| CVE-2024-0450Quoted zip-bomb protection for zipfile | Python Software Foundation · CPython | Unlikely | 6.2 | 0.3% | 2024-03-19 |
| CVE-2026-4519webbrowser.open() allows leading dashes in URLs | Python Software Foundation · CPython | Unlikely | 7.1 | 0.3% | 2026-03-20 |
| CVE-2023-6597An issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior. The tempfile.TemporaryDirectory cla… | Python Software Foundation · CPython | Unlikely | 7.8 | 0.3% | 2024-03-19 |
| CVE-2026-16052Cookie Attribute Injection via Unescaped Semicolons in http.cookies.Morsel | Python Software Foundation · CPython | Unlikely | 2.3 | 0.3% | 2026-11-12 |
| CVE-2026-19552ssl.get_server_certificate(addr, ca_certs=...) verifies the chain but never the identity | Python Software Foundation · CPython | Unlikely | 0.0 | 0.3% | 2026-11-09 |
| CVE-2024-4030tempfile.mkdtemp() may be readable and writeable by all users on Windows | Python Software Foundation · CPython | Unlikely | 7.1 | 0.3% | 2024-05-07 |
| CVE-2026-4786Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open() | Python Software Foundation · CPython | Unlikely | 7.1 | 0.3% | 2026-04-13 |
| CVE-2026-115559imaplib STARTTLS serves plaintext bytes buffered before the handshake as if they came over TLS | Python Software Foundation · CPython | Unlikely | 6.3 | 0.3% | 2026-11-10 |
| CVE-2026-124249`http.cookiejar` applies expired `Set-Cookie` to cookie store before policy validation | Python Software Foundation · CPython | Unlikely | 6.3 | 0.3% | 2026-11-09 |
| CVE-2026-3479pkgutil.get_data() does not enforce documented restrictions | Python Software Foundation · CPython | Unlikely | 0.0 | 0.3% | 2026-03-18 |
| CVE-2026-114583tar filter allows writing outside destination via empty-named symlink | Python Software Foundation · CPython | Unlikely | 6.9 | 0.3% | 2026-10-22 |
| CVE-2026-116566socket.getaddrinfo() accepts embedded null bytes in host and port | Python Software Foundation · CPython | Unlikely | 5.3 | 0.3% | 2026-10-29 |
| CVE-2024-3219Pure-Python fallback of socket.socketpair() doesn’t authenticate peer connection | Python Software Foundation · CPython | Unlikely | 5.1 | 0.2% | 2024-07-29 |
| CVE-2025-13837Out-of-memory when loading Plist | Python Software Foundation · CPython | Unlikely | 2.1 | 0.2% | 2025-12-01 |
| CVE-2025-4516Use-after-free in "unicode_escape" decoder with error handler | Python Software Foundation · CPython | Unlikely | 5.9 | 0.2% | 2025-05-15 |
| CVE-2026-2297SourcelessFileLoader does not use io.open_code() | Python Software Foundation · CPython | Unlikely | 5.7 | 0.2% | 2026-03-04 |
| CVE-2026-6019BaseCookie.js_output() does not neutralize embedded characters | Python Software Foundation · CPython | Unlikely | 2.1 | 0.2% | 2026-04-22 |
| CVE-2026-82049tarfile extraction filters allow file modification and content disclosure via hard link to symlink | Python Software Foundation · CPython | Unlikely | 8.4 | 0.2% | 2026-09-14 |
| CVE-2025-13462tarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handling | Python Software Foundation · CPython | Unlikely | 2.0 | 0.2% | 2026-03-12 |
| CVE-2026-3446Base64 decoding stops at first padded quad by default | Python Software Foundation · CPython | Unlikely | 6.0 | 0.2% | 2026-04-10 |
| CVE-2026-115791Prevent shadowing stdlib in gzip/tarfile/zipfile CLI during extraction | Python Software Foundation · CPython | Unlikely | 5.3 | 0.2% | 2026-11-10 |
| CVE-2025-6075Quadratic complexity in os.path.expandvars() with user-controlled template | Python Software Foundation · CPython | Unlikely | 1.8 | 0.1% | 2025-10-31 |
| CVE-2026-12003CPython >3.11 Insecure Input Validation resulting in privilege escalation | Python Software Foundation · CPython | Unlikely | 5.3 | 0.1% | 2026-06-16 |
| CVE-2026-5713Out-of-bounds read/write during remote profiling and asyncio process introspection when connecting to malicious target | Python Software Foundation · CPython | Unlikely | 5.3 | 0.1% | 2026-04-14 |
| CVE-2026-0864Configuration Injection via Carriage Return (\r) in write() method | Python Software Foundation · CPython | Unlikely | 4.1 | 0.1% | 2026-06-23 |
| CVE-2026-18503Super-linear CPU usage for unbounded input to csv.Sniffer.sniff() | Python Software Foundation · CPython | Unlikely | 2.4 | 0.1% | 2026-08-10 |
Exploitation: exploited (CISA KEV), a public nuclei check, then EPSS: likely 10% or more, possible 1 to 10%, unlikely under 1%. Data as of 2026-11-15.