Python Software Foundation vulnerabilities
83 published CVEs name Python Software Foundation among the affected products.
- 83Published CVEs81 of them scored
- 55Last 12 monthspublished in the last year
- 4Critical22 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-124249
`http.cookiejar` applies expired `Set-Cookie` to cookie store before policy validation
Python Software Foundation · CPython
Medium6.3 - CVE-2026-19552
ssl.get_server_certificate(addr, ca_certs=...) verifies the chain but never the identity
Python Software Foundation · CPython
None0.0 - CVE-2026-119170
Regression in FIPS enforcement of hash algorithms affecting only Python 3.14.10
Python Software Foundation · CPython
High8.2 - CVE-2026-116566
socket.getaddrinfo() accepts embedded null bytes in host and port
Python Software Foundation · CPython
Medium5.3 - CVE-2026-103995
Lenient parsing of integers for response body and chunk framing
Python Software Foundation · CPython
Low2.0 - CVE-2026-115557
Distrust compromised intermediate certificates in ssl module
Python Software Foundation · CPython
Critical9.4 - CVE-2026-114583
tar filter allows writing outside destination via empty-named symlink
Python Software Foundation · CPython
Medium6.9 - CVE-2026-19553
SSLContext.wrap_bio() missing validation of server_hostname parameter
Python Software Foundation · CPython
High7.6 - CVE-2026-19445
Use-after-free of a server-side SSLContext when sni_callback switches contexts
Python Software Foundation · CPython
Critical9.2 - CVE-2026-12345
Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory
Python Software Foundation · CPython
Medium5.9