Known vulnerabilities in Python

Vendor: Python.org
Software: Python
Software CPE: cpe:2.3:a:python_org:python:*:*:*:*:*:*:*:*
Total vulnerabilities: 117
Public exploits: 12
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Python Python is affected by 117 known vulnerabilities: 14 high, 80 medium, 23 low Critical High Medium Low

Vulnerabilities (117)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124221 - Uncontrolled Recursion
CVE-2026-4224
CWE-674 Medium
No
No
- 23.03.2026 SB2026032343
#VU122976 - Type conversion
CVE-2025-12781
CWE-704 Low
No
No
3.13.12, 3.14.1, 3.15.0a2 17.02.2026 SB2026021706
SB2026021715
SB2026021716
and 4 more
#VU122819 - Command injection
CVE-2025-15367
CWE-77 Medium
No
No
3.15.0a6 13.02.2026 SB2026021343
SB2026021347
SB2026021348
and 56 more
#VU122818 - Command injection
CVE-2025-15366
CWE-77 Medium
No
No
3.15.0a6 13.02.2026 SB2026021343
SB2026021347
SB2026021348
and 52 more
#VU122817 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-1299
CWE-93 Medium
No
No
3.13.12, 3.14.3, 3.15.0a6 13.02.2026 SB2026021343
SB2026021347
SB2026021348
and 46 more
#VU122816 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2025-15282
CWE-93 Medium
No
No
3.13.12, 3.14.3, 3.15.0a6 13.02.2026 SB2026021343
SB2026021353
SB2026021354
and 25 more
#VU122815 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-0865
CWE-444 Medium
No
No
3.13.12, 3.14.3, 3.15.0a6 13.02.2026 SB2026021343
SB2026021347
SB2026021348
and 49 more
#VU122814 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-0672
CWE-93 Medium
No
No
3.13.12, 3.14.3, 3.15.0a6 13.02.2026 SB2026021343
SB2026021353
SB2026021354
and 29 more
#VU122813 - Improper input validation
CVE-2025-11468
CWE-20 Medium
No
No
3.13.12, 3.14.3, 3.15.0a6 13.02.2026 SB2026021343
SB2026021353
SB2026021354
and 25 more
#VU119238 - Inefficient Algorithmic Complexity
CVE-2025-12084
CWE-407 Low
No
No
3.13.11, 3.14.2 06.12.2025 SB2025120606
SB20251226352
SB2025123104
and 48 more
#VU119234 - Resource exhaustion
CVE-2025-13837
CWE-400 Medium
No
No
3.13.10, 3.14.1 06.12.2025 SB2025120603
SB20251226352
SB2025123104
and 13 more
#VU119233 - Resource exhaustion
CVE-2025-13836
CWE-400 Medium
No
No
3.13.11, 3.14.1 06.12.2025 SB2025120602
SB20251226352
SB2025123104
and 36 more
#VU118735 - Resource exhaustion
CVE-2025-6075
CWE-400 Low
No
No
3.9.25, 3.15.0a2 24.11.2025 SB2025112495
SB2025112498
SB2025112569
and 26 more
#VU116971 - Improper input validation
CVE-2025-8291
CWE-20 Medium
No
No
3.9.24, 3.10.19, 3.11.14, 3.12.12, 3.13.8 14.10.2025 SB2025101418
SB2025101423
SB2025101424
and 47 more
#VU113739 - Resource Management Errors
CVE-2025-6069
CWE-399 Medium
No
No
3.13.6 07.08.2025 SB2025080731
SB2025080736
SB2025080737
and 40 more
#VU113738 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-8194
CWE-835 Medium
No
No
3.13.6 07.08.2025 SB2025080731
SB2025080738
SB2025080739
and 93 more
#VU111969 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12718
CWE-22 Medium
No
No
3.9.23, 3.10.18, 3.11.13, 3.12.11, 3.13.4, 3.14.0 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 62 more
#VU111968 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-4138
CWE-59 High
Available
No
3.9.23, 3.10.18, 3.11.13, 3.12.11, 3.13.4, 3.14.0 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 64 more
#VU111967 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-4330
CWE-59 High
No
No
3.9.23, 3.10.18, 3.11.13, 3.12.11, 3.13.4, 3.14.0 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 63 more
#VU111966 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-4517
CWE-22 High
Available
No
3.9.23, 3.10.18, 3.11.13, 3.12.11, 3.13.4, 3.14.0 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 77 more


Showing elements 1 - 20 out of 117