Known vulnerabilities in Python 3.8.9

Vendor: Python.org
Software: Python
Version: 3.8.9
Software CPE: cpe:2.3:a:python_org:python:*:*:*:*:*:*:*:*
Total vulnerabilities: 21
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Python version 3.8.9 Python 3.8.9 is affected by 21 vulnerabilities: 4 high, 10 medium, 7 low Critical High Medium Low

Vulnerabilities (21)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112030 - Use After Free
CVE-2025-4516
CWE-416 Medium
No
No
3.9.23, 3.10.18, 3.11.13, 3.12.11, 3.13.4, 3.14.0b2 28.06.2025 SB2025062630
SB2025062802
SB2025062803
and 18 more
#VU111970 - Expected Behavior Violation
CVE-2025-4435
CWE-440 Low
No
No
3.9.23, 3.10.18, 3.11.13, 3.12.11, 3.13.4, 3.14.0 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 59 more
#VU111969 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12718
CWE-22 Medium
No
No
3.9.23, 3.10.18, 3.11.13, 3.12.11, 3.13.4, 3.14.0 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 62 more
#VU111968 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-4138
CWE-59 High
Public exploit available
No
3.9.23, 3.10.18, 3.11.13, 3.12.11, 3.13.4, 3.14.0 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 64 more
#VU111967 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-4330
CWE-59 High
No
No
3.9.23, 3.10.18, 3.11.13, 3.12.11, 3.13.4, 3.14.0 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 63 more
#VU111966 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-4517
CWE-22 High
Public exploit available
No
3.9.23, 3.10.18, 3.11.13, 3.12.11, 3.13.4, 3.14.0 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 77 more
#VU100516 - Improper input validation
CVE-2024-11168
CWE-20 Medium
No
No
3.11.5 15.11.2024 SB2024111507
SB2024111526
SB2024111527
and 76 more
#VU99357 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-9287
CWE-78 Low
No
No
- 28.10.2024 SB2024102836
SB2024102838
SB20241101111
and 117 more
#VU98567 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-3219
CWE-362 Low
No
No
3.8.20, 3.9.20, 3.10.15, 3.11.10, 3.12.5 15.10.2024 SB2024101561
SB2024101575
SB2024101576
and 6 more
#VU97633 - Out-of-bounds read
CVE-2024-5642
CWE-125 Low
No
No
3.10.0 20.09.2024 SB2024092093
SB2024092095
SB2024092096
and 14 more
#VU96945 - Resource exhaustion
CVE-2024-7592
CWE-400 Medium
No
No
3.8.20, 3.9.20, 3.10.15, 3.11.10, 3.12.6 09.09.2024 SB2024090916
SB2024090917
SB2024090918
and 71 more
#VU96944 - Creation of Temporary File With Insecure Permissions
CVE-2024-4030
CWE-378 Low
No
No
3.8.20, 3.9.20, 3.10.15, 3.11.10, 3.12.6 09.09.2024 SB2024090914
SB2024090915
SB2024091099
and 9 more
#VU96745 - Incorrect Regular Expression
CVE-2024-6232
CWE-185 Medium
No
No
3.8.20, 3.9.20, 3.10.15, 3.11.10, 3.12.6 03.09.2024 SB2024090377
SB2024090927
SB2024091048
and 144 more
#VU95157 - Incorrect Provision of Specified Functionality
CVE-2024-4032
CWE-684 Medium
No
No
3.12.4 02.08.2024 SB2024080203
SB2024080207
SB2024080209
and 101 more
#VU87185 - UNIX Symbolic Link (Symlink) Following
CVE-2023-6597
CWE-61 Low
No
No
3.11.8, 3.12.2 07.03.2024 SB2024030718
SB2024030726
SB2024030727
and 88 more
#VU80228 - Cleartext Transmission of Sensitive Information
CVE-2023-40217
CWE-319 Medium
No
No
3.8.18, 3.9.18, 3.10.13, 3.11.5 01.09.2023 SB2023090142
SB2023090143
SB2023090144
and 139 more
#VU72618 - Improper input validation
CVE-2023-24329
CWE-20 Medium
No
No
3.7.17, 3.8.17, 3.9.17, 3.10.12, 3.11.4 28.02.2023 SB2023022819
SB2023022822
SB2023030832
and 158 more
#VU71992 - Type confusion
CVE-2023-0286
CWE-843 High
No
No
3.7.17, 3.8.17, 3.9.17 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 223 more
#VU69392 - Resource exhaustion
CVE-2022-45061
CWE-400 Medium
No
No
- 16.11.2022 SB2022111650
SB2022112824
SB2022112856
and 125 more
#VU67591 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-28861
CWE-601 Low
No
No
3.7.14, 3.8.14, 3.9.14, 3.10.6 22.09.2022 SB2022092243
SB2022092244
SB2022093032
and 76 more


Showing elements 1 - 20 out of 21