Known vulnerabilities in python3.9 (Red Hat package)

Vendor: Red Hat Inc.
Software: python3.9 (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:python3_9_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 11
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting python3.9 (Red Hat package) python3.9 (Red Hat package) is affected by 11 known vulnerabilities: 3 high, 6 medium, 2 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122819 - Command injection
CVE-2025-15367		 CWE-77 Medium
No
No
 3.9.25-3.el9_7.1 13.02.2026 SB2026021343
SB2026021347
SB2026021348
and 56 more
#VU122818 - Command injection
CVE-2025-15366		 CWE-77 Medium
No
No
 3.9.25-3.el9_7.1 13.02.2026 SB2026021343
SB2026021347
SB2026021348
and 52 more
#VU122817 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-1299		 CWE-93 Medium
No
No
 3.9.25-3.el9_7.1 13.02.2026 SB2026021343
SB2026021347
SB2026021348
and 46 more
#VU122815 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-0865		 CWE-444 Medium
No
No
 3.9.25-3.el9_7.1 13.02.2026 SB2026021343
SB2026021347
SB2026021348
and 49 more
#VU119238 - Inefficient Algorithmic Complexity
CVE-2025-12084		 CWE-407 Low
No
No
 3.9.10-4.el9_0.8, 3.9.16-1.el9_2.11, 3.9.18-3.el9_4.10, 3.9.21-2.el9_6.3, 3.9.25-3.el9_7 06.12.2025 SB2025120606
SB20251226352
SB2025123104
and 48 more
#VU113738 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-8194		 CWE-835 Medium
No
No
 3.9.10-4.el9_0.7, 3.9.16-1.el9_2.10, 3.9.18-3.el9_4.9 07.08.2025 SB2025080731
SB2025080738
SB2025080739
and 93 more
#VU111970 - Expected Behavior Violation
CVE-2025-4435		 CWE-440 Low
No
No
 3.9.18-3.el9_4.8, 3.9.21-2.el9_6.1 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 59 more
#VU111969 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12718		 CWE-22 Medium
No
No
 3.9.18-3.el9_4.8, 3.9.21-2.el9_6.1 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 62 more
#VU111968 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-4138		 CWE-59 High
Available
No
 3.9.18-3.el9_4.8, 3.9.21-2.el9_6.1 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 64 more
#VU111967 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-4330		 CWE-59 High
No
No
 3.9.18-3.el9_4.8, 3.9.21-2.el9_6.1 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 63 more
#VU111966 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-4517		 CWE-22 High
Available
No
 3.9.18-3.el9_4.8, 3.9.21-2.el9_6.1 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 77 more