Known vulnerabilities in Python for Scientific Computing

Vendor: Splunk Inc.
Software: Python for Scientific Computing
Software CPE: cpe:2.3:a:splunk:python_for_scientific_computing:*:*:*:*:*:*:*:*
Website: https://www.splunk.com/
Total vulnerabilities: 50
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Python for Scientific Computing Python for Scientific Computing is affected by 50 known vulnerabilities: 8 high, 28 medium, 14 low Critical High Medium Low

Vulnerabilities (50)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU136685 - Insecure Temporary File
CVE-2026-25645		 CWE-377 Low
No
No
 4.3.2 02.07.2026 SB2026070223
SB2026070226
SB2026070229
and 15 more
#VU130907 - Exposure of sensitive information to an unauthorized actor
CVE-2026-44431		 CWE-200 Medium
No
No
 4.3.2 09.05.2026 SB20260509126
SB2026051588
SB2026051589
and 40 more
#VU130906 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-44432		 CWE-409 Medium
No
No
 4.3.2 09.05.2026 SB20260509126
SB2026052935
SB2026060609
and 16 more
#VU128068 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-42271		 CWE-78 Medium
No
Exploited
 4.3.2 27.04.2026 SB2026042115
SB2026070226
#VU127955 - Allocation of Resources Without Limits or Throttling
CVE-2026-22815		 CWE-770 Medium
No
No
 4.3.2 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127954 - Resource exhaustion
CVE-2026-34513		 CWE-400 Medium
No
No
 4.3.2 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 7 more
#VU127953 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-34514		 CWE-93 Medium
No
No
 4.3.2 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 7 more
#VU127952 - Server-Side Request Forgery (SSRF)
CVE-2026-34515		 CWE-918 Medium
No
No
 4.3.2 26.04.2026 SB2026042605
SB2026070226
SB2026080434
#VU127951 - Improper input validation
CVE-2026-34516		 CWE-20 Medium
No
No
 4.3.2 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 7 more
#VU127950 - Resource exhaustion
CVE-2026-34517		 CWE-400 Medium
No
No
 4.3.2 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127949 - Exposure of sensitive information to an unauthorized actor
CVE-2026-34518		 CWE-200 Medium
No
No
 4.3.2 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127948 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-34519		 CWE-113 Medium
No
No
 4.3.2 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127947 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-34520		 CWE-113 Medium
No
No
 4.3.2 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127946 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-34525		 CWE-444 Low
No
No
 4.3.2 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU125339 - Out-of-bounds read
CVE-2026-39892		 CWE-125 Low
No
No
 4.3.2 08.04.2026 SB2026040897
SB20260408162
SB20260408163
and 13 more
#VU125338 - Improper Certificate Validation
CVE-2026-34073		 CWE-295 Medium
No
No
 4.3.2 08.04.2026 SB2026040896
SB20260408119
SB20260408120
and 12 more
#VU125066 - Improper Authentication
CVE-2026-35030		 CWE-287 High
No
No
 4.3.2 07.04.2026 SB2026040799
SB2026070226
#VU125065 - Improper Access Control
CVE-2026-35029		 CWE-284 Medium
No
No
 4.3.2 07.04.2026 SB2026040799
SB2026070226
#VU123116 - Uncontrolled Recursion
CVE-2026-0994		 CWE-674 Medium
No
No
 4.3.2 20.02.2026 SB2026022039
SB2026022040
SB2026022041
and 26 more
#VU109603 - Deserialization of Untrusted Data
CVE-2025-32434		 CWE-502 High
Available
No
 3.2.3, 4.2.3 21.05.2025 SB20250521126
SB2025061310
SB2026011967
and 3 more


Showing elements 1 - 20 out of 50