Known vulnerabilities in Python 3 Module 15-SP7 - page 4

Vendor: SUSE
Software: Python 3 Module
Version: 15-SP7
Software CPE: cpe:2.3:o:suse:python_3_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 134
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Python 3 Module version 15-SP7 Python 3 Module 15-SP7 is affected by 134 vulnerabilities: 1 critical, 14 high, 94 medium, 25 low Critical High Medium Low

Vulnerabilities (134)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124872 - Use of Cache Containing Sensitive Information
CVE-2026-27205		 CWE-524 Medium
No
No
 - 06.04.2026 SB2026040613
SB2026040615
SB2026040617
and 13 more
#VU124066 - Improper Verification of Cryptographic Signature
CVE-2026-27962		 CWE-347 Critical
No
No
 - 17.03.2026 SB2026031735
SB2026032421
SB20260721105
#VU124064 - Improper Validation of Integrity Check Value
CVE-2026-28498		 CWE-354 High
No
No
 - 17.03.2026 SB2026031735
SB2026032421
SB20260721105
#VU124063 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-28490		 CWE-327 High
No
No
 - 17.03.2026 SB2026031735
SB2026032421
SB20260721105
#VU123468 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-1703		 CWE-22 Low
No
No
 - 03.03.2026 SB2026030336
SB2026030337
SB2026030338
and 8 more
#VU122976 - Type conversion
CVE-2025-12781		 CWE-704 Low
No
No
 - 17.02.2026 SB2026021706
SB2026021715
SB2026021716
and 4 more
#VU122819 - Command injection
CVE-2025-15367		 CWE-77 Medium
No
No
 - 13.02.2026 SB2026021343
SB2026021347
SB2026021348
and 56 more
#VU122818 - Command injection
CVE-2025-15366		 CWE-77 Medium
No
No
 - 13.02.2026 SB2026021343
SB2026021347
SB2026021348
and 52 more
#VU122816 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2025-15282		 CWE-93 Medium
No
No
 - 13.02.2026 SB2026021343
SB2026021353
SB2026021354
and 25 more
#VU122815 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-0865		 CWE-444 Medium
No
No
 - 13.02.2026 SB2026021343
SB2026021347
SB2026021348
and 49 more
#VU122814 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-0672		 CWE-93 Medium
No
No
 - 13.02.2026 SB2026021343
SB2026021353
SB2026021354
and 29 more
#VU122813 - Improper input validation
CVE-2025-11468		 CWE-20 Medium
No
No
 - 13.02.2026 SB2026021343
SB2026021353
SB2026021354
and 25 more
#VU121112 - Cross-Site Request Forgery (CSRF)
CVE-2025-68158		 CWE-352 Medium
No
No
 - 08.01.2026 SB2026010859
SB2026022671
SB2026030584
#VU120998 - Resource exhaustion
CVE-2025-69229		 CWE-400 Medium
No
No
 - 06.01.2026 SB2026010643
SB2026012919
SB20260216150
and 10 more
#VU120996 - Resource exhaustion
CVE-2025-69228		 CWE-400 Medium
No
No
 - 06.01.2026 SB2026010643
SB2026012920
SB20260216150
and 9 more
#VU120995 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-69227		 CWE-835 Medium
No
No
 - 06.01.2026 SB2026010643
SB2026012920
SB20260216150
and 9 more
#VU120994 - Exposure of sensitive information to an unauthorized actor
CVE-2025-69226		 CWE-200 Low
No
No
 - 06.01.2026 SB2026010643
SB20260216150
SB2026030633
and 8 more
#VU120993 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-69225		 CWE-444 Low
No
No
 - 06.01.2026 SB2026010643
SB2026012920
SB20260216150
and 9 more
#VU120992 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-69224		 CWE-444 Low
No
No
 - 06.01.2026 SB2026010643
SB20260216150
SB2026030633
and 8 more
#VU120990 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2025-69223		 CWE-409 Medium
No
No
 - 06.01.2026 SB2026010643
SB2026012661
SB2026012855
and 15 more


Showing elements 61 - 80 out of 134