[ Vendor · 4 CVEs ]
Python Software Foundation
CVEs affecting Python Software Foundation published in the last 30 days, plus any Python Software Foundation CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-114583 | 22 Oct 2026 | CVSS 6.9 | Python Software Foundation CPythontarfile.tar_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive… | |
| CVE-2026-19445 | 30 Sep 2026 | CVSS 9.2 | Python Software Foundation CPythonA remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its sni_callback assigns a different context to… | Fix |
| CVE-2026-19553 | 30 Sep 2026 | CVSS 7.6 | Python Software Foundation CPythonssl.SSLContext.wrap_bio() didn't require the server_hostname argument to not be None if ssl.SSLContext.check_hostname was set. Due to a missing… | Fix |
| CVE-2026-12345 | 29 Sep 2026 | CVSS 5.9 | Python Software Foundation CPythonThe cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a… | Fix |