Python
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 446 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 4, 2002 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →[oss-security][CVE-2026-115557] Distrust compromised intermediate certificates in Python ssl module
CPython: [CVE-2026-114583] tarfile.tar_filter path traversal bypass allows writing outside the extraction dictory
Pillow multi-frame loaders can reuse stale native image storage after mode transitions
Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)
Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion
Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS
Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer
Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time
Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds)
Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise
Monitor Python in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.