SecAlerts
P

Python

Security Risk Profile

40
/100
medium

Security Risk Score

Comprehensive risk assessment based on 406 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from October 4, 2002 to present

406
Total CVEs
187
Critical+High
1
Exploited
32
Unpatched

Threat Assessment

Avg CVSS
6.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
32
Critical/High
Risk Level
40/100
medium
⚠️ 1 Active Exploits⚡ 1 Zero-Days📈 6 in Last 30 Days

Severity Distribution

Critical
39
High
148
Medium
139
Low
27

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
26

Age Distribution

Common Weaknesses (CWE)

1
Buffer Overflow
40
2
Input Validation
36
3
Integer Overflow
31
4
Path Traversal
16
5
Infoleak
12

Most Affected Products

1. Python Python1241
2. Canonical Ubuntu Linux163
3. Python Software Foundation Python146
4. Fedoraproject Fedora145
5. redhat/python134

Recent Vulnerabilities

See more →
https://seclists.org/oss-sec/2026/q3/1013
unknown

CPython [CVE-2026-12345] Race condition in tempfile.TemporaryDictory cleanup allows deleting files outside the temporary dictory

Sep 29, 2026🔧 No Patch
CVE-2026-97689
CVSS 8.9EPSS 0%high

urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory

Sep 29, 2026
CVE-2026-97688
CVSS 6.9EPSS 0%medium

urllib3: Chunked Deflate streaming can enter an infinite loop

Sep 29, 2026
CVE-2026-97687
CVSS 7.6EPSS 0%high

urllib3: HTTPS proxy TLS configuration may be ignored or overridden

Sep 29, 2026
CVE-2026-82049
CVSS 8.4high

tarfile extraction filters allow file modification and content disclosure via hard link to symlink

Sep 14, 2026
https://seclists.org/oss-sec/2026/q3/777
unknown

Cpython: [CVE-2026-82049] tarfile extraction filters allow file modification and content disclosuvia hard link to symlink

Sep 14, 2026🔧 No Patch
https://seclists.org/oss-sec/2026/q3/720
unknown

CPython: [CVE-2026-87910] tarfile hardlink fallback ignos custom extraction filter jection via None

Sep 11, 2026🔧 No Patch
https://seclists.org/oss-sec/2026/q3/578
unknown

[CVE-2026-19672] CPython: tarfile extraction filter bypass allows cation of dictories outside the destination

Aug 25, 2026🔧 No Patch
CVE-2026-15310
CVSS 2.1low

zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits

Aug 25, 2026
CVE-2026-19672
CVSS 6.3medium

tarfile extraction filter bypass allows creation of directories outside the destination

Aug 19, 2026

Monitor Python in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.