Filter
AND
-Infinity
0
Trending
PythonA vulnerability has been found in the CPython `venv` module and CLI where path names provided when c…
First published (updated )
PythonPure-Python fallback of socket.socketpair() doesn’t authenticate peer connection
5.1
First published (updated )
PythonBuffer overread when using an empty list with SSLContext.set_npn_protocols()
6.5
EPSS
0.04%
First published (updated )
PythonAn issue was found in the CPython `zipfile` module affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.1…
First published (updated )
Python 2.7Groups not dropped before running subprocess when using empty 'extra_groups' parameter
6.1
EPSS
0.05%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
pip/urllib3Request body not stripped after redirect in urllib3
4.2
First published (updated )
Python 2.7An issue in Python cpython v.3.7 allows an attacker to obtain sensitive information via the _asyncio…
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
pip/requestsUnintended leak of Proxy-Authorization header in requests
6.1
First published (updated )
Python 2.7An open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Debian Linuxpath_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path.
6.5
First published (updated )
Debian Linuxpath_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImageP…
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
IBM Data Virtualization on Cloud Pak for Dataurllib3 for python is vulnerable to a man-in-the-middle attack, caused by improper certificate valid…
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Python 2.7In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an …
First published (updated )
Python 2.7A vulnerability was found in Lib/ipaddress.py in Python through 3.8.3 improperly computes hash value…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.