Filter
-Infinity
0

Python 2.7Regular-expression DoS when parsing TarFile headers

7.5
First published (updated )

BleepingComputerMalicious PyPi package hides RAT malware, targets Discord devs since 2022

First published (updated )

Apple iOS and macOSBuffer Overflow, Input Validation, Use After Free, Integer Overflow, Race Condition

8.2
First published (updated )

PythonPure-Python fallback of socket.socketpair() doesn’t authenticate peer connection

First published (updated )

Oracle Instantis EnterpriseTrackurllib3 is vulnerable to a denial of service, caused by a regular expression denial of service (ReDo…

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Python 2.7Last updated 24 July 2024

7.8
First published (updated )

redhat/pythonWeb Cache Poisoning

First published (updated )

Python 2.7Last updated 16 January 2025

7.5
First published (updated )

Python 2.7Virtual environment (venv) activation scripts don't quote paths

7.8
EPSS
0.04%
First published (updated )

Python TkvideoplayerMemory issue in playing videos

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Python Priority LibraryA HTTP/2 implementation built using any version of the Python priority library prior to version 1.2.…

7.5
First published (updated )

Python OpenpyxlXEE

8.2
First published (updated )

Red Hat Python3-urllib3Versions 1.17 and 1.18 of the Python urllib3 library suffer from a vulnerability that can cause them…

3.7
First published (updated )

Python HPACKA HTTP/2 implementation built using any version of the Python HPACK library between v1.0.0 and v2.2.…

7.8
First published (updated )

Python 2.7Python pgAdmin4 uncontrolled search path

7.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

pip/PillowInfoleak

First published (updated )

Python 2.7Buffer Overflow

First published (updated )

Python 2.7Buffer Overflow, Integer Overflow

First published (updated )

OpenSSLInfoleak, Weak Encryption

7.5
First published (updated )

Python 2.7Buffer Overflow

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Python 2.7Input Validation

7.1
First published (updated )

OpenSSLWeak Encryption

7.4
First published (updated )

Python 2.7Python 2.7 before 3.4 only uses the last eight bits of the prefix to randomize hash values, which ca…

First published (updated )

Python 2.7Buffer Overflow

8.1
First published (updated )

Python 2.7Use After Free

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

pip/pillowThe (1) load_djpeg function in JpegImagePlugin.py, (2) Ghostscript function in EpsImagePlugin.py, (3…

7.7
First published (updated )

pip/pillowOS Command Injection

First published (updated )

PythonA vulnerability has been found in the CPython `venv` module and CLI where path names provided when c…

First published (updated )

debian/python3.11Unbounded memory buffering in SelectorSocketTransport.writelines()

8.7
First published (updated )

Python 2.7Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines() method would not "paus…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203