Medium DLA-2628-1 2 CVEs

python2.7 - security update

Published Apr 17, 2021 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	python2.7	2.7.13-2+deb9u5

Vulnerabilities 2

Medium 6.1

CVE-2019-16935

The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the s…

python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Alpine

Sep 28, 2019
Medium 5.9

CVE-2021-23336 EPSS 41%

Web Cache Poisoning

The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before 3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a vector called par…

python-django python-django python3.4 python3.5 Debian Ubuntu Azure Linux Alpine

Feb 15, 2021