python3.9

4 results · Clear filters · Feed

• High 7.6
  CVE-2026-19553 Public exploit

  SSLContext.wrap_bio() missing validation of server_hostname parameter

  ssl.SSLContext.wrap_bio() didn't require the server_hostname argument to not be None if ssl.SSLContext.check_hostname was set. Due to a missing parameter check in SSLObject, if the server_hostname argument isn't supplied then hostname verification would be si…

  Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Alpine
  Sep 30, 2026
• High 7.5
  CVE-2024-6232 Public exploit

  Regular-expression DoS when parsing TarFile headers

  There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives.

  Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Alpine
  Sep 3, 2024
• High 7.5
  CVE-2023-24329 Public exploit EPSS 20%

  An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by suppl…

  python3.4 python3.5 python2.7 python3.6 Debian Ubuntu
  Feb 17, 2023
• High 7.8
  CVE-2015-20107 Public exploit

  In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the…

  python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Alpine
  Apr 13, 2022