Skip to content
OpenAdvisories

Product · Python Software Foundation

CPython

80 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

42 results · Clear filters · Feed

  • Medium 6.2
    CVE-2024-0450

    Quoted zip-bomb protection for zipfile

    An issue was found in the CPython `zipfile` module affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior. The zipfile module is vulnerable to “quoted-overlap” zip-bombs which exploit the zip format to create a zip-bomb with a high compressi…

    Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Alpine
  • Medium 6.1
    CVE-2023-6507

    Groups not dropped before running subprocess when using empty 'extra_groups' parameter

    An issue was found in CPython 3.12.0 `subprocess` module on POSIX platforms. The issue was fixed in CPython 3.12.1 and does not affect other stable releases. When using the `extra_groups=` parameter with an empty list as a value (ie `extra_groups=[]`) the log…

    Python Software Foundation CPython