Skip to content
OpenAdvisories

Vendor

Python Software Foundation

81 known vulnerabilities.

Products

CPython 80 pymanager 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.2
    CVE-2026-19445 Public exploit

    Use-after-free of a server-side SSLContext when sni_callback switches contexts

    A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its sni_callback assigns a different context to SSLSocket.context (the documented way to select a certificate per server name) and nothing else keeps the original …

    Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Alpine
  • Critical 9.4
    CVE-2025-4517 Public exploit

    Arbitrary writes via tarfile realpath overflow

    Allows arbitrary filesystem writes outside the extraction directory during extraction with filter="data". You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() usin…

    Python Software Foundation CPython pypy3 python3.12 Debian Ubuntu Alpine