CP
Product
Cpython
6
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 1Low 0
Watch
Add Cpython to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-9287 | 7.8 | Oct 22 | Virtual environment (venv) activation scripts don't quote paths Affected: through 3.13.0 |
| CVE-2024-6232 | 7.5 | Sep 3 | Regular-expression DoS when parsing TarFile headers Affected: before 3.8.20; 3.9.0 before 3.9.20; 3.10.0 before 3.10.15; 3.11.0 before 3.11.10; 3.12.0 before 3.12.6; 3.13.0a1 before 3.13.0rc2 |
| CVE-2024-7592 | 7.5 | Aug 19 | Quadratic complexity parsing cookies with backslashes Affected: before 3.8.20; 3.9.0 before 3.9.20; 3.10.0 before 3.10.15; 3.11.0 before 3.11.10; 3.12.0 before 3.12.6; 3.13.0a1 before 3.13.0rc2 |
| CVE-2024-4032 | 7.5 | Jun 17 | Incorrect IPv4 and IPv6 private ranges Affected: before 3.12.4; 3.13.0a1 before 3.13.0a6 |
| CVE-2024-4030 | 7.1 | May 7 | tempfile.mkdtemp() may be readable and writeable by all users on Windows Affected: 0; 3.13.0a1 |
| CVE-2024-6923 | 5.5 | Aug 1 | Email header injection due to unquoted newlines Affected: through 3.13.0rc2 |
Showing 6