Login Request a demo
CP
Product
CPython
by Python Software Foundation · last CVE Oct 27, 2026
67
CVEs
0
On KEV
9.4
Max CVSS
6
New 30D
Vulnerabilities67In the news1Timeline
Severity mix
Critical 3High 21Medium 33Low 9
Severity
All severities67Critical3High21Medium33Low9
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add CPython to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-11168
3.7
1%
Nov 12
Improper validation of IPv6 and IPvFuture addresses
Affected: before 3.9.21; 3.10.0 before 3.10.16; 3.11.0 before 3.11.4; 3.12.0a1 before 3.12.0b1
CVE-2026-4519
3.3
0%
Mar 20
webbrowser.open() allows leading dashes in URLs
Affected: before 3.10.21; 3.11.0 before 3.11.16; 3.12.0 before 3.12.14; 3.13.0 before 3.13.13; 3.14.0 before 3.14.4; 3.15.0a1 before 3.15.0a8
CVE-2025-13462
3.3
0%
Mar 12
tarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handling
Affected: before 3.10.21; 3.11.0 before 3.11.16; 3.12.0 before 3.12.14; 3.13.0 before 3.13.13; 3.14.0 before 3.14.4; 3.15.0a1 before 3.15.0a8
CVE-2026-18503
2.4
0%
Aug 10
Super-linear CPU usage for unbounded input to csv.Sniffer.sniff()
Affected: before 3.10.21; 3.11.0 before 3.11.16; 3.12.0 before 3.12.14; 3.13.0 before 3.13.15; 3.14.0 before 3.14.7; 3.15.0a1 before 3.15.0rc1; +1 more
CVE-2025-1795
2.3
1%
Feb 28
Mishandling of comma during folding and unicode-encoding of email headers
Affected: before 3.9.23; 3.10.0 before 3.10.17; 3.11.0 before 3.11.9; 3.12.0 before 3.12.3; 3.13.0a1 before 3.13.0a5
CVE-2024-3220
2.3
1%
Feb 14
Default mimetype known files writeable on Windows
Affected: before 3.11.18; 3.12.0 before 3.12.16; 3.13.0 before 3.13.18; 3.14.0 before 3.14.9; 3.15.0 before 3.15.1; 3.16.0a1 before 3.16.0
CVE-2026-15310
2.1
1%
Aug 25
zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits
Affected: before 3.10.22; 3.11.0 before 3.11.17; 3.12.0 before 3.12.15; 3.13.0 before 3.13.16; 3.14.0 before 3.14.8; 3.15.0a1 before 3.15.0rc2
CVE-2026-103995
New
2.0
0%
Oct 27
Lenient parsing of integers for response body and chunk framing
Affected: before 3.16.0
CVE-2026-6879
2.0
0%
Jul 28
Quadratic Behavior in xml.etree.ElementPath Index Predicates
Affected: before 3.10.21; 3.11.0 before 3.11.16; 3.12.0 before 3.12.14; 3.13.0 before 3.13.15; 3.14.0 before 3.14.7; 3.15.0a1 before 3.15.0rc1
Showing 9