Python — высокоуровневый язык программирования общего назначения. Его философия дизайна делает акцент на читаемости кода.
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 3.13.18 | 3.13.18 | ||
| 3.13.17 | 3.13.17 | ||
| 3.13.16 | 3.13.16 | ||
| 3.13.15 | 3.13.15 | ||
| 3.13.14 | 3.13.14 | ||
| 3.13.13 | 3.13.13 | ||
| 3.13.12 | 3.13.12 | ||
| 3.13.11 | 3.13.11 | ||
| 3.13.10 | 3.13.10 | ||
| 3.13.9 | 3.13.9 |
Показывать по
Количество 1 113
GHSA-7qj2-q5c8-cxx5
The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data.
CVE-2026-4360
In the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts content from untrusted tar files could end up writing files with an unexpected uid/gid despite the user passing filter='data' to the extract() function.
CVE-2026-4360
In the Tarfile.extract() function, the filter parameter is not passed ...
CVE-2026-4360
In the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts content from untrusted tar files could end up writing files with an unexpected uid/gid despite the user passing filter='data' to the extract() function.
CVE-2026-4360
In the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts content from untrusted tar files could end up writing files with an unexpected uid/gid despite the user passing filter='data' to the extract() function.
GHSA-gf2w-jqmq-fcm8
In the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts content from untrusted tar files could end up writing files with an unexpected uid/gid despite the user passing filter='data' to the extract() function.
RLSA-2023:2860
Moderate: python27:2.7 security update
CVE-2026-0864
When using the "configparser" module to write configuration files containing multi-line text values with carriage return characters (\r) the resulting file could be injected with unexpected keys and values if the attacker controls the written value.
CVE-2026-0864
When using the "configparser" module to write configuration files cont ...
CVE-2026-0864
When using the "configparser" module to write configuration files containing multi-line text values with carriage return characters (\r) the resulting file could be injected with unexpected keys and values if the attacker controls the written value.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-7qj2-q5c8-cxx5 The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data. | CVSS3: 7.5 | 1% Низкий | 4 месяца назад |
 | CVE-2026-4360 In the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts content from untrusted tar files could end up writing files with an unexpected uid/gid despite the user passing filter='data' to the extract() function. | CVSS3: 5.3 | 0% Низкий | 4 месяца назад |
| CVE-2026-4360 In the Tarfile.extract() function, the filter parameter is not passed ... | CVSS3: 5.3 | 0% Низкий | 4 месяца назад |
 | CVE-2026-4360 In the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts content from untrusted tar files could end up writing files with an unexpected uid/gid despite the user passing filter='data' to the extract() function. | CVSS3: 5.3 | 0% Низкий | 4 месяца назад |
 | CVE-2026-4360 In the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts content from untrusted tar files could end up writing files with an unexpected uid/gid despite the user passing filter='data' to the extract() function. | CVSS3: 5 | 0% Низкий | 4 месяца назад |
| GHSA-gf2w-jqmq-fcm8 In the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts content from untrusted tar files could end up writing files with an unexpected uid/gid despite the user passing filter='data' to the extract() function. | CVSS3: 5.3 | 0% Низкий | 4 месяца назад |
 | RLSA-2023:2860 Moderate: python27:2.7 security update | 3% Низкий | 4 месяца назад | |
| CVE-2026-0864 When using the "configparser" module to write configuration files containing multi-line text values with carriage return characters (\r) the resulting file could be injected with unexpected keys and values if the attacker controls the written value. | CVSS3: 5.5 | 0% Низкий | 5 месяцев назад |
| CVE-2026-0864 When using the "configparser" module to write configuration files cont ... | CVSS3: 5.5 | 0% Низкий | 5 месяцев назад |
| CVE-2026-0864 When using the "configparser" module to write configuration files containing multi-line text values with carriage return characters (\r) the resulting file could be injected with unexpected keys and values if the attacker controls the written value. | CVSS3: 5.5 | 0% Низкий | 5 месяцев назад |
Уязвимостей на страницу