Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Python

Pythonвысокоуровневый язык программирования общего назначения. Его философия дизайна делает акцент на читаемости кода.

Релизный цикл, информация об уязвимостях

Продукт: Python
Вендор: python

График релизов

3.103.113.123.133.1420212022202320242025202620272028202920302031

Релизные элементы

KBВерсияБилдДата доступности
3.13.153.13.15
3.13.143.13.14
3.13.133.13.13
3.13.123.13.12
3.13.113.13.11
3.13.103.13.10
3.13.93.13.9
3.13.83.13.8
3.13.73.13.7
3.13.63.13.6

Показывать по

Недавние уязвимости Python

Количество 1 113

redhat логотип

CVE-2026-0864

3 месяца назад

When using the "configparser" module to write configuration files containing multi-line text values with carriage return characters (\r) the resulting file could be injected with unexpected keys and values if the attacker controls the written value.

CVSS3: 5.5
EPSS: Низкий
github логотип

GHSA-g345-7jg6-m22p

3 месяца назад

When using the "configparser" module to write configuration files containing multi-line text values with carriage return characters (\r) the resulting file could be injected with unexpected keys and values if the attacker controls the written value.

CVSS3: 5.5
EPSS: Низкий
rocky логотип

RLSA-2026:6473

4 месяца назад

Important: python3 security update

EPSS: Низкий
rocky логотип

RLSA-2026:1631

4 месяца назад

Moderate: python3 security update

EPSS: Низкий
nvd логотип

CVE-2026-7210

5 месяцев назад

`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch.

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2026-7210

5 месяцев назад

`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch.

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2026-7210

5 месяцев назад

`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch.

CVSS3: 5.3
EPSS: Низкий
debian логотип

CVE-2026-7210

5 месяцев назад

`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entro ...

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-wxv8-w48j-r2f4

5 месяцев назад

`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch.

CVSS3: 9.8
EPSS: Низкий
oracle-oval логотип

ELSA-2026-9614

5 месяцев назад

ELSA-2026-9614: python security update (IMPORTANT)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
redhat логотип
CVE-2026-0864

When using the "configparser" module to write configuration files containing multi-line text values with carriage return characters (\r) the resulting file could be injected with unexpected keys and values if the attacker controls the written value.

CVSS3: 5.5
0%
Низкий
3 месяца назад
github логотип
GHSA-g345-7jg6-m22p

When using the "configparser" module to write configuration files containing multi-line text values with carriage return characters (\r) the resulting file could be injected with unexpected keys and values if the attacker controls the written value.

CVSS3: 5.5
0%
Низкий
3 месяца назад
rocky логотип
RLSA-2026:6473

Important: python3 security update

0%
Низкий
4 месяца назад
rocky логотип
RLSA-2026:1631

Moderate: python3 security update

1%
Низкий
4 месяца назад
nvd логотип
CVE-2026-7210

`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch.

CVSS3: 7.5
1%
Низкий
5 месяцев назад
ubuntu логотип
CVE-2026-7210

`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch.

CVSS3: 7.5
1%
Низкий
5 месяцев назад
redhat логотип
CVE-2026-7210

`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch.

CVSS3: 5.3
1%
Низкий
5 месяцев назад
debian логотип
CVE-2026-7210

`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entro ...

CVSS3: 7.5
1%
Низкий
5 месяцев назад
github логотип
GHSA-wxv8-w48j-r2f4

`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch.

CVSS3: 9.8
1%
Низкий
5 месяцев назад
oracle-oval логотип
ELSA-2026-9614

ELSA-2026-9614: python security update (IMPORTANT)

0%
Низкий
5 месяцев назад

Уязвимостей на страницу


Поделиться