Python — высокоуровневый язык программирования общего назначения. Его философия дизайна делает акцент на читаемости кода.
Релизный цикл, информация об уязвимостях
График релизов
Количество 997
CVE-2026-4519
The webbrowser.open() API would accept leading dashes in the URL which ...
CVE-2026-4519
The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior rejects leading dashes. Users are recommended to sanitize URLs prior to passing to webbrowser.open().
CVE-2026-4519
The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior rejects leading dashes. Users are recommended to sanitize URLs prior to passing to webbrowser.open().
CVE-2026-4519
The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior rejects leading dashes. Users are recommended to sanitize URLs prior to passing to webbrowser.open().
BDU:2026-09515
Уязвимость модуля HTTP client языка программирования Python, позволяющая нарушителю внедрять произвольные HTTP-заголовки
RLSA-2023:5994
Important: python27:2.7 security update
RLSA-2023:5998
Important: python39:3.9 and python39-devel:3.9 security update
GHSA-h46w-ffvp-4pw5
When an Expat parser with a registered ElementDeclHandler parses an inline document type definition containing a deeply nested content model a C stack overflow occurs.
GHSA-vf33-88pf-hwp3
The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output().
CVE-2026-4224
When an Expat parser with a registered ElementDeclHandler parses an in ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
CVE-2026-4519 The webbrowser.open() API would accept leading dashes in the URL which ... | CVSS3: 3.3 | 0% Низкий | 4 месяца назад | |
CVE-2026-4519 The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior rejects leading dashes. Users are recommended to sanitize URLs prior to passing to webbrowser.open(). | CVSS3: 3.3 | 0% Низкий | 4 месяца назад | |
CVE-2026-4519 The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior rejects leading dashes. Users are recommended to sanitize URLs prior to passing to webbrowser.open(). | CVSS3: 3.3 | 0% Низкий | 4 месяца назад | |
CVE-2026-4519 The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior rejects leading dashes. Users are recommended to sanitize URLs prior to passing to webbrowser.open(). | CVSS3: 7.1 | 0% Низкий | 4 месяца назад | |
BDU:2026-09515 Уязвимость модуля HTTP client языка программирования Python, позволяющая нарушителю внедрять произвольные HTTP-заголовки | CVSS3: 4.9 | 1% Низкий | 4 месяца назад | |
RLSA-2023:5994 Important: python27:2.7 security update | 1% Низкий | 4 месяца назад | ||
RLSA-2023:5998 Important: python39:3.9 and python39-devel:3.9 security update | 1% Низкий | 4 месяца назад | ||
GHSA-h46w-ffvp-4pw5 When an Expat parser with a registered ElementDeclHandler parses an inline document type definition containing a deeply nested content model a C stack overflow occurs. | CVSS3: 7.5 | 1% Низкий | 5 месяцев назад | |
GHSA-vf33-88pf-hwp3 The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output(). | CVSS3: 7.5 | 0% Низкий | 5 месяцев назад | |
CVE-2026-4224 When an Expat parser with a registered ElementDeclHandler parses an in ... | CVSS3: 7.5 | 1% Низкий | 5 месяцев назад |
Уязвимостей на страницу