Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Python

Pythonвысокоуровневый язык программирования общего назначения. Его философия дизайна делает акцент на читаемости кода.

Релизный цикл, информация об уязвимостях

Продукт: Python
Вендор: python

График релизов

3.103.113.123.133.1420212022202320242025202620272028202920302031

Недавние уязвимости Python

Количество 997

debian логотип

CVE-2026-4519

4 месяца назад

The webbrowser.open() API would accept leading dashes in the URL which ...

CVSS3: 3.3
EPSS: Низкий
nvd логотип

CVE-2026-4519

4 месяца назад

The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior rejects leading dashes. Users are recommended to sanitize URLs prior to passing to webbrowser.open().

CVSS3: 3.3
EPSS: Низкий
ubuntu логотип

CVE-2026-4519

4 месяца назад

The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior rejects leading dashes. Users are recommended to sanitize URLs prior to passing to webbrowser.open().

CVSS3: 3.3
EPSS: Низкий
redhat логотип

CVE-2026-4519

4 месяца назад

The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior rejects leading dashes. Users are recommended to sanitize URLs prior to passing to webbrowser.open().

CVSS3: 7.1
EPSS: Низкий
fstec логотип

BDU:2026-09515

4 месяца назад

Уязвимость модуля HTTP client языка программирования Python, позволяющая нарушителю внедрять произвольные HTTP-заголовки

CVSS3: 4.9
EPSS: Низкий
rocky логотип

RLSA-2023:5994

4 месяца назад

Important: python27:2.7 security update

EPSS: Низкий
rocky логотип

RLSA-2023:5998

4 месяца назад

Important: python39:3.9 and python39-devel:3.9 security update

EPSS: Низкий
github логотип

GHSA-h46w-ffvp-4pw5

5 месяцев назад

When an Expat parser with a registered ElementDeclHandler parses an inline document type definition containing a deeply nested content model a C stack overflow occurs.

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-vf33-88pf-hwp3

5 месяцев назад

The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output().

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2026-4224

5 месяцев назад

When an Expat parser with a registered ElementDeclHandler parses an in ...

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
debian логотип
CVE-2026-4519

The webbrowser.open() API would accept leading dashes in the URL which ...

CVSS3: 3.3
0%
Низкий
4 месяца назад
nvd логотип
CVE-2026-4519

The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior rejects leading dashes. Users are recommended to sanitize URLs prior to passing to webbrowser.open().

CVSS3: 3.3
0%
Низкий
4 месяца назад
ubuntu логотип
CVE-2026-4519

The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior rejects leading dashes. Users are recommended to sanitize URLs prior to passing to webbrowser.open().

CVSS3: 3.3
0%
Низкий
4 месяца назад
redhat логотип
CVE-2026-4519

The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior rejects leading dashes. Users are recommended to sanitize URLs prior to passing to webbrowser.open().

CVSS3: 7.1
0%
Низкий
4 месяца назад
fstec логотип
BDU:2026-09515

Уязвимость модуля HTTP client языка программирования Python, позволяющая нарушителю внедрять произвольные HTTP-заголовки

CVSS3: 4.9
1%
Низкий
4 месяца назад
rocky логотип
RLSA-2023:5994

Important: python27:2.7 security update

1%
Низкий
4 месяца назад
rocky логотип
RLSA-2023:5998

Important: python39:3.9 and python39-devel:3.9 security update

1%
Низкий
4 месяца назад
github логотип
GHSA-h46w-ffvp-4pw5

When an Expat parser with a registered ElementDeclHandler parses an inline document type definition containing a deeply nested content model a C stack overflow occurs.

CVSS3: 7.5
1%
Низкий
5 месяцев назад
github логотип
GHSA-vf33-88pf-hwp3

The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output().

CVSS3: 7.5
0%
Низкий
5 месяцев назад
debian логотип
CVE-2026-4224

When an Expat parser with a registered ElementDeclHandler parses an in ...

CVSS3: 7.5
1%
Низкий
5 месяцев назад

Уязвимостей на страницу


Поделиться