Python Software Foundation vulnerabilities
85 CVEs and advisories name Python Software Foundation as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-115559imaplib STARTTLS serves plaintext bytes buffered before the handshake as if they came over TLS
- CVE-2026-115791Prevent shadowing stdlib in gzip/tarfile/zipfile CLI during extraction
- CVE-2026-124249`http.cookiejar` applies expired `Set-Cookie` to cookie store before policy validation
- CVE-2026-19552ssl.get_server_certificate(addr, ca_certs=...) verifies the chain but never the identity
- CVE-2026-119170Regression in FIPS enforcement of hash algorithms affecting only Python 3.14.10
- CVE-2026-116566socket.getaddrinfo() accepts embedded null bytes in host and port
- CVE-2026-103995Lenient parsing of integers for response body and chunk framing
- CVE-2026-115557Distrust compromised intermediate certificates in ssl module
- CVE-2026-114583tar filter allows writing outside destination via empty-named symlink
- CVE-2026-19553SSLContext.wrap_bio() missing validation of server_hostname parameter
- CVE-2026-19445Use-after-free of a server-side SSLContext when sni_callback switches contexts
- CVE-2026-12345Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory
- CVE-2026-82049tarfile extraction filters allow file modification and content disclosure via hard link to symlink
- CVE-2026-87910tarfile hardlink fallback ignores custom extraction filter rejection via None
- CVE-2026-15310zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits
- CVE-2026-19672tarfile extraction filter bypass allows creation of directories outside the destination
- CVE-2026-15806`HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matching
- CVE-2026-17084stringprep.map_table_b2() deviates from RFC 3454 Table B.2
- CVE-2026-18503Super-linear CPU usage for unbounded input to csv.Sniffer.sniff()
- CVE-2026-6879Quadratic Behavior in xml.etree.ElementPath Index Predicates
- CVE-2026-15308Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations
- CVE-2026-4360Tarfile.extract() doesn't fully respect filter parameter
- CVE-2026-11972tarfile opened in streaming mode mishandles EOF
- CVE-2026-0864Configuration Injection via Carriage Return (\r) in write() method
- CVE-2026-11940tarfile extraction filter bypass allows escaping the destination directory
- CVE-2026-12003CPython >3.11 Insecure Input Validation resulting in privilege escalation
- CVE-2026-9669bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow
- CVE-2026-7774tarfile.data_filter path traversal bypass allows writing outside the extraction directory
- CVE-2026-3276Potential DoS via quadratic complexity in unicodedata.normalize()
- CVE-2026-8328FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address