Product by Ubuntu

    Python3.11

    8 known vulnerabilities in Python3.11 (Ubuntu), 0 of them actively exploited (CISA KEV).

    Key figures

    8

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Python3.11 (Ubuntu)
    HighCVE-2026-15308

    Python Software Foundation CPython: Uncontrolled Resource Consumption

    also in 17 other products

    7.5
    HighCVE-2026-9669

    bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow

    also in 3 other products

    —
    MediumCVE-2026-8328

    FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address

    also in 4 other products

    —
    HighCVE-2025-69534

    Python-markdown Markdown: Information Disclosure

    also in 2 other products

    7.5
    HighCVE-2026-3644

    Incomplete control character validation in http.cookies

    also in 13 other products

    7.5
    MediumCVE-2026-3276

    Potential DoS via quadratic complexity in unicodedata.normalize()

    also in 3 other products

    —
    MediumCVE-2026-1502

    HTTP client proxy tunnel headers not validated for CR/LF

    also in 5 other products

    —
    MediumCVE-2026-6019

    BaseCookie.js_output() does not neutralize embedded characters

    also in 14 other products

    6.1

    News

    All products by Ubuntu