Vulnerability search

Batch lookup →

Active filters:Severity: none python clear all

160 matches

CVE

Title

Severity

CVE-2021-4189
Python vulnerabilities
mediumEPSS 3.2%
128.7
8.1
87.2%
2026-07-06 11:48 UTC
CVE-2026-21441
Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)2 sources· osv_advisory
highEPSS 3%
124.8
7.5
85.3%
2026-07-07 16:03 UTC
CVE-2019-9636
urlsplit does not handle NFKC normalization3 sources· cve · osv_advisory
criticalEPSS 8.8%
105.9
9.8
94.9%
2019-03-08 21:29 UTC
CVE-2019-9948
urllib module local_file:// scheme3 sources· cve · osv_advisory
criticalEPSS 12%
103.0
9.1
95.8%
2019-03-23 18:29 UTC
CVE-2026-44432
urllib3 vulnerabilities3 sources· osv_advisory · ubuntu_usn
highEPSS 0.7%
98.7
7.5
49.9%
2026-06-03 13:50 UTC
CVE-2018-25032
Nokogiri affected by zlib's Out-of-bounds Write vulnerability6 sources· osv_advisory · cve · siemens_advisory
highEPSS 52%
97.9
7.5
98.9%
2022-03-26 00:00 UTC
CVE-2016-2183
Sweet32 attack (DES, 3DES)2 sources· cve · osv_advisory
highEPSS 96%
97.4
7.5
99.9%
2016-09-01 00:00 UTC
CVE-2014-0224
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict…
highEPSS 95%
96.9
7.4
99.9%
2014-06-05 21:00 UTC
CVE-2025-13836
When reading an HTTP response from a server, if no read amount is specified, the default behavior…
highEPSS 1.6%
96.0
7.5
74.8%
2025-12-01 18:02 UTC
CVE-2015-20107
mailcap shell command injection2 sources· osv_advisory · cve
highEPSS 7.1%
95.2
7.6
93.8%
2022-04-13 00:00 UTC
CVE-2019-6690
Improper Input Validation python-gnupg5 sources· cve · osv_advisory
highEPSS 8.6%
94.3
7.5
94.7%
2020-03-13 20:05 UTC
CVE-2025-69534
Python vulnerabilities
highEPSS 0.6%
93.6
7.5
44.7%
2026-07-27 16:37 UTC
CVE-2019-15903
In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to…
highEPSS 6.6%
93.6
7.5
93.4%
2019-09-04 05:59 UTC
CVE-2019-9674
Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service…
highEPSS 5.5%
92.9
7.5
92.3%
2020-02-04 14:05 UTC
CVE-2026-54058
Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA…2 sources· osv_advisory
criticalEPSS 0.5%
90.0
9.1
42.2%
2026-07-23 11:41 UTC
CVE-2019-11324
The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA…2 sources· cve
highEPSS 2.8%
89.0
7.5
85.8%
2019-04-18 21:29 UTC
CVE-2019-9740
HTTP Header Injection (follow-up of CVE-2016-5699)3 sources· cve · osv_advisory
mediumEPSS 5.3%
85.8
6.1
92.1%
2019-03-13 03:29 UTC
CVE-2019-9947
HTTP Header Injection (follow-up of CVE-2016-5699)3 sources· cve · osv_advisory
mediumEPSS 5.3%
85.7
6.1
92.1%
2019-03-23 18:29 UTC
CVE-2019-6802
CRLF Injection in pypiserver4 sources· cve · osv_advisory
mediumEPSS 3.8%
84.2
6.1
89.3%
2019-01-30 20:56 UTC
CVE-2019-11236
In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker…2 sources· cve
mediumEPSS 2.1%
78.7
6.1
80.3%
2019-04-15 15:29 UTC
CVE-2026-3644
Incomplete control character validation in http.cookies3 sources· osv_advisory
highEPSS 0.5%
78.1
7.5
39.4%
2026-03-18 08:55 UTC
CVE-2026-42311
Debian pillow: security update5 sources· debian_dsa · ubuntu_usn · osv_advisory …
highEPSS 0.1%
75.7
7.8
4.5%
2026-06-21 00:00 UTC
CVE-2025-13462
tarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handling3 sources· osv_advisory
lowEPSS 0.2%
73.6
3.3
5.9%
2026-03-14 08:49 UTC
CVE-2026-4519
webbrowser.open() allows leading dashes in URLs3 sources· osv_advisory
highEPSS 0.3%
69.1
7.1
23.1%
2026-03-25 08:52 UTC
CVE-2014-1912
Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before…3 sources· cve · osv_advisory
noneEPSS 28%
58.8
—
98.0%
2014-03-01 00:55 UTC