Security Intel Hub 81+

Curated security advisories, vulnerability analyses, and exploit write-ups — auto-cleaned and translated to English. Updated continuously.

Filter

KEV only

Verified PoC

Clear filters

Critical

Python tarfile symlink escape via hardlink fallback (CVE-2026-11040) patch

CVE-2026-11040 · github.com · 2026-06-27

Python tarfile module

High

Python CPython CVE-2026-12003 Vulnerability Advisory and Patch Analysis

CVE-2026-12003 · github.com · 2026-06-27

Python cpython (all versions using getpath.py)

High

CVE-2026-12003: Python getpath.py Source File Path Disclosure via Removed Fallback

CVE-2026-12003 · github.com · 2026-06-27

Python < 3.14

High

Python tarfile symlink escape vulnerability fix via hardlink fallback

GHSA-151558 · github.com · 2026-06-27

Python tarfile module

Medium

Python tarfile._Stream.seek infinite loop DoS fix

github.com · 2026-06-27

Python 3.7 · Python 3.8 …

Medium

Python bz2.BZ2Decompressor State Inconsistency Vulnerability and Fix

github.com · 2026-06-13

Python 3.15

High

Python tarfile Directory Traversal Vulnerability Fix Analysis

CVE-2025-0981 · github.com · 2026-06-13

Python 3.13.0 · Python 3.14.0 …

Medium

Python tarfile data_filter Path Traversal Vulnerability Analysis and Fix

github.com · 2026-06-13

Python < 3.12.8

High

Python Remote Debugging Module Memory Out-of-Bounds Read Vulnerability Fix Analysis

GHSA-148178 · github.com · 2026-06-13

Python < 3.14

Medium

Python bz2 BZ2Decompressor Internal State Inconsistency Vulnerability and Fix

github.com · 2026-06-13

Python <= 3.14

High

Python pyexpat Hash Salt Configuration Vulnerability Fix Analysis

CVE-2024-6345 · github.com · 2026-06-13

Python 3.8 · Python 3.9 …

Medium

Python pyexpat XML Hash Flooding Mitigation Patch

github.com · 2026-06-13

Python 3.15 and earlier

High

CVE-2026-7210 Python pyexpat Hash Flooding DoS Vulnerability Fix

CVE-2026-7210 · github.com · 2026-05-22

Python pyexpat module

Unknown

Python tarfile GNU Long Filename Directory Type Misidentification

github.com · 2026-05-02

### Vulnerability Overview - **Vulnerability ID**: gh-141707 - **Description**: The normalization of `TarInfo` `DIRTYPE` is skipped when processing GNU long filenames. Specifically, when a filename en…

Unknown

Python CVE-2020-2297: SourcelessFileLoader io.open_code Fix

CVE-2020-2297 · github.com · 2026-05-02

Python < 3.11

Medium

Python tarfile GNU Long Name Type Misclassification Fix

CVE-2025-0000 · github.com · 2026-05-02

Python 3.10

High

Python shutil.unpack_archive ZIP Path Traversal Vulnerability Analysis

github.com · 2026-04-30

Python standard library shutil module

Medium

Python http.cookies BaseCookie.js_output Cookie Injection Fix

GHSA-gh-90309 · github.com · 2026-04-30

Python http.cookies module (BaseCookie.js_output method)

High

Python shutil.unpack_archive ZIP Path Traversal Vulnerability and Fix

GHSA-146581 · github.com · 2026-04-30

Python 3.14 and earlier

High

Python shutil.unpack_archive ZIP Path Traversal Vulnerability Fix Analysis

GHSA-gh-146581 · github.com · 2026-04-30

Python 3.13

All articles are auto-cleaned (markdown extraction + LLM noise removal) and translated to English by our offline pipeline. Source URL is always preserved at the bottom of each article.

Want a specific source covered? Email us — we add new feeds weekly.

Goal Reached Thanks to every supporter — we hit 100%!

Security Intel Hub 81+