Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now

CPython — Vulnerabilities & Security Advisories 52

All 52 CVE vulnerabilities found in CPython, with AI-generated Chinese analysis, references, and POCs.

Vendor: Python Software Foundation

CVE IDTitleCVSSSeverityPaused
CVE-2025-4138 Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory CWE-22 7.5 High2025-06-03
CVE-2025-4330 Extraction filter bypass for linking outside extraction directory CWE-22 7.5 High2025-06-03
CVE-2025-4517 Arbitrary writes via tarfile realpath overflow CWE-22 9.4 Critical2025-06-03
CVE-2025-4516 Use-after-free in "unicode_escape" decoder with error handler CWE-416 7.5AIHighAI2025-05-15
CVE-2025-1795 Mishandling of comma during folding and unicode-encoding of email headers 7.5 -2025-02-28
CVE-2024-3220 Default mimetype known files writeable on Windows CWE-426 5.5 -2025-02-14
CVE-2025-0938 URL parser allowed square brackets in domain names CWE-20 9.1 -2025-01-31
CVE-2024-12254 Unbounded memory buffering in SelectorSocketTransport.writelines() CWE-400 7.5 -2024-12-06
CVE-2024-11168 Improper validation of IPv6 and IPvFuture addresses 9.1 -2024-11-12
CVE-2024-9287 Virtual environment (venv) activation scripts don't quote paths CWE-428 10.0AICriticalAI2024-10-22
CVE-2024-6232 Regular-expression DoS when parsing TarFile headers CWE-1333 6.5 -2024-09-03
CVE-2024-8088 Infinite loop when iterating over zip archive entry names from zipfile.Path CWE-835 6.5 -2024-08-22
CVE-2024-7592 Quadratic complexity parsing cookies with backslashes CWE-400 5.3 -2024-08-19
CVE-2024-6923 Email header injection due to unquoted newlines 4.3 -2024-08-01
CVE-2024-3219 Pure-Python fallback of socket.socketpair() doesn’t authenticate peer connection 6.3AIMediumAI2024-07-29
CVE-2024-5642 Buffer overread when using an empty list with SSLContext.set_npn_protocols() --AI2024-06-27
CVE-2024-0397 Memory race condition in ssl.SSLContext certificate store methods 7.4AIHighAI2024-06-17
CVE-2024-4032 Incorrect IPv4 and IPv6 private ranges 7.5AIHighAI2024-06-17
CVE-2024-4030 tempfile.mkdtemp() may be readable and writeable by all users on Windows CWE-276 7.1AIHighAI2024-05-07
CVE-2023-6597 Python 安全漏洞 7.8 High2024-03-19
CVE-2024-0450 Quoted zip-bomb protection for zipfile CWE-405 6.2 Medium2024-03-19
CVE-2023-6507 Groups not dropped before running subprocess when using empty 'extra_groups' parameter CWE-269 6.1 Medium2023-12-08

All 52 known CVE vulnerabilities affecting CPython with full Chinese analysis, references, and POCs where available.