| CVE-2026-7210 |
|
High |
May 11, 2026 |
`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to tri
more...
`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch.
less...
|
3.13.14, 3.14.6, 3.14.5, 3.13.13, 3.14.4, 3.12.13, 3.11.15, 3.10.20, 3.13.12, 3.14.3
|
| CVE-2026-6019 |
|
Medium |
Apr 22, 2026 |
http.cookies.Morsel.js_output() returns an inline snippet and only escapes " for JavaScript string context. It does not neutralize the HTML parser-sen
more...
http.cookies.Morsel.js_output() returns an inline snippet and only escapes " for JavaScript string context. It does not neutralize the HTML parser-sensitive sequence inside the generated script element. Mitigation base64-encodes the cookie value to disallow escaping using cookie value.
less...
|
3.13.14, 3.14.6, 3.14.5, 3.13.13, 3.14.4, 3.11.15, 3.10.20, 3.14.1, 3.13.5, 3.11.13
|
| CVE-2026-3087 |
|
High |
Apr 27, 2026 |
If `shutil.unpack_archive()` is given a ZIP archive with an absolute Windows path containing a drive (`C:\\...`) then the archive will be extracted out
more...
If `shutil.unpack_archive()` is given a ZIP archive with an absolute Windows path containing a drive (`C:\\...`) then the archive will be extracted outside the target directory which is different than other operating systems. Only Windows is affected by this vulnerability.
less...
|
3.13.14, 3.13.13, 3.14.4, 3.12.13, 3.11.15, 3.10.20, 3.13.12, 3.14.3, 3.14.2, 3.13.11
|
| BDSA-2026-7456 |
|
Medium |
Apr 17, 2026 |
CPython is vulnerable to memory corruption due to the presence of a stack-based buffer overflow flaw in the `profiling.sampling` module. This issue cou
more...
CPython is vulnerable to memory corruption due to the presence of a stack-based buffer overflow flaw in the `profiling.sampling` module. This issue could allow a local attacker to trigger a denial-of-service (DoS) condition by establishing repeated connections to the process, or leverage the memory corruption in order to achieve more severe confidentiality, integrity or availability impacts.
less...
|
|
| BDSA-2025-1227 |
|
Medium |
Feb 17, 2025 |
The Python (C implementation) `mimetypes` module on Windows uses the same default known file locations as on Linux and macOS platforms. This causes the
more...
The Python (C implementation) `mimetypes` module on Windows uses the same default known file locations as on Linux and macOS platforms. This causes the file to be user-writable, meaning other users can create invalid files to cause a `MemoryError` to be raised on Python runtime startup or have file extensions be interpreted as the incorrect file type.
less...
|
|