Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
BIT-python-min-2026-115557
  • Bitnami/python-min
Distrust compromised intermediate certificates in ssl module 6 days ago
  • Fix available
  • Severity - 9.4 (Critical)
BIT-python-2026-115557
  • Bitnami/python
Distrust compromised intermediate certificates in ssl module 6 days ago
  • Fix available
  • Severity - 9.4 (Critical)
BIT-libpython-2026-115557
  • Bitnami/libpython
Distrust compromised intermediate certificates in ssl module 6 days ago
  • Fix available
  • Severity - 9.4 (Critical)
CVE-2026-116566
  • github.com/python/cpython
socket.getaddrinfo() accepts embedded null bytes in host and port 29 Oct
  • Fix available
  • Severity - 5.3 (Medium)
PSF-2026-48
  • github.com/python/cpython
socket.getaddrinfo() previously accepted null bytes within *host* and *port*... 29 Oct
  • Fix available
BIT-python-2026-114583
  • Bitnami/python
tar filter allows writing outside destination via empty-named symlink 29 Oct
  • Fix available
  • Severity - 6.9 (Medium)
BIT-python-min-2026-114583
  • Bitnami/python-min
tar filter allows writing outside destination via empty-named symlink 29 Oct
  • Fix available
  • Severity - 6.9 (Medium)
BIT-libpython-2026-114583
  • Bitnami/libpython
tar filter allows writing outside destination via empty-named symlink 29 Oct
  • Fix available
  • Severity - 6.9 (Medium)
CVE-2026-103995
  • github.com/python/cpython
Lenient parsing of integers for response body and chunk framing 27 Oct
  • Fix available
  • Severity - 2.0 (Low)
PSF-2026-47
  • github.com/python/cpython
Response body and chunk parsing would handle non-hex or negative integers... 27 Oct
  • Fix available
CVE-2026-115557
  • github.com/python/cpython
Distrust compromised intermediate certificates in ssl module 24 Oct
  • Fix available
  • Severity - 9.4 (Critical)
PSF-2026-46
  • github.com/python/cpython
Python has added a denylist for known compromised certificates to the "ssl"... 24 Oct
  • Fix available
CVE-2026-114583
  • github.com/python/cpython
tar filter allows writing outside destination via empty-named symlink 22 Oct
  • Fix available
  • Severity - 6.9 (Medium)
PSF-2026-45
  • github.com/python/cpython
tarfile.tar_filter could be bypassed using crafted link entries, including... 22 Oct
  • Fix available
BIT-python-min-2026-19553
  • Bitnami/python-min
SSLContext.wrap_bio() missing validation of server_hostname parameter 09 Oct
  • Fix available
  • Severity - 7.6 (High)
BIT-python-min-2026-19445
  • Bitnami/python-min
Use-after-free of a server-side SSLContext when sni_callback switches contexts 09 Oct
  • Fix available
  • Severity - 9.2 (Critical)