Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: python Clear

ID	Title	Severity	Tags	Detected
CVE-2026-29186	Vulnerability in linuxfoundation (CVE-2026-29186) vulnerability in linuxfoundation (CVE-2026-29186). Confidential information can be exposed externally.	High	Python Cwe 74 Cwe 434 Cwe 791 +2	5 months ago
CVE-2026-28802	Vulnerability in authlib (CVE-2026-28802) vulnerability in authlib (CVE-2026-28802). Successful exploitation can lead to full system takeover.	Critical	Python Cwe 347 Authlib	5 months ago
CVE-2025-69534	Vulnerability in markdown (CVE-2025-69534) vulnerability in markdown (CVE-2025-69534). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.8.1` or later.	High	Python Denial of Service Cwe 400 Cwe 617 +2	5 months ago
CVE-2026-27509	Vulnerability in unitree (CVE-2026-27509) vulnerability in unitree (CVE-2026-27509). Successful exploitation can lead to full system takeover.	High	Python Cwe 306 Unitree Go2 Firmware +3	6 months ago
CVE-2025-14009	Code Injection in nltk (CVE-2025-14009) code injection in nltk (CVE-2025-14009). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.9.3` or later.	High	Python Remote Code Execution Cwe 94 Nltk	6 months ago
CVE-2026-26216	Code Injection in crawl4ai (CVE-2026-26216) code injection in crawl4ai (CVE-2026-26216). Successful exploitation can lead to full system takeover. Exploitable via `POST /crawl`. Mitigation: upgrade to `0.8.0` or later.	Critical	Python Remote Code Execution Cwe 94 Kidocode +1	6 months ago
CVE-2026-25990	Out-of-Bounds Write in pillow (CVE-2026-25990) out-of-bounds write in pillow (CVE-2026-25990). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `12.1.1` or later.	High	Python Cwe 787 Pillow	6 months ago
CVE-2025-69872	Code Injection in CVE-2025-69872 (CVE-2025-69872) code injection in CVE-2025-69872 (CVE-2025-69872). Successful exploitation can lead to full system takeover.	Critical	Python Cwe 94 Cwe 502	6 months ago
CVE-2026-26007	Vulnerability in cryptography (CVE-2026-26007) vulnerability in cryptography (CVE-2026-26007). Confidential information can be exposed externally. Exploitable via ``public_key_from_numbers``. Mitigation: upgrade to `46.0.5` or later.	Medium	Python Cwe 345 Cwe 354 Cryptographyio +1	6 months ago
CVE-2026-25580	SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-25580) SSRF in ssrf (CVE-2026-25580). Confidential information can be exposed externally. Mitigation: upgrade to `1.56.0` or later.	High	Python Server-Side Request Forgery Cwe 918 Pydantic +4	6 months ago
CVE-2026-25640	Path Traversal in path-traversal (CVE-2026-25640) path traversal in path-traversal (CVE-2026-25640). Confidential information can be exposed externally. Mitigation: upgrade to `1.51.0` or later.	High	JavaScript Python Path Traversal Cwe 22 +3	6 months ago
CVE-2026-25153	Code Injection in linuxfoundation (CVE-2026-25153) code injection in linuxfoundation (CVE-2026-25153). Confidential information can be exposed externally. Exploitable via ``hooks``.	High	JavaScript Python Cwe 94 Linuxfoundation +1	6 months ago
CVE-2026-24779	SSRF (Server-Side Request Forgery) in vllm (CVE-2026-24779) SSRF in vllm (CVE-2026-24779). Confidential information can be exposed externally. Exploitable via ``MediaConnector``. Mitigation: upgrade to `0.14.1` or later.	High	Python Server-Side Request Forgery Denial of Service Cwe 918 +1	7 months ago
CVE-2026-24747	Code Injection in linuxfoundation (CVE-2026-24747) code injection in linuxfoundation (CVE-2026-24747). Successful exploitation can lead to full system takeover. Exploitable via ``weights_only``.	High	Python Cwe 94 Cwe 502 Linuxfoundation +1	7 months ago
CVE-2026-24486	Path Traversal in path-traversal (CVE-2026-24486) path traversal in path-traversal (CVE-2026-24486). Data can be tampered with by attackers. Exploitable via ``UPLOAD_DIR``.	High	Python Path Traversal Cwe 22 Fastapiexpert +1	7 months ago
CVE-2026-0994	Vulnerability in protobuf (CVE-2026-0994) vulnerability in protobuf (CVE-2026-0994). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.29.6` or later.	High	Python Denial of Service Cwe 674 Google +1	7 months ago
CVE-2026-24049	Path Traversal in privilege-escalation (CVE-2026-24049) path traversal in privilege-escalation (CVE-2026-24049). Data can be tampered with by attackers.	High	Python Privilege Escalation Cwe 22 Cwe 732 +2	7 months ago
CVE-2026-22807	Code Injection in vllm (CVE-2026-22807) code injection in vllm (CVE-2026-22807). Successful exploitation can lead to full system takeover. Exploitable via ``auto_map``. Mitigation: upgrade to `0.14.0` or later.	High	Python Cwe 94 vLLM	7 months ago
CVE-2025-56005	Unsafe Deserialization in dabeaz (CVE-2025-56005) vulnerability in dabeaz (CVE-2025-56005). Successful exploitation can lead to full system takeover. Exploitable via ``picklefile``.	Critical	Python Remote Code Execution Cwe 502 Dabeaz +1	7 months ago
CVE-2026-23490	Vulnerability in pyasn1 (CVE-2026-23490) vulnerability in pyasn1 (CVE-2026-23490). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.6.2` or later.	High	Python Cwe 770 Pyasn1 Debian +1	7 months ago
CVE-2026-0897	Vulnerability in keras (CVE-2026-0897) vulnerability in keras (CVE-2026-0897). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.13.1` or later.	High	Python Denial of Service Cwe 770 Keras	7 months ago
CVE-2026-21441	Vulnerability in urllib3 (CVE-2026-21441) vulnerability in urllib3 (CVE-2026-21441). Risk of unauthorized operations or information disclosure. Exploitable via ``gzip``.	High	Python Cwe 409 Urllib3	7 months ago
CVE-2026-22188	Vulnerability in dos (CVE-2026-22188) vulnerability in dos (CVE-2026-22188). Risk of unauthorized operations or information disclosure.	Medium	Python Denial of Service Cwe 457 Cwe 789 +3	7 months ago
CVE-2025-69223	Vulnerability in dos (CVE-2025-69223) vulnerability in dos (CVE-2025-69223). Risk of unauthorized operations or information disclosure.	High	Python Denial of Service Cwe 409 Cwe 770 +1	7 months ago
CVE-2025-11157	Unsafe Deserialization in CVE-2025-11157 (CVE-2025-11157) vulnerability in CVE-2025-11157 (CVE-2025-11157). Successful exploitation can lead to full system takeover.	High	Python Remote Code Execution Cwe 502	7 months ago
CVE-2025-71339	Code Injection in picklescan (CVE-2025-71339) code injection in picklescan (CVE-2025-71339). Confidential information can be exposed externally. Exploitable via ``numpy.f2py.crackfortran._eval_length``. Mitigation: upgrade to `0.0.33` or later.	High	Python Cwe 502	7 months ago
CVE-2025-63397	Vulnerability in oneflow (CVE-2025-63397) vulnerability in oneflow (CVE-2025-63397). Risk of unauthorized operations or information disclosure.	Medium	Python Cwe 20 Oneflow	9 months ago
CVE-2025-6075	Vulnerability in CVE-2025-6075 (CVE-2025-6075) vulnerability in CVE-2025-6075 (CVE-2025-6075). Risk of unauthorized operations or information disclosure.	Medium	Cwe 400 Python	9 months ago
CVE-2024-12718	Path Traversal in CVE-2024-12718 (CVE-2024-12718) path traversal in CVE-2024-12718 (CVE-2024-12718). Risk of unauthorized operations or information disclosure.	Medium	Python Cwe 22	1 year ago
CVE-2025-4138	Path Traversal in CVE-2025-4138 (CVE-2025-4138) path traversal in CVE-2025-4138 (CVE-2025-4138). Confidential information can be exposed externally.	High	Python Cwe 22	1 year ago
CVE-2025-4330	Path Traversal in CVE-2025-4330 (CVE-2025-4330) path traversal in CVE-2025-4330 (CVE-2025-4330). Data can be tampered with by attackers.	High	Python Cwe 22	1 year ago
CVE-2025-4517	Path Traversal in CVE-2025-4517 (CVE-2025-4517) path traversal in CVE-2025-4517 (CVE-2025-4517). Confidential information can be exposed externally.	Critical	Python Cwe 22	1 year ago
CVE-2022-49337	Vulnerability in c (CVE-2022-49337) vulnerability in c (CVE-2022-49337). Successful exploitation can lead to full system takeover.	High	Python C Cwe 667 Linux +1	1 year ago
CVE-2025-0938	Vulnerability in CVE-2025-0938 (CVE-2025-0938) vulnerability in CVE-2025-0938 (CVE-2025-0938). Risk of unauthorized operations or information disclosure. Exploitable via ``urllib.parse.urlsplit``.		Python Cwe 20	1 year ago
CVE-2024-12254	Vulnerability in CVE-2024-12254 (CVE-2024-12254) vulnerability in CVE-2024-12254 (CVE-2024-12254). Risk of unauthorized operations or information disclosure.	High	Python Cwe 400 Cwe 770	1 year ago
CVE-2024-40647	Information Disclosure in sentry-sdk (CVE-2024-40647) vulnerability in sentry-sdk (CVE-2024-40647). Risk of unauthorized operations or information disclosure. Exploitable via ``subprocess``. Mitigation: upgrade to `1.45.1` or later.	Medium	Python Cwe 200	2 years ago
CVE-2021-47274	Out-of-Bounds Read in linux (CVE-2021-47274) vulnerability in linux (CVE-2021-47274). Successful exploitation can lead to full system takeover.	High	Python Cwe 125 Linux Linux Kernel	2 years ago
CVE-2021-47197	Vulnerability in linux (CVE-2021-47197) vulnerability in linux (CVE-2021-47197). Successful exploitation can lead to full system takeover.	High	Python Linux Linux Kernel	2 years ago
CVE-2020-17163	Visual Studio Code Python Extension Remote Code Execution Vulnerability Visual Studio Code Python Extension Remote Code Execution Vulnerability	High	Python Remote Code Execution Microsoft	2 years ago
CVE-2023-6507	Privilege Escalation in CVE-2023-6507 (CVE-2023-6507) vulnerability in CVE-2023-6507 (CVE-2023-6507). Confidential information can be exposed externally. Exploitable via ``subprocess``.	Medium	Cwe 269 Python	2 years ago
CVE-2023-49081	Vulnerability in aiohttp (CVE-2023-49081) vulnerability in aiohttp (CVE-2023-49081). Risk of unauthorized operations or information disclosure.	High	Python Cwe 20 Aiohttp	2 years ago
CVE-2023-49082	Vulnerability in aiohttp (CVE-2023-49082) vulnerability in aiohttp (CVE-2023-49082). Risk of unauthorized operations or information disclosure.	Medium	Python Cwe 20 Cwe 93 Aiohttp	2 years ago
CVE-2023-36095	Code Injection in langchain (CVE-2023-36095) code injection in langchain (CVE-2023-36095). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.0.236` or later.	Critical	Python Cwe 94 LangChain	3 years ago
CVE-2023-30798	Vulnerability in dos (CVE-2023-30798) vulnerability in dos (CVE-2023-30798). Risk of unauthorized operations or information disclosure.	High	Python Denial of Service Cwe 400 Encode +1	3 years ago
CVE-2023-27043	Vulnerability in libpython (CVE-2023-27043) vulnerability in libpython (CVE-2023-27043). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.8.20, 3.10.15, 3.11.10, 3.12.6, 3.9.20` or later.	Medium	Python Cwe 20 Cwe 1286 Fedoraproject +4	3 years ago
CVE-2021-36667	OS Command Injection in druva (CVE-2021-36667) OS command injection in druva (CVE-2021-36667). Successful exploitation can lead to full system takeover.	High	Python Cwe 78 Druva Insync Client	4 years ago
CVE-2022-30034	Authentication Bypass in flower (CVE-2022-30034) authentication bypass in flower (CVE-2022-30034). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.2.0` or later.	High	Python Authentication Bypass Cwe 287 Flower Project +1	4 years ago
CVE-2018-25032	Out-of-Bounds Write in nokogiri (CVE-2018-25032) out-of-bounds write in nokogiri (CVE-2018-25032). Risk of unauthorized operations or information disclosure.	High	Cwe 787 Nokogiri Python Microsoft +44	4 years ago
CVE-2021-3572	Vulnerability in pypa (CVE-2021-3572) vulnerability in pypa (CVE-2021-3572). Data can be tampered with by attackers.	Medium	Python Cwe 20 Pypa Pip +4	4 years ago
CVE-2020-1192	Vulnerability in microsoft (CVE-2020-1192) vulnerability in microsoft (CVE-2020-1192). Successful exploitation can lead to full system takeover.	High	Python Remote Code Execution Microsoft	6 years ago

Vulnerabilities

🍪 About cookies