Where
-Infinity
0

Trending

Last week
Last month
Last year

oss-sec[oss-security][CVE-2026-15308] Incmental HTMLParser allows CPU-exhaustion DoS via peated unterminated markup declarations

First published (updated )
https://seclists.org/oss-sec/2026/q3/110

oss-sec[oss-security][CVE-2026-11940] Cpython: tarfile extraction filter bypass allows escaping the destination dictory

First published (updated )
https://seclists.org/oss-sec/2026/q2/1006

Python CPythontarfile extraction filter bypass allows escaping the destination directory

Risk 68
Severity
7.8
First published (updated )
CVE-2026-11940

Python CPythonCPython >3.11 Insecure Input Validation resulting in privilege escalation

Risk 47
Severity
5.3
First published (updated )
CVE-2026-12003

oss-sec[oss-security][CVE-2026-9669] CPython: bz2.BZ2Decompssor use after error can cause a stack buffer overflow

First published (updated )
https://seclists.org/oss-sec/2026/q2/846
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

oss-sec[oss-security][CVE-2026-7774] Cpython: tarfile.data_filter path traversal bypass allows writing outside the extraction dictory

First published (updated )
https://seclists.org/oss-sec/2026/q2/813

Python CPythontarfile.data_filter path traversal bypass allows writing outside the extraction directory

Risk 44
Severity
6.9
First published (updated )
CVE-2026-7774

oss-sec[oss-security][CVE-2026-8328] CPython: FTP PASV SSRF, ftpcp() does not use actual peer addss, trusts server-supplied PASV host addss

First published (updated )
https://seclists.org/oss-sec/2026/q2/521

Microsoft azl3 python3 3.12.9-11FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address

Risk 27
Severity
5.9
EPSS
0.07%
First published (updated )
CVE-2026-8328

oss-sec[oss-security][CVE-2026-7210] Cpython: The expat and elementte parsers use insufficient entropy for XML hash-flooding protection

First published (updated )
https://seclists.org/oss-sec/2026/q2/483
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

oss-sec[oss-security][CVE-2026-5713] CPython: Out-of-bounds ad/write during mote debugging when connecting to malicious target

First published (updated )
https://seclists.org/oss-sec/2026/q2/139

oss-sec[oss-security][CVE-2026-4786] CPython: Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open()

First published (updated )
https://seclists.org/oss-sec/2026/q2/123

Python CPythonMitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be by…

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2458049

oss-sec[oss-security][CVE-2026-6100] CPython: Use-after-fe in lzma.LZMADecompssor, bz2.BZ2Decompssor, and gzip.GzipFile after -use under memory pssu

First published (updated )
https://seclists.org/oss-sec/2026/q2/122

oss-secCPython [CVE-2026-1502] HTTP client proxy tunnel headers not validated for CR/LF

First published (updated )
https://seclists.org/oss-sec/2026/q2/98
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

oss-secFwd: [CPython][CVE-2026-4519] webbrowser.open() API allows leading dashes

First published (updated )
https://seclists.org/oss-sec/2026/q1/355

Python PythonStack overflow parsing XML with deeply nested DTD content models

Risk 32
Severity
6
EPSS
0.03%
First published (updated )
CVE-2026-4224

Python PythonIncomplete control character validation in http.cookies

Risk 32
Severity
6
EPSS
0.11%
First published (updated )
CVE-2026-3644

Python CPythonSourcelessFileLoader does not use io.open_code()

Risk 34
Severity
5.7
First published (updated )
CVE-2026-2297

Python CPythonA vulnerability has been found in the CPython `venv` module and CLI where path names provided when c…

Risk 18
Severity
4
First published (updated )
REDHAT-BUG-2321440
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Python CPythonAn issue was found in the CPython `zipfile` module affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.1…

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2276525

Python CPythonAn issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.1, 3.1…

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2276518

Python CPythonUse After Free

Risk 31
Severity
5.5
First published (updated )
CVE-2023-33595

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203