Approved changes feed: RSS · Atom

cpe:2.3:a:python:python:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPython (b57ad93a-6195-5192-9423-6cfad6044a8b)
ProductPython (fc328eef-0a85-5ddb-b629-b8866ec518c8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/python purl2cpe 2026-06-01 10:16:29.241858
pkg:github/python/cpython purl2cpe 2026-06-01 10:16:29.241860
pkg:python/python purl2cpe 2026-06-01 10:16:29.241861
pkg:rpm/opensuse/python purl2cpe 2026-06-01 10:16:29.241863

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-4519 vulnerable 2026-06-08 08:05:13.469468 webbrowser.open() allows leading dashes in URLs
The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior rejects leading dashes. Users are recommended to sanitize URLs prior to passing to webbrowser.open().
Published: 2026-03-20T15:08:32.576Z
Updated: 2026-07-15T00:52:50.058Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3087 vulnerable 2026-06-08 08:01:17.706340 shutil.unpack_archive() doesn't check for Windows absolute paths in ZIPs
If `shutil.unpack_archive()` is given a ZIP archive with an absolute Windows path containing a drive (`C:\\...`) then the archive will be extracted outside the target directory which is different than other operating systems. Only Windows is affected by this vulnerability.
Published: 2026-04-27T20:46:43.201Z
Updated: 2026-06-10T18:04:43.260Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6075 vulnerable 2026-06-08 07:43:14.224489 Quadratic complexity in os.path.expandvars() with user-controlled template
If the value passed to os.path.expandvars() is user-controlled a performance degradation is possible when expanding environment variables.
Published: 2025-10-31T16:41:34.983Z
Updated: 2026-03-03T14:43:01.737Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13837 vulnerable 2026-06-08 07:06:32.801999 Out-of-memory when loading Plist
When loading a plist file, the plistlib module reads data in size specified by the file itself, meaning a malicious file can cause OOM and DoS issues
Published: 2025-12-01T18:13:32.739Z
Updated: 2026-03-03T14:41:54.597Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13836 vulnerable 2026-06-08 07:06:32.797914 Excessive read buffering DoS in http.client
When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length. This allows a malicious server to cause the client to read large amounts of data into memory, potentially causing OOM or other DoS.
Published: 2025-12-01T18:02:38.483Z
Updated: 2026-03-03T14:41:48.702Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12781 vulnerable 2026-06-08 07:04:30.804422 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12084 vulnerable 2026-06-08 07:04:29.657888 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9287 vulnerable 2026-06-08 07:00:27.067988 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7592 vulnerable 2026-06-08 06:58:22.788619 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6232 vulnerable 2026-06-08 06:58:18.314310 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41105 vulnerable 2026-06-08 06:11:05.238476 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40217 vulnerable 2026-06-08 06:09:41.475570 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-36632 vulnerable 2026-06-08 06:08:12.767560 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27043 vulnerable 2026-06-08 05:57:40.572516 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-24329 vulnerable 2026-06-08 05:56:05.301334 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-48566 vulnerable 2026-06-08 05:51:34.713722 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-48565 vulnerable 2026-06-08 05:51:34.713142 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-48564 vulnerable 2026-06-08 05:51:34.709882 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-48560 vulnerable 2026-06-08 05:51:34.707041 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45061 vulnerable 2026-06-08 05:50:35.510696 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42919 vulnerable 2026-06-08 05:49:30.754463 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37454 vulnerable 2026-06-08 05:47:12.934552 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26488 vulnerable 2026-06-08 05:41:52.256760 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0391 vulnerable 2026-06-08 05:39:09.941207 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-4189 vulnerable 2026-06-08 05:38:08.651202 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3737 vulnerable 2026-06-08 05:33:53.875179 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3733 vulnerable 2026-06-08 05:33:53.859866 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3426 vulnerable 2026-06-08 05:33:51.309262 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3177 vulnerable 2026-06-08 05:33:50.955507 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32052 not_vulnerable 2026-06-08 05:31:54.656050 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29921 vulnerable 2026-06-08 05:31:27.223529 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28861 vulnerable 2026-06-08 05:31:25.104250 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28667 not_vulnerable 2026-06-08 05:31:24.737240 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-23336 vulnerable 2026-06-08 05:30:02.693546 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8492 vulnerable 2026-06-08 05:27:16.643126 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8315 vulnerable 2026-06-08 05:27:15.584670 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29396 not_vulnerable 2026-06-08 05:24:58.216557 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-27619 vulnerable 2026-06-08 05:23:52.840933 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-26116 vulnerable 2026-06-08 05:23:49.953185 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15801 vulnerable 2026-06-08 05:19:26.816475 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15523 vulnerable 2026-06-08 05:19:26.055867 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14422 vulnerable 2026-06-08 05:19:23.339169 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10735 vulnerable 2026-06-08 05:16:35.776877 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9948 vulnerable 2026-06-08 05:14:26.643680 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9947 vulnerable 2026-06-08 05:14:26.642695 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9740 vulnerable 2026-06-08 05:14:26.170370 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9674 vulnerable 2026-06-08 05:14:25.970615 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9636 vulnerable 2026-06-08 05:14:25.883319 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5010 vulnerable 2026-06-08 05:13:57.529053 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-20907 vulnerable 2026-06-08 05:13:41.744570 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-18348 vulnerable 2026-06-08 05:13:11.421891 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-16935 vulnerable 2026-06-08 05:13:09.620654 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-16056 vulnerable 2026-06-08 05:13:07.669906 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15903 vulnerable 2026-06-08 05:12:58.201655 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13404 vulnerable 2026-06-08 05:12:42.214905 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12900 vulnerable 2026-06-08 05:12:40.627610 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10160 vulnerable 2026-06-08 05:12:22.366102 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-25032 vulnerable 2026-06-08 05:11:29.190533 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20852 vulnerable 2026-06-08 05:11:28.163562 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20406 vulnerable 2026-06-08 05:11:27.210053 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1061 vulnerable 2026-06-08 05:11:16.789140 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1060 vulnerable 2026-06-08 05:11:16.786073 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14647 vulnerable 2026-06-08 05:10:53.207110 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1000802 vulnerable 2026-06-08 05:10:25.965544 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1000117 vulnerable 2026-06-08 05:10:25.458094 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1000030 vulnerable 2026-06-08 05:10:25.331951 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-9233 vulnerable 2026-06-08 05:10:09.509999 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-18207 vulnerable 2026-06-08 05:09:10.564187 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17522 vulnerable 2026-06-08 05:09:09.532520 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1000158 vulnerable 2026-06-08 05:08:34.197537 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9063 vulnerable 2026-06-08 05:08:22.479911 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5699 vulnerable 2026-06-08 05:07:57.503150 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5636 vulnerable 2026-06-08 05:07:57.375071 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4472 vulnerable 2026-06-08 05:07:54.618853 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3189 vulnerable 2026-06-08 05:07:44.976265 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2183 vulnerable 2026-06-08 05:07:33.549655 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1000110 vulnerable 2026-06-08 05:07:16.846695 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0772 vulnerable 2026-06-08 05:07:16.181745 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0718 vulnerable 2026-06-08 05:07:15.904562 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5652 vulnerable 2026-06-08 05:06:50.659852 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-20107 vulnerable 2026-06-08 05:06:27.175869 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1283 vulnerable 2026-06-08 05:06:25.278467 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-7185 vulnerable 2026-06-08 05:05:58.862241 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4650 vulnerable 2026-06-08 05:05:45.341444 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4616 vulnerable 2026-06-08 05:05:45.230045 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0224 vulnerable 2026-06-08 05:05:12.328876 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7440 vulnerable 2026-06-08 05:05:10.321468 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1753 vulnerable 2026-06-08 05:03:56.115105 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0340 vulnerable 2026-06-08 05:03:47.249632 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2135 vulnerable 2026-06-08 05:00:52.966136 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1150 vulnerable 2026-06-08 05:00:47.800712 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0876 vulnerable 2026-06-08 05:00:46.158446 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0845 vulnerable 2026-06-08 05:00:45.873141 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4940 vulnerable 2026-06-08 04:59:33.932483 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3492 vulnerable 2026-06-08 04:55:14.847176 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2089 vulnerable 2026-06-08 04:54:11.626457 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1634 vulnerable 2026-06-08 04:54:09.500618 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3720 not_vulnerable 2026-06-08 04:51:43.789203 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2940 not_vulnerable 2026-06-08 04:51:31.414656 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5983 vulnerable 2026-06-08 04:50:53.719844 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4864 vulnerable 2026-06-08 04:50:48.478660 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3144 vulnerable 2026-06-08 04:50:33.246344 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3143 vulnerable 2026-06-08 04:50:33.245572 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3142 vulnerable 2026-06-08 04:50:33.244704 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2316 vulnerable 2026-06-08 04:50:23.470948 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2315 vulnerable 2026-06-08 04:50:23.470252 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1887 vulnerable 2026-06-08 04:50:22.159966 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1721 vulnerable 2026-06-08 04:50:21.624885 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1679 vulnerable 2026-06-08 04:50:21.486372 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4965 vulnerable 2026-06-08 04:49:57.546734 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4559 vulnerable 2026-06-08 04:49:56.520567 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4980 vulnerable 2026-06-08 04:49:19.437560 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1542 vulnerable 2026-06-08 04:48:57.446226 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0089 vulnerable 2026-06-08 04:48:11.311537 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0150 vulnerable 2026-06-08 04:47:48.783043 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1119 vulnerable 2026-06-08 04:46:22.978555 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.