Cpython (Python) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 9 known versions, newest CVE from 2024-10-22. Vendor: Python.

CVEs of Cpython

• CVE-2024-9287 - CVSS 7.8 (high), 2024-10-22: A vulnerability has been found in the CPython `venv` module and CLI where path names provided when creating a virtual environment were not quoted properly,…
• CVE-2024-6232 - CVSS 7.5 (high), 2024-09-03: There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are…
• CVE-2024-7592 - CVSS 7.5 (high), 2024-08-19: There is a LOW severity vulnerability affecting CPython, specifically the 'http.cookies' standard library module. When parsing cookies that contained…
• CVE-2024-6923 - CVSS 5.5 (medium), 2024-08-01: There is a MEDIUM severity vulnerability affecting CPython. The email module didn’t properly quote newlines for email headers when serializing an email…
• CVE-2024-4032 - CVSS 7.5 (high), 2024-06-17: The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private”.…
• CVE-2024-4030 - CVSS 7.1 (high), 2024-05-07: On Windows a directory returned by tempfile.mkdtemp() would not always have permissions set to restrict reading and writing to the temporary directory by…
• CVE-2024-0450 - CVSS 6.2 (medium), 2024-03-19: An issue was found in the CPython `zipfile` module affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior. The zipfile module is vulnerable…
• CVE-2023-6507 - CVSS 6.1 (medium), 2023-12-08: An issue was found in CPython 3.12.0 `subprocess` module on POSIX platforms. The issue was fixed in CPython 3.12.1 and does not affect other stable releases.…