Known Vulnerabilities for Python by Python
Listed below are 10 of the newest known vulnerabilities associated with "Python" by "Python".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-128067 json | Pillow is a Python imaging library. From 2.3.0 through 12.3.0, Pillow applications that save compressed TIFF images through l... | Not Provided | 2026-11-13 | 2026-11-12 |
| CVE-2026-128066 json | Pillow is a Python imaging library. From 1.0 through 12.3.0, ImageFileDirectory_v2.load() in src/PIL/TiffImagePlugin.py retai... | Not Provided | 2026-11-13 | 2026-11-12 |
| CVE-2026-127208 json | datamodel-code-generator before 0.84.0 contains a code injection vulnerability that allows attackers to achieve arbitrary cod... | Not Provided | 2026-11-12 | 2026-11-12 |
| CVE-2026-126360 json | OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.2, TraceContextTextMapPropagator.extrac... | Not Provided | 2026-11-13 | 2026-11-12 |
| CVE-2026-126347 json | Tornado is a Python web framework and asynchronous networking library. In versions through 6.6.0, applications using tornad... | Not Provided | 2026-11-12 | 2026-11-12 |
| CVE-2026-126193 json | Soup Sieve is a CSS selector library for Beautiful Soup. From 0.4 until 3.0, deeply nested CSS pseudo-class selectors can cau... | Not Provided | 2026-11-12 | 2026-11-12 |
| CVE-2026-126087 json | Untrusted search path in the cross-user process launcher in Open Job Description (OpenJD) Sessions for Python before 0.11.0, ... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-125362 json | Seahub through 14.0.10 contains a weak randomness vulnerability in MultiShareLinksBatch.post() that generates batch share lin... | Not Provided | 2026-11-10 | 2026-11-09 |
| CVE-2026-124318 json | Treeio through 2.0 contains an insecure deserialization vulnerability in UpdateRecord.get_format_strings and ModuleSetting.lo... | Not Provided | 2026-11-07 | 2026-11-10 |
| CVE-2026-123870 json | The otterdog webapp evaluates a format-string built from the incoming GitHub webhook JSON body using Python's eval(). When th... | Not Provided | 2026-11-09 | 2026-11-12 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Python | Python | 3.9.2 | |||
| Application | Python | Python | 3.9.1 | |||
| Application | Python | Python | 3.9.0 | |||
| Application | Python | Python | 3.9.0 | |||
| Application | Python | Python | 3.9.0 | |||
| Application | Python | Python | 3.9.0 | |||
| Application | Python | Python | 3.9.0 | |||
| Application | Python | Python | 3.9.0 | |||
| Application | Python | Python | 3.9.0 | |||
| Application | Python | Python | 3.9.0 | |||
| Application | Python | Python | 3.9.0 | |||
| Application | Python | Python | 3.9.0 | |||
| Application | Python | Python | 3.9.0 | |||
| Application | Python | Python | 3.9.0 | |||
| Application | Python | Python | 3.9.0 | |||
| Application | Python | Python | 3.9.0 | |||
| Application | Python | Python | 3.8.8 | |||
| Application | Python | Python | 3.8.7 | |||
| Application | Python | Python | 3.8.7 | |||
| Application | Python | Python | 3.8.6 |