Feed live

python CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,380

All time

Critical · Active

12,007

CVSS ≥ 9.0

New · 14 days

2,199

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 1–30 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-78679	high	7.1/10	GitPython before 3.1.59 Arbitrary File Read via TagReference.create	Aug 25, 2026 yesterday
CVE-2026-78678	high	7.1/10	GitPython before 3.1.59 Arbitrary File Read via Repo.blame()	Aug 25, 2026 yesterday
CVE-2026-78677	high	8.7/10	GitPython before 3.1.59 Path Traversal via separate-git-dir	Aug 25, 2026 yesterday
CVE-2026-78676	critical	9.3/10	GitPython before 3.1.59 Remote Code Execution via Config Injection	Aug 25, 2026 yesterday
CVE-2026-78675	high	8.6/10	GitPython before 3.1.59 Local File Content Disclosure via .gitmodules	Aug 25, 2026 yesterday
CVE-2026-62675	high	8.8/10	Omnigent: Uploaded Agent Bundle Allows Authenticated Runner RCE via Python Callable Tools	Aug 21, 2026 4d ago
CVE-2026-19964	medium	5.1/10	Jij-Inc Jij-MCP-Server jm_check python_repr.py PythonREPL.run code injection	Aug 16, 2026 9d ago
CVE-2026-19594	high	8.1/10	Path Traversal and HTTP Parameter Pollution in Snowflake Python API (snowflake.core) Allow Confused-Deputy Privilege Escalation	Aug 12, 2026 14d ago
CVE-2026-73248	high	8.5/10	calibre: Bypass of Python template restrictions via nested `template()` leading to RCE	Aug 11, 2026 14d ago
CVE-2026-73217	high	7.7/10	Cursor: Sandbox escape via tampered Python virtual environments	Aug 11, 2026 14d ago
CVE-2026-54981	high	7.8/10	Visual Studio Code Python Extension Security Feature Bypass Vulnerability	Aug 11, 2026 14d ago
CVE-2026-18942	medium	5.5/10	Feast-operator: feast: feast apply cronjob runs user python with feature-server sa — tenant code to sa token escalation	Aug 10, 2026 15d ago
CVE-2026-69264	critical	9.4/10	Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation	Aug 4, 2026 21d ago
CVE-2026-18770	medium	6.9/10	vibesurf-ai VibeSurf Python Validation code code injection	Aug 4, 2026 21d ago
CVE-2026-69249	high	8.7/10	python-cryptography: Duplicate self-signed intermediates can cause exponential path-building	Aug 3, 2026 22d ago
CVE-2026-69248	medium	6.9/10	python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees	Aug 3, 2026 22d ago
CVE-2026-69097	high	7.3/10	GitPython before 3.1.53 Config Injection via Submodule Names	Aug 3, 2026 22d ago
CVE-2026-67326	high	7.3/10	GitPython before 3.1.50 Newline Injection via config_writer section	Aug 1, 2026 24d ago
CVE-2026-67324	critical	9.3/10	GitPython 3.1.50 Authentication Bypass via Joined Short Options	Aug 1, 2026 24d ago
CVE-2026-67323	high	8.6/10	GitPython before 3.1.51 Command Injection via unguarded Git options	Aug 1, 2026 24d ago
CVE-2026-67322	high	8.7/10	GitPython before 3.1.52 Environment Variable Exfiltration via clone_from	Aug 1, 2026 24d ago
CVE-2026-67325	high	8.7/10	GitPython before 3.1.51 Command Injection via option prefix abbreviation	Aug 1, 2026 24d ago
CVE-2026-55415	high	7.5/10	datamodel-code-generator vulnerable to code injection via `x-python-import` / `customTypePath` in generated import statements	Jul 28, 2026 28d ago
CVE-2026-54655	high	7.8/10	`datamodel-code-generator` vulnerable to code execution on import via `x-python-type` JSON-Schema extension in datamodel-code-generator	Jul 28, 2026 28d ago
CVE-2026-66053	medium	5.9/10	Apache Thrift: Python TSSLSocket Hostname Matcher Import	Jul 27, 2026 1mo ago
CVE-2026-41608	—	—	Apache Thrift: Unbounded Zlib Decompression in Python THeaderTransport	Jul 27, 2026 1mo ago
CVE-2026-17497	high	8.3/10	NoteGen arbitrary OS command execution via Tauri shell:allow-execute for bash/python	Jul 26, 2026 1mo ago
CVE-2026-16796	high	7.3/10	Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()	Jul 23, 2026 1mo ago
CVE-2026-59862	high	7.5/10	Kiota: Code Generation Literal Injection in the Python Generator	Jul 16, 2026 1mo ago
CVE-2026-15925	critical	9.2/10	Improper TLS Hostname Verification in Snowflake Connector for Python	Jul 16, 2026 1mo ago