Feed live

python CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

707

Newly disclosed

Feed last synced

5 hrs ago

Data freshness

Showing 31–60 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-7466	high	7.7/10	AgentFlow Arbitrary Python Pipeline Execution via pipeline_path	Apr 29, 2026 1mo ago
CVE-2026-41140	low	0.6/10	Poetry: Path traversal in tar extraction on Python 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4	Apr 24, 2026 2mo ago
CVE-2026-6550	medium	4.7/10	Key commitment policy bypass via shared key cache in AWS Encryption SDK for Python	Apr 20, 2026 2mo ago
CVE-2026-28684	medium	6.6/10	python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback	Apr 20, 2026 2mo ago
CVE-2026-6603	medium	6.9/10	modelscope agentscope _python.py execute_shell_command code injection	Apr 20, 2026 2mo ago
CVE-2026-40347	medium	5.3/10	Python-Multipart affected by Denial of Service via large multipart preamble or epilogue data	Apr 17, 2026 2mo ago
CVE-2026-33793	high	7.8/10	Junos OS and Junos OS Evolved: When an unsigned Python op script configuration is present, a local low privileged user can compromise the system	Apr 9, 2026 2mo ago
CVE-2026-34938	critical	10.0/10	PraisonAI: Python Sandbox Escape via str Subclass startswith() Override in execute_code	Apr 3, 2026 2mo ago
CVE-2026-34937	high	7.8/10	PraisonAI: Shell Injection in run_python() via Unescaped $() Substitution	Apr 3, 2026 2mo ago
CVE-2026-34450	medium	4.8/10	Claude SDK for Python: Insecure Default File Permissions in Local Filesystem Memory Tool	Mar 31, 2026 2mo ago
CVE-2026-34452	medium	5.8/10	Claude SDK for Python: Memory Tool Path Validation Race Condition Allows Sandbox Escape	Mar 31, 2026 2mo ago
CVE-2026-33936	medium	5.3/10	python-ecdsa: Denial of Service via improper DER length validation in crafted private keys	Mar 27, 2026 3mo ago
CVE-2026-4963	medium	5.3/10	huggingface smolagents Incomplete Fix CVE-2025-9959 local_python_executor.py evaluate_with code injection	Mar 27, 2026 3mo ago
CVE-2026-32128	medium	6.3/10	FastGPT Python Sandbox Bypass of File-Write Restriction	Mar 11, 2026 3mo ago
CVE-2026-28414	high	7.5/10	Gradio has Absolute Path Traversal on Windows with Python 3.13+	Feb 27, 2026 3mo ago
CVE-2026-27952	high	8.8/10	Agenta has Python Sandbox Escape, Leading to Remote Code Execution (RCE)	Feb 26, 2026 4mo ago
CVE-2026-27494	high	7.1/10	n8n has Arbitrary File Read via Python Code Node Sandbox Escape	Feb 25, 2026 4mo ago
CVE-2026-2472	high	8.6/10	Stored Cross-Site Scripting (XSS) in Vertex AI Python SDK Visualization	Feb 20, 2026 4mo ago
CVE-2026-2654	medium	5.3/10	huggingface smolagents LocalPythonExecutor requests.post server-side request forgery	Feb 18, 2026 4mo ago
CVE-2026-21531	critical	9.8/10	Azure SDK for Python Remote Code Execution Vulnerability	Feb 10, 2026 4mo ago
CVE-2026-25905	medium	5.8/10	Lack of isolation in mcp-run-python leads to MCP server takeover	Feb 9, 2026 4mo ago
CVE-2026-25904	medium	5.8/10	Overly permissive Deno configuration in mcp-run-python leads to SSRF	Feb 9, 2026 4mo ago
CVE-2026-1998	medium	4.8/10	micropython runtime.c mp_import_all memory corruption	Feb 6, 2026 4mo ago
CVE-2026-25115	critical	9.4/10	n8n is vulnerable to Python sandbox escape	Feb 4, 2026 4mo ago
CVE-2026-1778	medium	5.9/10	TLS disabled by default in select aws/sagemaker-python-sdk configurations	Feb 2, 2026 4mo ago
CVE-2026-1777	high	7.2/10	Cleartext transmission of sensitive materials in aws/sagemaker-python-sdk	Feb 2, 2026 4mo ago
CVE-2026-24486	high	8.6/10	Python-Multipart has Arbitrary File Write via Non-Default Configuration	Jan 27, 2026 5mo ago
CVE-2026-0994	high	8.2/10	Denial of Service in Python Protobuf	Jan 23, 2026 5mo ago
CVE-2026-0771	high	7.1/10	Langflow PythonFunction Code Injection Remote Code Execution Vulnerability	Jan 23, 2026 5mo ago
CVE-2026-0863	high	8.5/10	Sandbox escape in n8n Python task runner allows for arbitrary code execution on the underlying host.	Jan 18, 2026 5mo ago