Feed live

python CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,380

All time

Critical · Active

12,007

CVSS ≥ 9.0

New · 14 days

2,199

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 31–60 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-55865	high	7.1/10	Python Liquid: Infinite loop when parsing malformed `{% case %}` tags	Jul 9, 2026 1mo ago
CVE-2026-55830	high	8.3/10	RestrictedPython guard hooks can be shadowed via positional-only arguments	Jul 8, 2026 1mo ago
CVE-2026-15062	critical	9.6/10	SQL Injection in Snowflake Snowpark Python SDK	Jul 8, 2026 1mo ago
CVE-2026-10134	critical	10.0/10	Unauthenticated Server-Side RCE via PythonCodeStructuredTool in Public Flows	Jun 30, 2026 1mo ago
CVE-2026-12003	medium	5.3/10	CPython >3.11 Insecure Input Validation resulting in privilege escalation	Jun 16, 2026 2mo ago
CVE-2026-12210	medium	5.3/10	universal-tool-calling-protocol python-utcp utcp-gql/utcp-websocket server-side request forgery	Jun 15, 2026 2mo ago
CVE-2026-52860	high	7.5/10	Vim: Arbitrary Code Execution via Python Omni-Completion	Jun 11, 2026 2mo ago
CVE-2026-52858	high	7.3/10	Vim: Arbitrary Code Execution via Python Omni-Completion	Jun 11, 2026 2mo ago
CVE-2026-10143	high	7.5/10	kafka-python prior to 2.3.2 DoS via SCRAM Iteration Count in scram.py	Jun 10, 2026 2mo ago
CVE-2026-10142	high	7.5/10	kafka-python prior to 2.3.2 Denial of Service via Protocol Parser Frame Length	Jun 10, 2026 2mo ago
CVE-2026-46497	low	2.3/10	SSRF via sitemap-derived URLs in Crawlee for Python	Jun 10, 2026 2mo ago
CVE-2026-45426	—	—	Apache Airflow: Log server JWT authorization bypass via Python lstrip() character stripping allows cross-Dag log access	Jun 1, 2026 2mo ago
CVE-2026-45017	high	8.2/10	Python Liquid: Absolute paths escape filesystem loader search path	May 28, 2026 2mo ago
CVE-2026-45136	high	8.6/10	claude-code-cache-fix: Local code execution via Python triple-quote injection in tools/quota-statusline.sh	May 27, 2026 3mo ago
CVE-2026-44887	critical	9.8/10	Unauthenticated RCE via Python Config File Injection in SaveConfigFile() (Path)	May 27, 2026 3mo ago
CVE-2026-44888	critical	9.8/10	Unauthenticated RCE via Python Config File Injection in SaveConfigFile() (Interger)	May 27, 2026 3mo ago
CVE-2026-44723	medium	5.0/10	Vowpal Wabbit: Shell injection via crafted PR title in python_checks.yml allows arbitrary command execution on CI runner	May 26, 2026 3mo ago
CVE-2026-5817	high	8.8/10	Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backends	May 22, 2026 3mo ago
CVE-2026-8838	critical	9.8/10	Remote Code Execution via eval() Injection in amazon-redshift-python-driver	May 18, 2026 3mo ago
CVE-2021-47952	critical	9.3/10	python jsonpickle 2.0.0 Remote Code Execution via py/repr	May 16, 2026 3mo ago
CVE-2026-45369	high	8.3/10	python-utcp: Command Injection via Unsanitized Argument Substitution in CLI Communication Protocol	May 14, 2026 3mo ago
CVE-2026-45370	high	7.7/10	python-utcp: Full Process Environment Exposed to CLI Subprocess - Secrets Leakage via Command Injection	May 14, 2026 3mo ago
CVE-2026-44661	medium	4.7/10	python-utcp: SSRF via attacker-controlled OpenAPI servers[0].url in HTTP communication protocol	May 14, 2026 3mo ago
CVE-2026-8597	high	7.2/10	Missing integrity verification in Triton inference handler in Amazon SageMaker Python SDK	May 14, 2026 3mo ago
CVE-2026-8596	high	7.2/10	Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK ModelBuilder/Serve path	May 14, 2026 3mo ago
CVE-2026-42561	high	7.5/10	Python-Multipart: Denial of Service via unbounded multipart part headers	May 13, 2026 3mo ago
CVE-2026-45227	high	8.7/10	Heym < 0.0.21 Sandbox Escape via Python Introspection	May 12, 2026 3mo ago
CVE-2026-44336	critical	9.4/10	PraisonAI MCP `tools/call` path-traversal and RCE via Python `.pth` injection	May 8, 2026 3mo ago
CVE-2026-41900	high	8.8/10	OpenLearnX has Critical Remote Code Execution Through Python Sandbox Escape via Code Execution Environment	May 8, 2026 3mo ago
CVE-2026-44243	high	7.8/10	GitPython: Path traversal in GitPython reference APIs allows arbitrary file write and delete outside the repository	May 7, 2026 3mo ago