Feed live

python CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,382

All time

Critical · Active

12,007

CVSS ≥ 9.0

New · 14 days

2,196

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 61–90 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-44244	high	7.8/10	GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath	May 7, 2026 3mo ago
CVE-2026-42284	high	8.1/10	GitPython: Unsafe option check validates multi_options before shlex.split transforms it	May 7, 2026 3mo ago
CVE-2026-42215	high	8.8/10	GitPython: Command injection via Git options bypass	May 7, 2026 3mo ago
CVE-2026-7810	medium	6.9/10	UsamaK98 python-notebook-mcp server.py add_cell path traversal	May 5, 2026 3mo ago
CVE-2026-42234	high	7.1/10	n8n: Python Task Runner Sandbox Escape	May 4, 2026 3mo ago
CVE-2026-42079	high	8.6/10	PPTAgent: Arbitrary Code Execution via Python eval() of LLM-Generated Code with Builtins in Scope	May 4, 2026 3mo ago
CVE-2026-7466	high	7.7/10	AgentFlow Arbitrary Python Pipeline Execution via pipeline_path	Apr 29, 2026 3mo ago
CVE-2026-41140	low	0.6/10	Poetry: Path traversal in tar extraction on Python 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4	Apr 24, 2026 4mo ago
CVE-2026-6550	medium	4.7/10	Key commitment policy bypass via shared key cache in AWS Encryption SDK for Python	Apr 20, 2026 4mo ago
CVE-2026-28684	medium	6.6/10	python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback	Apr 20, 2026 4mo ago
CVE-2026-6603	medium	6.9/10	modelscope agentscope _python.py execute_shell_command code injection	Apr 20, 2026 4mo ago
CVE-2026-40347	medium	5.3/10	Python-Multipart affected by Denial of Service via large multipart preamble or epilogue data	Apr 17, 2026 4mo ago
CVE-2026-33793	high	7.8/10	Junos OS and Junos OS Evolved: When an unsigned Python op script configuration is present, a local low privileged user can compromise the system	Apr 9, 2026 4mo ago
CVE-2026-34938	critical	10.0/10	PraisonAI: Python Sandbox Escape via str Subclass startswith() Override in execute_code	Apr 3, 2026 4mo ago
CVE-2026-34937	high	7.8/10	PraisonAI: Shell Injection in run_python() via Unescaped $() Substitution	Apr 3, 2026 4mo ago
CVE-2026-34450	medium	4.8/10	Claude SDK for Python: Insecure Default File Permissions in Local Filesystem Memory Tool	Mar 31, 2026 4mo ago
CVE-2026-34452	medium	5.8/10	Claude SDK for Python: Memory Tool Path Validation Race Condition Allows Sandbox Escape	Mar 31, 2026 4mo ago
CVE-2026-33936	medium	5.3/10	python-ecdsa: Denial of Service via improper DER length validation in crafted private keys	Mar 27, 2026 5mo ago
CVE-2026-4963	medium	5.3/10	huggingface smolagents Incomplete Fix CVE-2025-9959 local_python_executor.py evaluate_with code injection	Mar 27, 2026 5mo ago
CVE-2026-32128	medium	6.3/10	FastGPT Python Sandbox Bypass of File-Write Restriction	Mar 11, 2026 5mo ago
CVE-2026-28414	high	7.5/10	Gradio has Absolute Path Traversal on Windows with Python 3.13+	Feb 27, 2026 5mo ago
CVE-2026-27952	high	8.8/10	Agenta has Python Sandbox Escape, Leading to Remote Code Execution (RCE)	Feb 26, 2026 6mo ago
CVE-2026-27494	high	7.1/10	n8n has Arbitrary File Read via Python Code Node Sandbox Escape	Feb 25, 2026 6mo ago
CVE-2026-2472	high	8.6/10	Stored Cross-Site Scripting (XSS) in Vertex AI Python SDK Visualization	Feb 20, 2026 6mo ago
CVE-2026-2654	medium	5.3/10	huggingface smolagents LocalPythonExecutor requests.post server-side request forgery	Feb 18, 2026 6mo ago
CVE-2026-21531	critical	9.8/10	Azure SDK for Python Remote Code Execution Vulnerability	Feb 10, 2026 6mo ago
CVE-2026-25905	medium	5.8/10	Lack of isolation in mcp-run-python leads to MCP server takeover	Feb 9, 2026 6mo ago
CVE-2026-25904	medium	5.8/10	Overly permissive Deno configuration in mcp-run-python leads to SSRF	Feb 9, 2026 6mo ago
CVE-2026-1998	medium	4.8/10	micropython runtime.c mp_import_all memory corruption	Feb 6, 2026 6mo ago
CVE-2026-25115	critical	9.4/10	n8n is vulnerable to Python sandbox escape	Feb 4, 2026 6mo ago