Feed live

python CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,382

All time

Critical · Active

12,007

CVSS ≥ 9.0

New · 14 days

2,196

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 91–120 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-1778	medium	5.9/10	TLS disabled by default in select aws/sagemaker-python-sdk configurations	Feb 2, 2026 6mo ago
CVE-2026-1777	high	7.2/10	Cleartext transmission of sensitive materials in aws/sagemaker-python-sdk	Feb 2, 2026 6mo ago
CVE-2026-24486	high	8.6/10	Python-Multipart has Arbitrary File Write via Non-Default Configuration	Jan 27, 2026 7mo ago
CVE-2026-0994	high	8.2/10	Denial of Service in Python Protobuf	Jan 23, 2026 7mo ago
CVE-2026-0771	high	7.1/10	Langflow PythonFunction Code Injection Remote Code Execution Vulnerability	Jan 23, 2026 7mo ago
CVE-2026-0863	high	8.5/10	Sandbox escape in n8n Python task runner allows for arbitrary code execution on the underlying host.	Jan 18, 2026 7mo ago
CVE-2026-21226	high	7.5/10	Azure Core shared client library for Python Remote Code Execution Vulnerability	Jan 13, 2026 7mo ago
CVE-2025-15346	critical	9.3/10	wolfSSL Python library `CERT_REQUIRED` mode fails to enforce client certificate requirement	Jan 7, 2026 7mo ago
CVE-2025-14026	—	—	Vulnerable Python version used in Forcepoint One DLP Client	Jan 6, 2026 7mo ago
CVE-2025-69257	medium	6.7/10	theshit vulnerable to unsafe loading of user-owned Python rules when running as root.	Dec 30, 2025 7mo ago
CVE-2025-68668	critical	9.9/10	n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Node	Dec 26, 2025 8mo ago
CVE-2025-14931	critical	10.0/10	Hugging Face smolagents Remote Python Executor Deserialization of Untrusted Data Remote Code Execution Vulnerability	Dec 23, 2025 8mo ago
CVE-2025-14542	high	7.5/10	Command execution in python-utcp allows attackers to achieve remote code execution when fetching a remote Manual from a malicious endpoint	Dec 13, 2025 8mo ago
CVE-2025-66446	high	8.8/10	MaxKB has a Python sandbox LD_PRELOAD bypass	Dec 11, 2025 8mo ago
CVE-2025-13428	high	8.6/10	RCE in SecOps SOAR server via user-provided Python packages	Dec 9, 2025 8mo ago
CVE-2025-6966	medium	6.9/10	Null-pointer dereference in python-apt TagSection.keys()	Dec 5, 2025 8mo ago
CVE-2025-66416	high	7.6/10	DNS Rebinding Protection Disabled by Default in Model Context Protocol Python SDK for Servers Running on Localhost	Dec 2, 2025 8mo ago
CVE-2021-4472	medium	6.5/10	Python-mistralclient: mistral-dashboard: local file inclusion through the 'create workbook' feature	Nov 26, 2025 9mo ago
CVE-2025-59089	medium	5.9/10	Python-kdcproxy: remote dos via unbounded tcp upstream buffering	Nov 12, 2025 9mo ago
CVE-2025-59088	high	8.6/10	Python-kdcproxy: unauthenticated ssrf via realm‑controlled dns srv	Nov 12, 2025 9mo ago
CVE-2025-62402	—	—	Apache Airflow: Airflow 3 API: /api/v2/dagReports executes DAG Python in API	Oct 30, 2025 10mo ago
CVE-2025-61912	medium	5.5/10	python-ldap Vulnerable to Improper Encoding or Escaping of Output and Improper Null Termination	Oct 10, 2025 10mo ago
CVE-2025-61911	medium	5.5/10	python-ldap has sanitization bypass in ldap.filter.escape_filter_chars	Oct 10, 2025 10mo ago
CVE-2025-61783	medium	6.3/10	Python Social Auth - Django has unsafe account association	Oct 9, 2025 10mo ago
CVE-2025-61765	medium	6.4/10	python-socketio vulnerable to arbitrary Python code execution (RCE) through malicious pickle deserialization in certain multi-server deployments	Oct 6, 2025 10mo ago
CVE-2025-61622	—	—	Apache Fory, Apache Fory: Python RCE via unguarded pickle fallback serializer in pyfory	Oct 1, 2025 10mo ago
CVE-2025-9959	high	7.6/10	Sandbox escape in smolagents Local Python execution environment via dunder attributes	Sep 3, 2025 11mo ago
CVE-2025-7738	medium	4.4/10	Python3.11-django-ansible-base: sensitive authenticator secrets returned in clear text via api in aap	Jul 31, 2025 1y ago
CVE-2025-53882	medium	4.4/10	The logrotate configuration in the python-mailman of openSUSE allows the mailman user to sent SIGHUP to arbitrary proceess	Jul 23, 2025 1y ago
CVE-2025-49714	high	7.8/10	Visual Studio Code Python Extension Remote Code Execution Vulnerability	Jul 8, 2025 1y ago