Feed live

python CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,382

All time

Critical · Active

12,007

CVSS ≥ 9.0

New · 14 days

2,192

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 121–150 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-53365	high	8.7/10	MCP Python SDK has Unhandled Exception in Streamable HTTP Transport ,Leading to Denial of Service	Jul 4, 2025 1y ago
CVE-2025-6167	medium	5.1/10	themanojdesai python-a2a api.py create_workflow path traversal	Jun 17, 2025 1y ago
CVE-2025-4565	high	8.2/10	Unbounded recursion in Python Protobuf	Jun 16, 2025 1y ago
CVE-2025-5874	low	2.1/10	Redash getattr python.py run_query sandbox	Jun 9, 2025 1y ago
CVE-2025-48950	medium	5.8/10	MaxKB Python Sandbox Bypass in Function Library	Jun 3, 2025 1y ago
CVE-2025-48887	medium	6.5/10	vLLM has a Regular Expression Denial of Service (ReDoS, Exponential Complexity) Vulnerability in `pythonic_tool_parser.py`	May 30, 2025 1y ago
CVE-2025-5321	medium	5.3/10	aimhubio aim run_view Object query.py RestrictedPythonQuery privilege escalation	May 29, 2025 1y ago
CVE-2025-5279	high	7.0/10	Issue with Amazon Redshift Python Connector and the BrowserAzureOAuth2CredentialsProvider plugin	May 27, 2025 1y ago
CVE-2025-47942	medium	5.3/10	Learners on edX Platform can download python_lib.zip	May 21, 2025 1y ago
CVE-2025-46833	medium	4.6/10	Programs/P73_SimplePythonEncryption.py has weak cryptographic key	May 8, 2025 1y ago
CVE-2025-2733	medium	5.3/10	mannaandpoem OpenManus Prompt python_execute.py os command injection	Mar 25, 2025 1y ago
CVE-2025-0508	medium	5.9/10	MD5 Hash Collision in SageMaker Workflow in aws/sagemaker-python-sdk	Mar 20, 2025 1y ago
CVE-2025-26411	—	—	Authenticated Arbitrary Python File Upload via Plugin Manager	Feb 11, 2025 1y ago
CVE-2025-25183	low	2.6/10	vLLM using built-in hash() from Python 3.12 leads to predictable hash collisions in vLLM prefix cache	Feb 7, 2025 1y ago
CVE-2025-24795	medium	4.4/10	The Snowflake Connector for Python uses insecure cache files permissions	Jan 29, 2025 1y ago
CVE-2025-24794	medium	6.7/10	The Snowflake Connector for Python uses insecure deserialization of the OCSP response cache	Jan 29, 2025 1y ago
CVE-2025-24793	high	7.0/10	Snowflake Connector for Python has an SQL Injection in write_pandas	Jan 29, 2025 1y ago
CVE-2025-22153	high	7.9/10	try/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter	Jan 23, 2025 1y ago
CVE-2024-12745	high	8.6/10	SQL Injection in the Amazon Redshift Python Connector affecting v2.1.4	Dec 24, 2024 1y ago
CVE-2024-55655	low	2.7/10	sigstore-python has insufficient validation of integration timestamp during verification	Dec 10, 2024 1y ago
CVE-2024-53981	high	7.5/10	python-multipart has a Denial of service (DoS) via deformation `multipart/form-data` boundary	Dec 2, 2024 1y ago
CVE-2024-53865	high	8.3/10	Python package "zhmcclient" has passwords in clear text in its HMC and API logs	Nov 29, 2024 1y ago
CVE-2024-4343	critical	9.8/10	Python Command Injection in imartinez/privategpt	Nov 14, 2024 1y ago
CVE-2024-49050	high	8.8/10	Visual Studio Code Python Extension Remote Code Execution Vulnerability	Nov 12, 2024 1y ago
CVE-2024-49750	medium	5.5/10	Snowflake Connector for Python has sensitive data in logs	Oct 24, 2024 1y ago
CVE-2024-47532	high	8.7/10	RestrictedPython information leakage via `AttributeError.obj` and the `string` module	Sep 30, 2024 1y ago
CVE-2024-8948	medium	6.9/10	MicroPython objint.c mpz_as_bytes heap-based overflow	Sep 17, 2024 1y ago
CVE-2024-8947	medium	6.3/10	MicroPython objarray.c use after free	Sep 17, 2024 1y ago
CVE-2024-8946	medium	6.9/10	MicroPython VFS Unmount vfs.c mp_vfs_umount heap-based overflow	Sep 17, 2024 1y ago
CVE-2024-20284	medium	5.3/10	Cisco NX-OS Software Python Parser Escape Vulnerability	Aug 28, 2024 1y ago