[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fLB3JIZSoPnX3DPgtrqIkqLnWlfzK6U07zKppmtWwJFs":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":174,"kevVulnerabilities":236,"topProductsByCves":237,"seoMetadata":248,"meta":257},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":173},26029,"python",35,229,0,1728,"2025-07-01","p",[16,21,26,32,38,44,49,55,59,64,68,71,76,81,86,91,96,99,103,107,112,117,121,126,131,135,140,145,150,153,157,160,163,167,170],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":20},131447,266,130,"2024-10-22",{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":13},131440,"pillow",91,54,{"id":27,"product_name":28,"version_count":29,"cve_count":30,"kev_count":11,"last_cve_update":31},131460,"urllib3",71,12,"2025-06-19",{"id":33,"product_name":34,"version_count":35,"cve_count":36,"kev_count":11,"last_cve_update":37},131452,"requests",153,5,"2023-05-26",{"id":39,"product_name":40,"version_count":41,"cve_count":42,"kev_count":11,"last_cve_update":43},131455,"setuptools",511,3,"2025-05-17",{"id":45,"product_name":46,"version_count":47,"cve_count":42,"kev_count":11,"last_cve_update":48},131436,"keyring",139,"2019-11-25",{"id":50,"product_name":51,"version_count":52,"cve_count":53,"kev_count":11,"last_cve_update":54},131459,"typed_ast",27,2,"2019-11-26",{"id":56,"product_name":57,"version_count":53,"cve_count":53,"kev_count":11,"last_cve_update":58},131450,"pyxdg","2019-06-06",{"id":60,"product_name":61,"version_count":11,"cve_count":62,"kev_count":11,"last_cve_update":63},131427,"beaker",1,"2012-09-15",{"id":65,"product_name":66,"version_count":36,"cve_count":62,"kev_count":11,"last_cve_update":67},131432,"hpack","2017-01-10",{"id":69,"product_name":70,"version_count":53,"cve_count":62,"kev_count":11,"last_cve_update":67},131433,"hyper",{"id":72,"product_name":73,"version_count":74,"cve_count":62,"kev_count":11,"last_cve_update":75},131434,"jw.util",25,"2020-05-22",{"id":77,"product_name":78,"version_count":79,"cve_count":62,"kev_count":11,"last_cve_update":80},131438,"novajoin",16,"2019-07-30",{"id":82,"product_name":83,"version_count":84,"cve_count":62,"kev_count":11,"last_cve_update":85},131439,"openpyxl",82,"2017-02-15",{"id":87,"product_name":88,"version_count":89,"cve_count":62,"kev_count":11,"last_cve_update":90},131441,"py-bcrypt",4,"2020-01-28",{"id":92,"product_name":93,"version_count":94,"cve_count":62,"kev_count":11,"last_cve_update":95},131442,"pybluemonday",8,"2021-10-18",{"id":97,"product_name":98,"version_count":42,"cve_count":62,"kev_count":11,"last_cve_update":67},131449,"python_priority_library",{"id":100,"product_name":101,"version_count":62,"cve_count":62,"kev_count":11,"last_cve_update":102},131451,"pyxml","2019-11-22",{"id":104,"product_name":105,"version_count":62,"cve_count":62,"kev_count":11,"last_cve_update":106},131453,"rply","2014-01-28",{"id":108,"product_name":109,"version_count":110,"cve_count":62,"kev_count":11,"last_cve_update":111},131454,"rsa",23,"2016-01-13",{"id":113,"product_name":114,"version_count":115,"cve_count":62,"kev_count":11,"last_cve_update":116},131456,"tablib",37,"2017-06-14",{"id":118,"product_name":119,"version_count":62,"cve_count":62,"kev_count":11,"last_cve_update":120},131457,"tgcaptcha2","2016-10-25",{"id":122,"product_name":123,"version_count":124,"cve_count":62,"kev_count":11,"last_cve_update":125},131458,"tkvideoplayer",6,"2022-05-06",{"id":127,"product_name":128,"version_count":129,"cve_count":62,"kev_count":11,"last_cve_update":130},131461,"virtualenv",26,"2011-12-31",{"id":132,"product_name":133,"version_count":11,"cve_count":62,"kev_count":11,"last_cve_update":134},131445,"pypi","2022-05-08",{"id":136,"product_name":137,"version_count":138,"cve_count":62,"kev_count":11,"last_cve_update":139},131446,"pypiserver",31,"2019-01-25",{"id":141,"product_name":142,"version_count":143,"cve_count":62,"kev_count":11,"last_cve_update":144},131448,"python-gnupg",21,"2019-03-21",{"id":146,"product_name":147,"version_count":148,"cve_count":11,"kev_count":11,"last_cve_update":149},131443,"pycryptodome",32,null,{"id":151,"product_name":152,"version_count":89,"cve_count":11,"kev_count":11,"last_cve_update":149},131444,"pykerberos",{"id":154,"product_name":155,"version_count":156,"cve_count":11,"kev_count":11,"last_cve_update":149},131430,"decorator",24,{"id":158,"product_name":159,"version_count":52,"cve_count":11,"kev_count":11,"last_cve_update":149},131431,"enum34",{"id":161,"product_name":162,"version_count":9,"cve_count":11,"kev_count":11,"last_cve_update":149},131437,"networkx",{"id":164,"product_name":165,"version_count":166,"cve_count":11,"kev_count":11,"last_cve_update":149},131428,"black",52,{"id":168,"product_name":169,"version_count":62,"cve_count":11,"kev_count":11,"last_cve_update":149},131429,"cpython",{"id":171,"product_name":172,"version_count":62,"cve_count":11,"kev_count":11,"last_cve_update":149},131435,"jython","Python is a technology vendor with 35 tracked products and 229 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[175,184,190,195,202,208,213,220,226,231],{"cveId":176,"description":177,"publishedDate":178,"cvssScore":179,"cvssVersion":180,"severity":181,"isKev":182,"epssScore":183},"CVE-2014-0224","OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the \"CCS Injection\" vulnerability.","2014-06-05",7.4,"v3.1","High",false,0.95326,{"cveId":185,"description":186,"publishedDate":187,"cvssScore":188,"cvssVersion":180,"severity":181,"isKev":182,"epssScore":189},"CVE-2016-2183","The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a \"Sweet32\" attack.","2016-09-01",7.5,0.94697,{"cveId":191,"description":192,"publishedDate":193,"cvssScore":188,"cvssVersion":180,"severity":181,"isKev":182,"epssScore":194},"CVE-2018-25032","zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.","2022-03-25",0.51733,{"cveId":196,"description":197,"publishedDate":198,"cvssScore":199,"cvssVersion":180,"severity":200,"isKev":182,"epssScore":201},"CVE-2021-23336","The package python\u002Fcpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before 3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a vector called parameter cloaking. When the attacker can separate query parameters using a semicolon (;), they can cause a difference in the interpretation of the request between the proxy (running with default configuration) and the server. This can result in malicious requests being cached as completely safe ones, as the proxy would usually not see the semicolon as a separator, and therefore would not include it in a cache key of an unkeyed parameter.","2021-02-15",5.9,"Medium",0.40736,{"cveId":203,"description":204,"publishedDate":205,"cvssScore":188,"cvssVersion":206,"severity":181,"isKev":182,"epssScore":207},"CVE-2014-1912","Buffer overflow in the socket.recvfrom_into function in Modules\u002Fsocketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string.","2014-03-01","v2",0.28112,{"cveId":209,"description":210,"publishedDate":211,"cvssScore":36,"cvssVersion":206,"severity":200,"isKev":182,"epssScore":212},"CVE-2009-3720","The updatePosition function in lib\u002Fxmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a buffer over-read, a different vulnerability than CVE-2009-2625.","2009-11-03",0.27924,{"cveId":214,"description":215,"publishedDate":216,"cvssScore":217,"cvssVersion":180,"severity":218,"isKev":182,"epssScore":219},"CVE-2007-4559","Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.","2007-08-28",9.8,"Critical",0.27095,{"cveId":221,"description":222,"publishedDate":223,"cvssScore":217,"cvssVersion":224,"severity":218,"isKev":182,"epssScore":225},"CVE-2016-5636","Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value, which triggers a heap-based buffer overflow.","2016-09-02","v3.0",0.2548,{"cveId":227,"description":228,"publishedDate":229,"cvssScore":217,"cvssVersion":180,"severity":218,"isKev":182,"epssScore":230},"CVE-2014-4650","The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attackers to read script source code or conduct directory traversal attacks and execute unintended code via a crafted character sequence, as demonstrated by a %2f separator.","2020-02-20",0.247,{"cveId":232,"description":233,"publishedDate":234,"cvssScore":217,"cvssVersion":180,"severity":218,"isKev":182,"epssScore":235},"CVE-2021-3177","Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes\u002Fcallproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used unsafely.","2021-01-19",0.24216,[],[238,239,240,241,242,243,244,245,246,247],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":20},{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":13},{"id":27,"product_name":28,"version_count":29,"cve_count":30,"kev_count":11,"last_cve_update":31},{"id":33,"product_name":34,"version_count":35,"cve_count":36,"kev_count":11,"last_cve_update":37},{"id":39,"product_name":40,"version_count":41,"cve_count":42,"kev_count":11,"last_cve_update":43},{"id":45,"product_name":46,"version_count":47,"cve_count":42,"kev_count":11,"last_cve_update":48},{"id":50,"product_name":51,"version_count":52,"cve_count":53,"kev_count":11,"last_cve_update":54},{"id":56,"product_name":57,"version_count":53,"cve_count":53,"kev_count":11,"last_cve_update":58},{"id":60,"product_name":61,"version_count":11,"cve_count":62,"kev_count":11,"last_cve_update":63},{"id":65,"product_name":66,"version_count":36,"cve_count":62,"kev_count":11,"last_cve_update":67},{"title":249,"metaDescription":250,"keywords":251,"structuredData":252},"Python - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Python covering 35 products with 229 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Python vulnerabilities, Python security, Python CVE, Python threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":253,"@type":254,"name":255,"description":250,"url":256},"https:\u002F\u002Fschema.org","Organization","Python","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fpython",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":258,"apiVersion":259},"2026-10-17T13:19:16.137Z","3.0"]