Sign in Sign up
JA · EN · FR
SecPulse

Python

💬 Programming Languages Related 981
slug: python

Explanation

Pythonは読みやすく書きやすい汎用プログラミング言語で、機械学習・データ分析・Webサーバー・自動化スクリプト等あらゆる分野で使われています。 人気フレームワーク Django・Flask・FastAPI で多くのWebサイトが動いており、AI/ML の標準言語でもあります。 脆弱性の文脈では、ライブラリ (PyPI) のサプライチェーン攻撃やデシリアライゼーション (pickle) の悪用が知られています。
📌 Example
CVE-2024-3094 (XZ Utils バックドア事件) の際、Python関連の自動化スクリプトも調査対象になった。

🔖 Related tags

C10256 PHP5978 JavaScript4124 Java1447 C++498 C#359 Rust225 Ruby201 Go105 Perl18 PowerShell8 PyTorch5 Swift3 TypeScript1 Kotlin1

🛡 Vulnerabilities tagged with this 981

Image ID Title
CVE-2026-44307 Path Traversal in Mako (CVE-2026-44307)
CVE-2026-43948 Authorization Flaw in wger (CVE-2026-43948)
CVE-2026-42544 Vulnerability in granian (CVE-2026-42544)
CVE-2026-42545 Vulnerability in granian (CVE-2026-42545)
CVE-2026-31237 Unsafe Deserialization in ludwig (CVE-2026-31237)
CVE-2026-31238 Unsafe Deserialization in ludwig (CVE-2026-31238)
CVE-2026-31236 Code Injection in llm (CVE-2026-31236)
CVE-2026-31235 Unsafe Deserialization in imgaug (CVE-2026-31235)
CVE-2026-31239 Unsafe Deserialization in mamba-ssm (CVE-2026-31239)
CVE-2026-31231 Code Injection in Cognee thru (CVE-2026-31231)
CVE-2026-31229 The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains an insecure deserialization...
CVE-2026-31230 The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a command-line argument injection...
CVE-2026-31232 The CosyVoice project thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains...
CVE-2026-31221 Unsafe Deserialization in pytorch-lightning (CVE-2026-31221)
CVE-2026-31222 Unsafe Deserialization in snorkel (CVE-2026-31222)
CVE-2026-31223 Unsafe Deserialization in snorkel (CVE-2026-31223)
CVE-2026-31224 Unsafe Deserialization in snorkel (CVE-2026-31224)
CVE-2026-31225 Code Injection in superduper-framework (CVE-2026-31225)
CVE-2026-31228 The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a remote code execution...
CVE-2026-31214 The torch-checkpoint-shrink.py script in the ml-engineering project in commit...
CVE-2026-31217 Code Injection in Nebuly (CVE-2026-31217)
CVE-2026-31218 The _load_model() function in the neural_magic_training.py script of the optimate project in...
CVE-2026-31219 The _load_model() function in the neural_magic_training.py script of the optimate project in...
CVE-2026-31220 Code Injection in syft (CVE-2026-31220)
CVE-2026-42874 Vulnerability in microdot (CVE-2026-42874)
CVE-2026-7210 Vulnerability in libpython (CVE-2026-7210)
CVE-2026-31252 CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure...
CVE-2026-31249 CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure...
CVE-2026-31254 The flash-attention project thru commit e724e2588cbe754beb97cf7c011b5e7e34119e62 (2025-13-04)...
CVE-2026-31250 CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure...

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details