Python (page 30) — Tags

Explanation

Pythonは読みやすく書きやすい汎用プログラミング言語で、機械学習・データ分析・Webサーバー・自動化スクリプト等あらゆる分野で使われています。人気フレームワーク Django・Flask・FastAPI で多くのWebサイトが動いており、AI/ML の標準言語でもあります。脆弱性の文脈では、ライブラリ (PyPI) のサプライチェーン攻撃やデシリアライゼーション (pickle) の悪用が知られています。

📌 Example

CVE-2024-3094 (XZ Utils バックドア事件) の際、Python関連の自動化スクリプトも調査対象になった。

🛡 Vulnerabilities tagged with this 981

ID	Title	Severity	Detected
CVE-2025-9959	Incomplete validation of dunder attributes allows an attacker to escape from the Local Python...	High	1 year ago
CVE-2022-37454	Vulnerability in libphp (CVE-2022-37454)	Critical	1 year ago
CVE-2022-0391	Vulnerability in libpython (CVE-2022-0391)	High	1 year ago
CVE-2021-3426	Path Traversal in libpython (CVE-2021-3426)	Medium	1 year ago
CVE-2020-15523	Vulnerability in libpython (CVE-2020-15523)	High	1 year ago
CVE-2020-14422	Vulnerability in libpython (CVE-2020-14422)	Medium	1 year ago
CVE-2025-23170	Command Injection in Versa Networks (CVE-2025-23170)	Medium	1 year ago
CVE-2024-12718	Allows modifying some file metadata (e.g. last modified) with filter="data" or file permissions (chmod) with…	Medium	1 year ago
CVE-2025-4138	Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and…	High	1 year ago
CVE-2025-4330	Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and…	High	1 year ago
CVE-2025-4517	Allows arbitrary filesystem writes outside the extraction directory during extraction with filter="data". You are…	Critical	1 year ago
CVE-2025-30714	Vulnerability in Oracle MySQL Connectors (CVE-2025-30714)	Medium	1 year ago
CVE-2022-49337	Vulnerability in Linux kernel (CVE-2022-49337)	High	1 year ago
CVE-2024-3220	There is a defect in the CPython standard library module “mimetypes” where on Windows the default...		1 year ago
CVE-2025-0938	The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that included square…		1 year ago
CVE-2024-12254	Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines() method would not "pause" writing and…	High	1 year ago
CVE-2024-40647	Information Disclosure in sentry-sdk (CVE-2024-40647)	Medium	2 years ago
CVE-2021-47274	Out-of-Bounds Read in Linux kernel (CVE-2021-47274)	High	2 years ago
CVE-2021-47197	Vulnerability in Linux kernel (CVE-2021-47197)	High	2 years ago
CVE-2020-17163	Vulnerability in Visual Studio Code Python Extension (CVE-2020-17163)	High	2 years ago
CVE-2023-6507	Privilege Escalation in CPython (CVE-2023-6507)	Medium	2 years ago
CVE-2023-49081	Vulnerability in Aiohttp (CVE-2023-49081)	High	2 years ago
CVE-2023-49082	Vulnerability in Aiohttp (CVE-2023-49082)	Medium	2 years ago
CVE-2022-48560	Use-After-Free in Python (CVE-2022-48560)	High	3 years ago
CVE-2023-36095	Code Injection in langchain (CVE-2023-36095)	Critical	3 years ago
CVE-2023-30798	Vulnerability in starlette (CVE-2023-30798)	High	3 years ago
CVE-2023-27043	Vulnerability in libpython (CVE-2023-27043)	Medium	3 years ago
CVE-2023-24329	Vulnerability in Python (CVE-2023-24329)	High	3 years ago
CVE-2022-45061	Vulnerability in Python (CVE-2022-45061)	High	3 years ago
CVE-2020-10735	Vulnerability in python (CVE-2020-10735)	High	4 years ago

Title