slug: python

Explanation

Pythonは読みやすく書きやすい汎用プログラミング言語で、機械学習・データ分析・Webサーバー・自動化スクリプト等あらゆる分野で使われています。 人気フレームワーク Django・Flask・FastAPI で多くのWebサイトが動いており、AI/ML の標準言語でもあります。 脆弱性の文脈では、ライブラリ (PyPI) のサプライチェーン攻撃やデシリアライゼーション (pickle) の悪用が知られています。
📌 Example
CVE-2024-3094 (XZ Utils バックドア事件) の際、Python関連の自動化スクリプトも調査対象になった。

🔖 Related tags

🛡 Vulnerabilities tagged with this 635

ID Title
CVE-2026-67435 Information Disclosure in linuxfabrik-lib (CVE-2026-67435)
CVE-2026-67436 Vulnerability in CVE-2026-67436 (CVE-2026-67436)
CVE-2026-67428 Flyto2 Core: Multiple HTTP-family modules fetch client-controlled URLs without the SSRF guard their siblings apply (SSRF to internal/metadata)
CVE-2026-67424 Flyto2 Core: Guarded HTTP modules follow redirects into internal space without per-hop SSRF revalidation
CVE-2026-62995 Vulnerability in CVE-2026-62995 (CVE-2026-62995)
CVE-2026-54654 Code Injection in datamodel-code-generator (CVE-2026-54654)
CVE-2026-54653 Code Injection in datamodel-code-generator (CVE-2026-54653)
CVE-2026-54656 Code Injection in datamodel-code-generator (CVE-2026-54656)
CVE-2026-55415 Code Injection in datamodel-code-generator (CVE-2026-55415)
CVE-2026-54621 Code Injection in datamodel-code-generator (CVE-2026-54621)
CVE-2026-54655 Code Injection in datamodel-code-generator (CVE-2026-54655)
CVE-2026-55403 Information Disclosure in datamodel-code-generator (CVE-2026-55403)
CVE-2026-54691 SSRF (Server-Side Request Forgery) in datamodel-code-generator (CVE-2026-54691)
CVE-2026-55390 Path Traversal in datamodel-code-generator (CVE-2026-55390)
CVE-2026-67182 Vulnerability in CVE-2026-67182 (CVE-2026-67182)
CVE-2026-54635 Authentication Bypass in pytonapi (CVE-2026-54635)
CVE-2026-66053 Vulnerability in apache (CVE-2026-66053)
CVE-2026-48586 Vulnerability in c (CVE-2026-48586)
CVE-2026-41608 Vulnerability in apache (CVE-2026-41608)
CVE-2026-43871 Vulnerability in apache (CVE-2026-43871)
CVE-2026-17497 OS Command Injection in notegen (CVE-2026-17497)
CVE-2026-63720 Code Injection in CVE-2026-63720 (CVE-2026-63720)
CVE-2026-73568 Vulnerability in libp2p (CVE-2026-73568)
CVE-2025-71408 Vulnerability in nltk (CVE-2025-71408)
CVE-2026-61632 Path Traversal in pymdown-extensions (CVE-2026-61632)
CVE-2026-66138 OS Command Injection in CVE-2026-66138 (CVE-2026-66138)
CVE-2026-54422 Vulnerability in CVE-2026-54422 (CVE-2026-54422)
CVE-2026-16796 Vulnerability in Amazon bedrock-agentcore (CVE-2026-16796)
CVE-2026-65908 Vulnerability in jetbrains (CVE-2026-65908)
CVE-2026-44190 OS Command Injection in CVE-2026-44190 (CVE-2026-44190)

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →