Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: vendors Tag: python Clear

ID	Title	Severity	Tags	Detected
CVE-2026-78677	GitPython before 3.1.59 omits --separate-git-dir from unsafe_git_clone_options, allowing... GitPython before 3.1.59 omits --separate-git-dir from unsafe_git_clone_options, allowing...	High	Cwe 22 Git Python Path Traversal	5 days ago
CVE-2026-59894	Code Injection in sqlparse (CVE-2026-59894) code injection in sqlparse (CVE-2026-59894). Risk of unauthorized operations or information disclosure. Exploitable via ``EVOHUNT_OUTPUT_FORMAT_INJECTION_VERIFIED``. Mitigation: upgrade to `0.6.0` or later.		PHP Python Cwe 94	1 week ago
CVE-2026-54981	Vulnerability in microsoft (CVE-2026-54981) vulnerability in microsoft (CVE-2026-54981). Successful exploitation can lead to full system takeover.	High	Python Cwe 693 Cwe 829 Microsoft +1	2 weeks ago
CVE-2026-9201	Vulnerability in langflow (CVE-2026-9201) vulnerability in langflow (CVE-2026-9201). Successful exploitation can lead to full system takeover.	High	Python Cwe 326 Langflow	3 weeks ago
CVE-2026-9196	Code Injection in langflow (CVE-2026-9196) code injection in langflow (CVE-2026-9196). Confidential information can be exposed externally.	High	Python Cwe 94 Langflow	3 weeks ago
CVE-2026-8470	Vulnerability in langflow (CVE-2026-8470) vulnerability in langflow (CVE-2026-8470). Data can be tampered with by attackers.	High	Python Cwe 327 Langflow	3 weeks ago
CVE-2026-17632	Code Injection in langflow (CVE-2026-17632) code injection in langflow (CVE-2026-17632). Successful exploitation can lead to full system takeover.	High	Python Cwe 94 Langflow	3 weeks ago
CVE-2026-66053	Vulnerability in apache (CVE-2026-66053) vulnerability in apache (CVE-2026-66053). Confidential information can be exposed externally.	Medium	Python Apache Cwe 297 Thrift	1 month ago
CVE-2026-43871	Vulnerability in apache (CVE-2026-43871) vulnerability in apache (CVE-2026-43871). Risk of unauthorized operations or information disclosure.	High	PHP Python Java Apache +2	1 month ago
CVE-2026-41608	Vulnerability in apache (CVE-2026-41608) vulnerability in apache (CVE-2026-41608). Risk of unauthorized operations or information disclosure.	High	Python Apache Cwe 409 Thrift	1 month ago
CVE-2026-48586	Vulnerability in c (CVE-2026-48586) vulnerability in c (CVE-2026-48586). Risk of unauthorized operations or information disclosure.	High	Python Java C Apache +2	1 month ago
CVE-2026-65908	Vulnerability in jetbrains (CVE-2026-65908) vulnerability in jetbrains (CVE-2026-65908). Successful exploitation can lead to full system takeover.	High	Python Cwe 829 Jetbrains Pycharm	1 month ago
CVE-2026-8481	Code Injection in c (CVE-2026-8481) code injection in c (CVE-2026-8481). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/v1/validate/code`.	Critical	Python C Remote Code Execution Cwe 94 +7	1 month ago
CVE-2026-8476	Unsafe Deserialization in langflow (CVE-2026-8476) vulnerability in langflow (CVE-2026-8476). Successful exploitation can lead to full system takeover.	Critical	Python Remote Code Execution Cwe 502 Langflow +6	1 month ago
CVE-2026-14499	OS Command Injection in langflow (CVE-2026-14499) OS command injection in langflow (CVE-2026-14499). Successful exploitation can lead to full system takeover.	High	Python Cwe 78 Langflow Apple +5	1 month ago
CVE-2026-9135	Code Injection in langflow (CVE-2026-9135) code injection in langflow (CVE-2026-9135). Successful exploitation can lead to full system takeover.	Critical	Python Cwe 94 Langflow Apple +5	1 month ago
CVE-2026-56777	Vulnerability in n8n (CVE-2026-56777) vulnerability in n8n (CVE-2026-56777). Risk of unauthorized operations or information disclosure.	Medium	Python Cwe 184 N8N	1 month ago
CVE-2026-58138	Code Injection in CVE-2026-58138 (CVE-2026-58138) code injection in CVE-2026-58138 (CVE-2026-58138). Successful exploitation can lead to full system takeover.	Critical	JavaScript Python Java Remote Code Execution +1	1 month ago
CVE-2026-10561	Code Injection in langflow (CVE-2026-10561) code injection in langflow (CVE-2026-10561). Successful exploitation can lead to full system takeover.	Critical	Python Authentication Bypass Cwe 94 Langflow	2 months ago
CVE-2026-49257	Vulnerability in mcp-pinot-server (CVE-2026-49257) vulnerability in mcp-pinot-server (CVE-2026-49257). Successful exploitation can lead to full system takeover. Exploitable via `Authorization header`. Mitigation: upgrade to `3.1.0` or later.	Critical	Python Apache Cwe 306	2 months ago
CVE-2026-53842	Vulnerability in openclaw (CVE-2026-53842) vulnerability in openclaw (CVE-2026-53842). Confidential information can be exposed externally. Exploitable via ``gcloud``. Mitigation: upgrade to `2026.5.2` or later.	High	Python Cwe 426 Openclaw	2 months ago
CVE-2026-49444	Vulnerability in n8n (CVE-2026-49444) vulnerability in n8n (CVE-2026-49444). Confidential information can be exposed externally. Exploitable via ``NODES_EXCLUDE``. Mitigation: upgrade to `2.21.8` or later.	High	Python Cwe 20 N8N	2 months ago
CVE-2026-48519	Code Injection in langflow (CVE-2026-48519) code injection in langflow (CVE-2026-48519). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.9.2` or later.	Critical	Python Remote Code Execution Cwe 94 Langflow	2 months ago
CVE-2026-44181	Vulnerability in jupyter_enterprise_gateway (CVE-2026-44181) vulnerability in jupyter_enterprise_gateway (CVE-2026-44181). Successful exploitation can lead to full system takeover. Exploitable via ``KERNEL_XXX``. Mitigation: upgrade to `3.3.0` or later.	Critical	Python Apache Cwe 1336 Jupyter +1	2 months ago
CVE-2026-45426	Authorization Flaw in apache-airflow (CVE-2026-45426) vulnerability in apache-airflow (CVE-2026-45426). Risk of unauthorized operations or information disclosure. Exploitable via ``sub``. Mitigation: upgrade to `3.2.2` or later.	Low	Python Apache Cwe 863 Airflow	2 months ago
CVE-2026-46621	Code Injection in org.yamcs:yamcs-core (CVE-2026-46621) code injection in org.yamcs:yamcs-core (CVE-2026-46621). Successful exploitation can lead to full system takeover. Exploitable via ``ChangeMissionDatabase``. Mitigation: upgrade to `5.12.7` or later.	Critical	Python Java Remote Code Execution Cwe 94 +2	3 months ago
CVE-2026-5843	Vulnerability in docker (CVE-2026-5843) vulnerability in docker (CVE-2026-5843). Successful exploitation can lead to full system takeover.	High	Python Cwe 829 Docker Docker Desktop +2	3 months ago
CVE-2026-5817	Vulnerability in docker (CVE-2026-5817) vulnerability in docker (CVE-2026-5817). Successful exploitation can lead to full system takeover.	High	Python Cwe 829 Docker Docker Desktop +2	3 months ago
CVE-2026-48207	Unsafe Deserialization in pyfory (CVE-2026-48207) vulnerability in pyfory (CVE-2026-48207). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.0.0` or later.	Critical	Python Apache Insecure Deserialization Cwe 502 +1	3 months ago
CVE-2025-32414	Vulnerability in java (CVE-2025-32414) vulnerability in java (CVE-2025-32414). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.0, 8.0.461` or later.		Bitnami Java Python Java Min +1	3 months ago
CVE-2026-32936	Vulnerability in github.com/coredns/coredns (CVE-2026-32936) vulnerability in github.com/coredns/coredns (CVE-2026-32936). Risk of unauthorized operations or information disclosure. Exploitable via ``dns``. Mitigation: upgrade to `1.14.3` or later.	High	Denial of Service Cwe 400 Corednsio Coredns +3	3 months ago
CVE-2026-40110	Vulnerability in jupyter-server (CVE-2026-40110) vulnerability in jupyter-server (CVE-2026-40110). Confidential information can be exposed externally. Exploitable via ``allow_origin_pat``. Mitigation: upgrade to `057869a327c46730afede3eab0ca2d2` or later.	High	Python Cwe 777 Jupyter Jupyter Server +1	3 months ago
CVE-2026-44015	SSRF (Server-Side Request Forgery) in github.com/0xJacky/Nginx-UI (CVE-2026-44015) SSRF in github.com/0xJacky/Nginx-UI (CVE-2026-44015). Confidential information can be exposed externally. Exploitable via `GET /api/settings`.	High	Go Githubcom0Xjackynginx Ui Python nginx +5	4 months ago
CVE-2026-3087	Path Traversal in libpython (CVE-2026-3087) path traversal in libpython (CVE-2026-3087). Data can be tampered with by attackers. Mitigation: upgrade to `3.14.5` or later.	High	C Cwe 22 Python Microsoft +1	4 months ago
CVE-2026-39844	Path Traversal in zauberzeug (CVE-2026-39844) path traversal in zauberzeug (CVE-2026-39844). Data can be tampered with by attackers. Mitigation: upgrade to `3.10.0` or later.	Medium	Python Cwe 22 Zauberzeug Nicegui +2	4 months ago
CVE-2026-33229	Vulnerability in xwiki (CVE-2026-33229) vulnerability in xwiki (CVE-2026-33229). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `17.4.8` or later.	Critical	Python Cwe 862 Xwiki	4 months ago
CVE-2026-33017 KEV	[KEV] Vulnerability in langflow (CVE-2026-33017) vulnerability in langflow (CVE-2026-33017). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/v1/build_public_tmp/{flow_id}/flow`. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `1.9.0` or later.	Critical	Langflow Cwe 94 Cwe 95 Cwe 306 +2	5 months ago
CVE-2026-0994	Vulnerability in protobuf (CVE-2026-0994) vulnerability in protobuf (CVE-2026-0994). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.29.6` or later.	High	Python Denial of Service Cwe 674 Google +1	7 months ago
CVE-2022-49337	Vulnerability in c (CVE-2022-49337) vulnerability in c (CVE-2022-49337). Successful exploitation can lead to full system takeover.	High	Python C Cwe 667 Linux +1	1 year ago
CVE-2021-47274	Out-of-Bounds Read in linux (CVE-2021-47274) vulnerability in linux (CVE-2021-47274). Successful exploitation can lead to full system takeover.	High	Python Cwe 125 Linux Linux Kernel	2 years ago
CVE-2021-47197	Vulnerability in linux (CVE-2021-47197) vulnerability in linux (CVE-2021-47197). Successful exploitation can lead to full system takeover.	High	Python Linux Linux Kernel	2 years ago
CVE-2020-17163	Visual Studio Code Python Extension Remote Code Execution Vulnerability Visual Studio Code Python Extension Remote Code Execution Vulnerability	High	Python Remote Code Execution Microsoft	2 years ago
CVE-2018-25032	Out-of-Bounds Write in nokogiri (CVE-2018-25032) out-of-bounds write in nokogiri (CVE-2018-25032). Risk of unauthorized operations or information disclosure.	High	Cwe 787 Nokogiri Python Microsoft +44	4 years ago
CVE-2021-3572	Vulnerability in pypa (CVE-2021-3572) vulnerability in pypa (CVE-2021-3572). Data can be tampered with by attackers.	Medium	Python Cwe 20 Pypa Pip +4	4 years ago
CVE-2020-1192	Vulnerability in microsoft (CVE-2020-1192) vulnerability in microsoft (CVE-2020-1192). Successful exploitation can lead to full system takeover.	High	Python Remote Code Execution Microsoft	6 years ago
CVE-2020-1171	Vulnerability in microsoft (CVE-2020-1171) vulnerability in microsoft (CVE-2020-1171). Successful exploitation can lead to full system takeover.	High	Python Remote Code Execution Microsoft	6 years ago
CVE-2017-12340	Vulnerability in cisco (CVE-2017-12340) vulnerability in cisco (CVE-2017-12340). Risk of unauthorized operations or information disclosure.	Medium	Python Cwe 284 Cwe 116 Cisco +1	8 years ago
CVE-2017-12301	Vulnerability in cisco (CVE-2017-12301) vulnerability in cisco (CVE-2017-12301). Successful exploitation can lead to full system takeover.	Medium	Python Cwe 20 Cisco Nx Os +37	8 years ago
CVE-2015-3206	Authentication Bypass in pykerberos (CVE-2015-3206) authentication bypass in pykerberos (CVE-2015-3206). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.1.6` or later.	High	Python Denial of Service Cwe 287 Apple +1	9 years ago
CVE-2017-3590	Vulnerability in mysql-connector-python (CVE-2017-3590) vulnerability in mysql-connector-python (CVE-2017-3590). Risk of unauthorized operations or information disclosure.	Low	Python C Oracle Connectorpython	9 years ago

Vulnerabilities

🍪 About cookies