| CVE-2026-115557 |
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without…
|
9.4
Critical
|
Oct 24, 2026 |
| CVE-2026-19445 |
A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its sni_callback assigns…
|
9.2
Critical
|
Sep 30, 2026 |
| CVE-2026-6100 |
Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a…
|
9.1
Critical
|
Apr 13, 2026 |
| CVE-2025-4517 |
Allows arbitrary filesystem writes outside the extraction directory during extraction with filter="data"
|
9.4
Critical
|
Jun 3, 2025 |