| CVE-2026-115557 |
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without…
|
9.4
Critique
|
24 oct. 2026 |
| CVE-2026-19445 |
A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its sni_callback assigns…
|
9.2
Critique
|
30 sept. 2026 |
| CVE-2026-6100 |
Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a…
|
9.1
Critique
|
13 avr. 2026 |
| CVE-2025-4517 |
Allows arbitrary filesystem writes outside the extraction directory during extraction with filter="data"
|
9.4
Critique
|
3 juin 2025 |