P
Vendor security profile
python
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs81
Critical9
CISA KEV0
Public exploit32
Patch rate%80
Avg. CVSS7.0
12-month vulnerability rate
0
4
2
1
5
3
6
2
15
1
3
0
CVE KEV
CVE severity distribution
81toplam CVE
Critical9 (11%)
High37 (46%)
Medium32 (40%)
Low3 (4%)
Patch and exploitation view
%80
Verified patch
%0
CISA KEV
%40
Public exploit
64Patch available
1Partial
0Workaround
0Vendor: no patch
16Unknown
Latest vulnerabilities
7.6
CVE-2026-19553
SSLContext.wrap_bio() missing validation of server_hostname parameter
PS
Patch verifiedEPSS %0
9.2
CVE-2026-19445
Use-after-free of a server-side SSLContext when sni_callback switches contexts
PS
Patch verifiedEPSS %0
5.9
CVE-2026-12345
Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory
PS
Patch verifiedEPSS %0
8.9
CVE-2026-97689
urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory
U
Patch verifiedEPSS %0
6.9
CVE-2026-97688
urllib3: Chunked Deflate streaming can enter an infinite loop
U
Patch verifiedEPSS %0
7.6
CVE-2026-97687
urllib3: HTTPS proxy TLS configuration may be ignored or overridden
U
Patch verifiedEPSS %0
8.7
CVE-2026-100689
GitPython before 3.1.62 Path Traversal via gitmodules path
G
Patch status unknownEPSS %0
4.2
CVE-2026-57179
social-auth-core has a Session Fixation issue
P
Patch status unknownEPSS %0
7.4
CVE-2026-57178
social-auth-core: VK App backend accepts unsigned callback data when auth_key is missing
P
Patch status unknownEPSS %0
4.3
CVE-2026-57177
social-auth-core has Login CSRF via Missing State Parameter in LoginRadius Backend
P
Patch status unknownEPSS %0