Search CVE reports


Toggle filters

21 – 24 of 24 results


CVE-2024-8088

Medium priority

Some fixes available 3 of 6

There is a HIGH severity vulnerability affecting the CPython "zipfile" module affecting "zipfile.Path". Note that the more common API "zipfile.ZipFile" class is unaffected. When iterating over names of entries in a zip archive...

11 affected packages

python2.7, python3.4, python3.5, python3.6, python3.7...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
python2.7 Not in release Not affected Not affected Not affected
python3.4 Not in release Not in release Not in release
python3.5 Not in release Not in release Not in release
python3.6 Not in release Not in release Not in release Not affected
python3.7 Not in release Not in release Not in release Not affected
python3.8 Not in release Not in release Fixed Needs evaluation
python3.9 Not in release Not in release Needs evaluation
python3.10 Not in release Fixed Not in release
python3.11 Not in release Needs evaluation Not in release
python3.12 Fixed Not in release Not in release
python3.13 Not in release Not in release Not in release
Show all 11 packages Show less packages

CVE-2024-7592

Low priority

Some fixes available 10 of 16

There is a LOW severity vulnerability affecting CPython, specifically the 'http.cookies' standard library module. When parsing cookies that contained backslashes for quoted characters in the cookie value, the parser would use an...

11 affected packages

python2.7, python3.4, python3.5, python3.6, python3.7...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
python2.7 Not in release Fixed Fixed Fixed
python3.4 Not in release Not in release Not in release
python3.5 Not in release Not in release Not in release
python3.6 Not in release Not in release Not in release Needs evaluation
python3.7 Not in release Not in release Not in release Needs evaluation
python3.8 Not in release Not in release Fixed Needs evaluation
python3.9 Not in release Not in release Needs evaluation
python3.10 Not in release Fixed Not in release
python3.11 Not in release Needs evaluation Not in release
python3.12 Fixed Not in release Not in release
python3.13 Not in release Not in release Not in release
Show all 11 packages Show less packages

CVE-2024-6923

Medium priority

Some fixes available 8 of 16

There is a MEDIUM severity vulnerability affecting CPython. The email module didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized.

11 affected packages

python3.5, python2.7, python3.4, python3.6, python3.7...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
python3.5 Not in release Not in release Not in release Not in release
python2.7 Not in release Fixed Fixed Fixed
python3.4 Not in release Not in release Not in release Not in release
python3.6 Not in release Not in release Not in release Needs evaluation
python3.7 Not in release Not in release Not in release Needs evaluation
python3.8 Not in release Not in release Fixed Needs evaluation
python3.9 Not in release Not in release Needs evaluation Not in release
python3.10 Not in release Fixed Not in release Not in release
python3.11 Not in release Needs evaluation Not in release Not in release
python3.12 Fixed Not in release Not in release Not in release
python3.13 Not in release Not in release Not in release Not in release
Show all 11 packages Show less packages

CVE-2023-27043

Medium priority

Some fixes available 10 of 21

The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker...

11 affected packages

python3.10, python3.11, python3.8, python2.7, python3.4...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
python3.10 Not in release Fixed Not in release Not in release
python3.11 Not in release Vulnerable Not in release Not in release
python3.8 Not in release Not in release Fixed Vulnerable
python2.7 Not in release Fixed Fixed Fixed
python3.4 Not in release Not in release Not in release Not in release
python3.5 Not in release Not in release Not in release Not in release
python3.6 Not in release Not in release Not in release Vulnerable
python3.7 Not in release Not in release Not in release Vulnerable
python3.9 Not in release Not in release Vulnerable Not in release
python3.12 Fixed Not in release Not in release Not in release
python3.13 Not in release Not in release Not in release Not in release
Show all 11 packages Show less packages