CVEs published by Python Software Foundation

CVEs published by Python Software Foundation (CVE Numbering Authority). 4 tracked.

CVE-2026-18503 LOW 2.4 Attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and
CVE-2026-114583 MEDIUM 6.9 tarfile.tar_filter could be bypassed using crafted link entries, including symlinks with empty or directory-li
CVE-2026-15806 MEDIUM 6.0 The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRe
CVE-2026-17084 MEDIUM 6.0 The "stringprep" module didn't process characters from RFC 3454 tables B.2 or B.3 correctly: the latest Unico