Python vulnerabilities and fixes

CVEs that mention Python, ranked by priority. 160 tracked.

Python has 160 tracked vulnerabilities, 12 critical. A fixed release or vendor patch exists for 104. Most recent: 2026-10-24. Highest priority: CVE-2026-73034 (score 69/100).

• CVE-2026-73034 CRITICAL 9.8 DB-GPT v0.8.1 contains an unauthenticated path traversal vulnerability that allows remote attackers to write a
• CVE-2026-73487 CRITICAL 9.8 UPGRADE Flowise before 3.1.3 contains a regex-based Python code validator bypass in CSV and Airtable Agent nodes that
• CVE-2026-69264 CRITICAL 9.8 UPGRADE Prior to 3.1.3, Flowise CSVAgent interpolates an attacker-controlled segment of the csvFile data URI directly
• CVE-2026-69098 CRITICAL 9.8 kotaemon through 0.12.0 contains an insecure deserialization vulnerability in the check_connection endpoint th
• CVE-2026-70470 CRITICAL 9.8 UPGRADE Flowise is a drag & drop user interface to build a customized large language model flow
• CVE-2026-68771 CRITICAL 9.8 ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node that allows u
• CVE-2026-70477 CRITICAL 9.8 UPGRADE Flowise is a drag & drop user interface to build a customized large language model flow
• CVE-2026-35029 HIGH 8.8 UPGRADE LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format
• CVE-2026-112408 HIGH 8.1 Missing verification of source of a communication channel in the default_bucket() function in Amazon SageMaker
• CVE-2026-41608 HIGH 7.5 UPGRADE Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Python binding
• CVE-2026-43871 HIGH 7.5 UPGRADE Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Thrift Python, Go, PHP and Java
• CVE-2026-48586 HIGH 7.5 UPGRADE Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Pyt
• CVE-2026-69256 HIGH 8.8 UPGRADE Flowise is a drag & drop user interface to build a customized large language model flow
• CVE-2026-67195 HIGH 8.8 Perspective 5.0.0 contains a remote code execution vulnerability that allows unauthenticated attackers to exec
• CVE-2026-96639 CRITICAL 9.8 Pillow is a Python imaging library
• CVE-2026-115727 HIGH 8.1 AgenticSeek before commit 409840c contains a remote code execution vulnerability because llm_server/app.py har
• CVE-2026-35050 CRITICAL 9.1 UPGRADE text-generation-webui is an open-source web interface for running Large Language Models
• CVE-2026-73486 HIGH 8.8 UPGRADE Flowise before 3.1.3 contains a code injection vulnerability in the CSV Agent node's customReadCSV parameter t
• CVE-2026-10595 HIGH 7.5 A path traversal vulnerability exists in parisneo/lollms version 2.1.0, specifically in the SPA catch-all rout
• CVE-2026-115775 HIGH 8.7 Twisted is an event-based framework for internet applications, supporting Python 3.6+
• CVE-2026-54635 HIGH 7.5 pytonapi is a Python SDK for TONAPI that provides REST API, streaming, and webhook access to the TON blockchai
• CVE-2026-67436 HIGH 8.3 Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related monitoring s
• CVE-2026-69255 HIGH 8.8 UPGRADE Flowise is a drag & drop user interface to build a customized large language model flow
• CVE-2026-73485 HIGH 8.8 UPGRADE Flowise before 3.1.3 contains a code injection vulnerability in the Airtable Agent node that allows unauthenti
• CVE-2026-18353 HIGH 8.8 PIA's `POST /v1/upload/sbom` endpoint accepts a Bearer JWT and checks its **unverified** `iss` claim against a
• CVE-2026-112398 CRITICAL 9.2 Pillow is a Python imaging library
• CVE-2026-112403 CRITICAL 9.2 Pillow is a Python imaging library
• CVE-2026-35044 HIGH 8.8 UPGRADE BentoML is a Python library for building online serving systems optimized for AI apps and model inference
• CVE-2026-67422 HIGH 7.5 pymdown-extensions is a collection of extensions for the Python Markdown library
• CVE-2026-115776 HIGH 7.5 Twisted is an event-based framework for internet applications, supporting Python 3.6+
• CVE-2026-115778 HIGH 7.5 Twisted is an event-based framework for internet applications, supporting Python 3.6+
• CVE-2026-54284 HIGH 8.7 sqlparse is a non-validating SQL parser module for Python
• CVE-2026-55390 HIGH 7.5 datamodel-code-generator generates Python data models from schema definitions
• CVE-2026-73568 HIGH 7.5 py-libp2p is the Python implementation of the libp2p networking stack
• CVE-2026-109440 HIGH 8.8 LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote attackers
• CVE-2026-112897 HIGH 8.7 Pillow is a Python imaging library
• CVE-2026-16796 HIGH 7.3 Improper neutralization of argument delimiters in the install_packages() method in AWS Bedrock AgentCore Pytho
• CVE-2026-17632 HIGH 8.8 UPGRADE IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code du
• CVE-2026-18770 HIGH 7.3 A vulnerability has been found in vibesurf-ai VibeSurf up to cd6e519d507cdd4d63061300bf60fb176e1f57e0
• CVE-2026-112390 HIGH 7.5 UPGRADE Pillow is a Python imaging library
• CVE-2026-112391 HIGH 7.5 UPGRADE Pillow is a Python imaging library
• CVE-2026-17497 HIGH 8.3 UPGRADE NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and pytho
• CVE-2026-75507 HIGH 7.5 GraphQL-core is a Python port of the GraphQL.js reference implementation
• CVE-2026-75508 HIGH 7.5 GraphQL-core is a Python port of the GraphQL.js reference implementation
• CVE-2026-96640 HIGH 8.2 Pillow is a Python imaging library
• CVE-2026-54981 HIGH 7.8 MITIGATE Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an un
• CVE-2026-55415 HIGH 7.5 UPGRADE datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI
• CVE-2026-57845 HIGH 8.8 Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows attackers t
• CVE-2026-69249 HIGH 8.7 python-cryptography is a package designed to expose cryptographic primitives and recipes to Python developers
• CVE-2026-112892 HIGH 8.7 Pillow is a Python imaging library
• CVE-2026-59893 HIGH 7.5 sqlparse is a non-validating SQL parser module for Python
• CVE-2026-115419 HIGH 8.1 The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK f
• CVE-2026-59881 MEDIUM 6.9 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python
• CVE-2026-61536 HIGH 7.5 Banks generates meaningful LLM prompts using a simple template language
• CVE-2026-63720 HIGH 7.5 datamodel-code-generator prior to version 0.70.0 contains a code injection vulnerability that allows attackers
• CVE-2026-71284 HIGH 7.2 Fledge's backup-restore upload handler, upload_backup (python/fledge/services/core/api/backup_restore.py), tak
• CVE-2026-71491 HIGH 8.7 sqlparse is a non-validating SQL parser module for Python
• CVE-2026-19594 HIGH 8.1 Insufficient input sanitization in Snowflake Python API (`snowflake.core`) versions prior to 1.13.0 allowed co
• CVE-2026-54691 HIGH 8.2 datamodel-code-generator generates Python data models from schema definitions
• CVE-2026-9196 HIGH 8.1 UPGRADE IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute unintended code during
• CVE-2026-114605 HIGH 7.5 dnspython is a DNS toolkit for Python
• CVE-2026-114613 HIGH 7.5 MessagePack is the serializer implementation for Python msgpack.org
• CVE-2026-69247 HIGH 8.2 cryptography is a package designed to expose cryptographic primitives and recipes to Python developers
• CVE-2026-75858 HIGH 7.8 CodeWhale (packages codewhale / codewhale-tui) versions >= 0.8.41 and < 0.8.64 contain a remote code execution
• CVE-2026-12530 HIGH 7.3 Improper neutralization of argument delimiters in the install_packages() method in AWS Bedrock AgentCore Pytho
• CVE-2026-35043 HIGH 7.8 UPGRADE BentoML is a Python library for building online serving systems optimized for AI apps and model inference
• CVE-2026-115572 HIGH 7.1 pypdf is a free and open-source pure-python PDF library
• CVE-2026-115580 HIGH 7.1 pypdf is a free and open-source pure-python PDF library
• CVE-2026-115585 HIGH 7.1 pypdf is a free and open-source pure-python PDF library
• CVE-2026-54656 HIGH 7.8 UPGRADE datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI
• CVE-2026-66053 MEDIUM 5.9 UPGRADE Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bindings. This is
• CVE-2026-67435 MEDIUM 6.0 linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations
• CVE-2026-69243 MEDIUM 6.3 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python
• CVE-2026-69244 HIGH 7.1 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python
• CVE-2026-73325 HIGH 7.8 Fujitsu Research's OneCompression library before 1.2.1 contains an unsafe deserialization vulnerability that a
• CVE-2026-112394 MEDIUM 6.3 Pillow is a Python imaging library
• CVE-2026-114501 MEDIUM 6.3 Pillow is a Python imaging library
• CVE-2026-115845 MEDIUM 6.4 An incomplete list of disallowed inputs in the Python code validator of the run_script tool in AWS MCP Server
• CVE-2026-66138 HIGH 7.2 In OpenStack Ironic Python Agent through 11.6.0, a project-scoped user with the manager role can achieve arbit
• CVE-2026-96778 HIGH 7.7 Pillow is a Python imaging library
• CVE-2026-114603 MEDIUM 5.3 OpenTelemetry Python provides the Python API and SDK for OpenTelemetry
• CVE-2026-114616 HIGH 7.4 Authlib is a Python library which builds OAuth and OpenID Connect servers
• CVE-2026-111063 MEDIUM 6.3 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python
• CVE-2026-115557 CRITICAL 9.4 Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even
• CVE-2026-69248 MEDIUM 6.9 cryptography is a package designed to expose cryptographic primitives and recipes to Python developers
• CVE-2026-47764 HIGH 8.4 pdm is a Python package and dependency manager supporting the latest PEP standards
• CVE-2026-61632 MEDIUM 5.3 PyMdown Extensions is a set of extensions for the Python-Markdown markdown project
• CVE-2026-65908 HIGH 8.6 UPGRADE In JetBrains PyCharm before 2026.1.4, 2026.2 arbitrary code execution via malicious Python executable was poss
• CVE-2026-71554 MEDIUM 5.3 h2 is a pure-Python implementation of a HTTP/2 protocol stack
• CVE-2026-73248 HIGH 8.5 calibre is an e-book manager
• CVE-2026-113726 HIGH 7.8 virtualenv is a tool for creating isolated virtual python environments
• CVE-2026-113776 HIGH 7.8 virtualenv is a tool for creating isolated virtual python environments
• CVE-2026-113792 MEDIUM 6.0 pypdf is a free and open-source pure-python PDF library
• CVE-2026-113793 MEDIUM 6.0 pypdf is a free and open-source pure-python PDF library
• CVE-2026-113794 MEDIUM 6.0 pypdf is a free and open-source pure-python PDF library
• CVE-2026-113795 MEDIUM 6.0 pypdf is a free and open-source pure-python PDF library
• CVE-2026-114145 HIGH 7.5 GitPython is a python library used to interact with Git repositories
• CVE-2026-114615 HIGH 7.4 Authlib is a Python library which builds OAuth and OpenID Connect servers
• CVE-2026-47781 HIGH 8.4 PDM is a Python package and dependency manager
• CVE-2026-8470 HIGH 7.4 UPGRADE IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 us
• CVE-2026-96637 HIGH 7.1 Pillow is a Python imaging library
• CVE-2026-96642 HIGH 7.1 Pillow is a Python imaging library
• CVE-2026-96643 HIGH 7.1 Pillow is a Python imaging library
• CVE-2026-96644 HIGH 7.1 Pillow is a Python imaging library
• CVE-2026-112940 HIGH 7.1 UPGRADE filelock is a platform-independent file lock for Python
• CVE-2026-113732 HIGH 7.8 virtualenv is a tool for creating isolated virtual python environments
• CVE-2026-115877 MEDIUM 5.4 Twisted is an event-based framework for internet applications, supporting Python 3.6+
• CVE-2026-54621 HIGH 7.8 datamodel-code-generator generates Python data models from schema definitions
• CVE-2026-54654 HIGH 7.8 datamodel-code-generator generates Python data models from schema definitions
• CVE-2026-54655 HIGH 7.8 datamodel-code-generator generates Python data models from schema definitions
• CVE-2026-113722 HIGH 7.8 virtualenv is a tool for creating isolated virtual python environments
• CVE-2026-114609 MEDIUM 5.8 fpdf2 is a PDF creation library for Python
• CVE-2026-114620 MEDIUM 5.4 Authlib is a Python library which builds OAuth and OpenID Connect servers
• CVE-2026-115774 MEDIUM 4.9 Twisted is an event-based framework for internet applications, supporting Python 3.6+
• CVE-2026-54552 HIGH 7.9 sh provides Python process launching
• CVE-2026-113725 HIGH 7.8 virtualenv is a tool for creating isolated virtual python environments
• CVE-2026-114510 HIGH 7.1 Flexible GraphRAG is a Python framework for building graph and retrieval-augmented generation applications acr
• CVE-2026-114610 MEDIUM 6.5 fpdf2 is a PDF creation library for Python
• CVE-2026-96636 MEDIUM 6.5 Pillow is a Python imaging library
• CVE-2026-96638 MEDIUM 6.5 Pillow is a Python imaging library
• CVE-2026-96641 MEDIUM 6.5 Pillow is a Python imaging library
• CVE-2026-112934 MEDIUM 6.1 UPGRADE filelock is a platform-independent file lock for Python
• CVE-2026-113789 MEDIUM 6.0 pypdf is a free and open-source pure-python PDF library
• CVE-2026-113790 MEDIUM 6.0 pypdf is a free and open-source pure-python PDF library
• CVE-2026-113791 MEDIUM 6.0 pypdf is a free and open-source pure-python PDF library
• CVE-2026-114618 MEDIUM 6.8 Authlib is a Python library which builds OAuth and OpenID Connect servers
• CVE-2026-115586 HIGH 7.1 virtualenv is a tool for creating isolated virtual python environments
• CVE-2026-113718 HIGH 7.1 virtualenv is a tool for creating isolated virtual python environments
• CVE-2026-113723 HIGH 7.1 virtualenv is a tool for creating isolated virtual python environments
• CVE-2026-47763 MEDIUM 6.8 pdm is a Python package and dependency manager supporting the latest PEP standards
• CVE-2026-67433 MEDIUM 5.8 Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related monitoring s
• CVE-2026-71283 MEDIUM 4.9 Fledge's backup-restore upload handler, upload_backup (python/fledge/services/core/api/backup_restore.py), cal
• CVE-2025-59042 HIGH 7.0 PyInstaller bundles a Python application and all its dependencies into a single package
• CVE-2026-55403 LOW 3.7 datamodel-code-generator generates Python data models from schema definitions
• CVE-2026-71477 MEDIUM 6.7 mise manages dev tools like node, python, cmake, and terraform
• CVE-2025-14714 MEDIUM 6.5 UPGRADE An Authentication Bypass vulnerability existed where the application bundled an interpreter (Python) that inhe
• CVE-2026-112909 MEDIUM 6.1 filelock is a platform-independent file lock for Python
• CVE-2026-12372 LOW 3.7 DOWNGRADE A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop
• CVE-2026-59894 MEDIUM 6.2 sqlparse is a non-validating SQL parser module for Python
• CVE-2026-114114 MEDIUM 5.3 Vyper 0.1.0b1 before 0.1.0b12, 0.1.0b14, and 0.4.1 through 0.5.0b1 mix character-based line offsets with Pytho
• CVE-2026-114116 MEDIUM 5.3 Vyper 0.1.0b1 before 0.1.0b17 and 0.4.1 through 0.5.0b1 builds its source-line table with str.splitlines(), wh
• CVE-2026-54422 MEDIUM 5.5 In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic-pytho
• CVE-2026-114608 MEDIUM 5.4 Pylint is a static code analyser for Python
• CVE-2026-114617 MEDIUM 4.2 Authlib is a Python library which builds OAuth and OpenID Connect servers
• CVE-2026-114619 MEDIUM 4.6 Authlib is a Python library which builds OAuth and OpenID Connect servers
• CVE-2026-113716 MEDIUM 4.5 virtualenv is a tool for creating isolated virtual python environments
• CVE-2026-113719 MEDIUM 4.5 virtualenv is a tool for creating isolated virtual python environments
• CVE-2026-113720 MEDIUM 4.4 virtualenv is a tool for creating isolated virtual python environments
• CVE-2026-113721 MEDIUM 4.5 virtualenv is a tool for creating isolated virtual python environments
• CVE-2026-113724 MEDIUM 4.5 virtualenv is a tool for creating isolated virtual python environments

FAQ

How do I fix Python vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is Python being exploited right now?

None of the tracked Python CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which Python CVE should I patch first?

CVE-2026-73034 currently ranks highest (69/100): DB-GPT v0.8.1 contains an unauthenticated path traversal vulnerability that allows remote attackers to write a.

← Back to latest CVEs