Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,220All CVEsplus 18,875 rejected
- 803Last 24 hours3,105 in the last 7 days
- 17,402Last 30 days1,564 of them critical
- 1,767Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 3 | 9 | 29 | 7 | 1 | 49 | 80 |
| 2025 | 1 | 4 | 7 | 4 | 0 | 16 | 31 |
| 2024 | 0 | 8 | 6 | 0 | 0 | 14 | 15 |
| 2023 | 0 | 0 | 1 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-116566 | socket.getaddrinfo() accepts embedded null bytes in host and portPython Software Foundation · CPython | Medium5.3 |
| CVE-2026-103995 | Lenient parsing of integers for response body and chunk framingPython Software Foundation · CPython | Low2.0 |
| CVE-2026-115557 | Distrust compromised intermediate certificates in ssl modulePython Software Foundation · CPython | Critical9.4 |
| CVE-2026-114583 | tar filter allows writing outside destination via empty-named symlinkPython Software Foundation · CPython | Medium6.9 |
| CVE-2026-19553 | SSLContext.wrap_bio() missing validation of server_hostname parameterPython Software Foundation · CPython | High7.6 |
| CVE-2026-19445 | Use-after-free of a server-side SSLContext when sni_callback switches contextsPython Software Foundation · CPython | Critical9.2 |
| CVE-2026-12345 | Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directoryPython Software Foundation · CPython | Medium5.9 |
| CVE-2026-82049 | tarfile extraction filters allow file modification and content disclosure via hard link to symlinkPython Software Foundation · CPython | High8.4 |
| CVE-2026-87910 | tarfile hardlink fallback ignores custom extraction filter rejection via NonePython Software Foundation · CPython | Medium5.7 |
| CVE-2026-15310 | zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limitsPython Software Foundation · CPython | Low2.1 |
| CVE-2026-19672 | tarfile extraction filter bypass allows creation of directories outside the destinationPython Software Foundation · CPython | Medium6.3 |
| CVE-2026-15806 | `HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matchingPython Software Foundation · CPython | Medium6.0 |
| CVE-2026-17084 | stringprep.map_table_b2() deviates from RFC 3454 Table B.2Python Software Foundation · CPython | Medium6.0 |
| CVE-2026-18503 | Super-linear CPU usage for unbounded input to csv.Sniffer.sniff()Python Software Foundation · CPython | Low2.4 |
| CVE-2026-6879 | Quadratic Behavior in xml.etree.ElementPath Index PredicatesPython Software Foundation · CPython | Low2.0 |
| CVE-2026-15308 | Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarationsPython Software Foundation · CPython | High8.7 |
| CVE-2026-4360 | Tarfile.extract() doesn't fully respect filter parameterPython Software Foundation · CPython | Low2.0 |
| CVE-2026-11972 | tarfile opened in streaming mode mishandles EOFPython Software Foundation · CPython | High8.2 |
| CVE-2026-0864 | Configuration Injection via Carriage Return (\r) in write() methodPython Software Foundation · CPython | Medium4.1 |
| CVE-2026-11940 | tarfile extraction filter bypass allows escaping the destination directoryPython Software Foundation · CPython | High7.8 |
| CVE-2026-12003 | CPython >3.11 Insecure Input Validation resulting in privilege escalationPython Software Foundation · CPython | Medium5.3 |
| CVE-2026-9669 | bz2.BZ2Decompressor reuse after error can cause a stack buffer overflowPython Software Foundation · CPython | High8.2 |
| CVE-2026-7774 | tarfile.data_filter path traversal bypass allows writing outside the extraction directoryPython Software Foundation · CPython | Medium6.9 |
| CVE-2026-3276 | Potential DoS via quadratic complexity in unicodedata.normalize()Python Software Foundation · CPython | Medium6.3 |
| CVE-2026-8328 | FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host addressPython Software Foundation · CPython | Medium5.9 |
| CVE-2026-7210 | The expat and elementtree parsers use insufficient entropy for XML hash-flooding protectionPython Software Foundation · CPython | Medium6.3 |
| CVE-2026-3087 | shutil.unpack_archive() doesn't check for Windows absolute paths in ZIPsPython Software Foundation · CPython | Medium6.0 |
| CVE-2026-6019 | BaseCookie.js_output() does not neutralize embedded charactersPython Software Foundation · CPython | Low2.1 |
| CVE-2026-3298 | Out-of-bounds write in Windows asyncio.ProacterEventLoop.sock_recvfrom_into() when using nbytesPython Software Foundation · CPython | High8.8 |
| CVE-2026-5713 | Out-of-bounds read/write during remote profiling and asyncio process introspection when connecting to malicious targetPython Software Foundation · CPython | Medium5.3 |
| CVE-2026-4786 | Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open()Python Software Foundation · CPython | High7.0 |
| CVE-2026-6100 | Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressurePython Software Foundation · CPython | Critical9.1 |
| CVE-2026-3446 | Base64 decoding stops at first padded quad by defaultPython Software Foundation · CPython | Medium6.0 |
| CVE-2026-1502 | HTTP client proxy tunnel headers not validated for CR/LFPython Software Foundation · CPython | Medium5.7 |
| CVE-2026-5271 | Possible to hijack modules in current working directoryPython Software Foundation · pymanager | Medium5.6 |
| CVE-2026-4519 | webbrowser.open() allows leading dashes in URLsPython Software Foundation · CPython | High7.0 |
| CVE-2026-3479 | pkgutil.get_data() does not enforce documented restrictionsPython Software Foundation · CPython | None0.0 |
| CVE-2026-4224 | Stack overflow parsing XML with deeply nested DTD content modelsPython Software Foundation · CPython | Medium6.0 |
| CVE-2026-3644 | Incomplete control character validation in http.cookiesPython Software Foundation · CPython | Medium6.0 |
| CVE-2025-13462 | tarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handlingPython Software Foundation · CPython | Low2.0 |
| CVE-2026-2297 | SourcelessFileLoader does not use io.open_code()Python Software Foundation · CPython | Medium5.7 |
| CVE-2026-1299 | email BytesGenerator header injection due to unquoted newlinesPython Software Foundation · CPython | Medium6.0 |
| CVE-2025-12781 | base64.b64decode() always accepts "+/" characters, despite setting altcharsPython Software Foundation · CPython | Medium6.3 |
| CVE-2026-0672 | Header injection in http.cookies.MorselPython Software Foundation · CPython | Medium6.0 |
| CVE-2025-15367 | POP3 command injection in user-controlled commandsPython Software Foundation · CPython | Medium5.9 |
| CVE-2025-15366 | IMAP command injection in user-controlled commandsPython Software Foundation · CPython | Medium5.9 |
| CVE-2025-15282 | Header injection via newlines in data URL mediatypePython Software Foundation · CPython | Medium6.0 |
| CVE-2026-0865 | wsgiref.headers.Headers allows header newline injectionPython Software Foundation · CPython | Medium5.9 |
| CVE-2025-11468 | Folding email comments of unfoldable characters doesn't preserve parenthesisPython Software Foundation · CPython | Medium5.7 |
| CVE-2025-12084 | Quadratic complexity in node ID cache clearingPython Software Foundation · CPython | Medium6.3 |