Software Detail
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
Number of items displayed
Python Number Of NVD 124 CRITICAL 17 HIGH 51 MEDIUM 51 LOW 5
URL https://www.python.org/
Explanation A universally usable scripting language that does not require compilation and is executed by an interpreter.
It can be programmed in a variety of formats such as object-oriented, imperative, procedural, and functional.
It can be programmed in various formats such as object-oriented, imperative, procedural, and functional, and can be easily used as it is initially installed on most Unix and Linux distributions.
The language specification is simple and designed so that anyone can write the same kind of code, and it is the language of choice for many projects and companies.

It is widely used in the following applications due to its rich library.

AI (Deep Learning, Machine Learning, Deep Learning)
Web applications
Scripts for server administration

It is my personal favorite language.

Basically, it is supported for 5 years after its release.
Tag
  • Python Software Foundation License
  • オープンソース
Add Information URL
No Type Name URL
1 https://www.python.org/downloads/
2 https://devguide.python.org/devcycle/#end-of-life-branches
3 https://devguide.python.org/
4 https://github.com/python
List Of Product  [ Click to show release history and vulnerability information ]
No Name Latest Version Release date Initial release Normal Support Security Support
Service Pack Support		 Extended
for a fee		 Critical High Medium Low
11 Python3.12 3.12.12 Oct. 9, 2025 Oct. 2, 2023 Oct. 31, 2028 0 2 2 0
12 Python3.11 3.11.14 Oct. 9, 2025 Oct. 24, 2022 Oct. 31, 2027 0 9 3 0
13 Python3.10 3.10.19 Oct. 9, 2025 Oct. 4, 2021 Oct. 31, 2026 2 12 7 0
14 Python3.9 3.9.25 Oct. 31, 2025 Oct. 5, 2020 Oct. 5, 2025 6 15 11 0
15 Python3.8 3.8.20 Sept. 6, 2024 Oct. 14, 2019 Oct. 14, 2024 8 18 15 0
16 Python3.7 3.7.17 June 6, 2023 June 27, 2018 June 27, 2023 9 25 20 0
17 Python3.6 3.6.15 Sept. 3, 2021 Dec. 23, 2016 Dec. 23, 2021 9 24 20 0
18 Python3.5 3.5.10 Sept. 5, 2020 Sept. 13, 2015 Sept. 13, 2020 9 25 19 0
19 Python3.4 3.4.10 March 18, 2019 March 17, 2014 March 18, 2019 8 26 20 1
20 Python3.3 3.3.7 Sept. 19, 2017 Sept. 29, 2012 Sept. 29, 2017 7 22 24 1
21 Python3.2 3.2.6 Oct. 12, 2014 Feb. 20, 2011 Feb. 20, 2016 5 19 27 2
22 Python2.7 2.7.18 April 20, 2020 July 3, 2010 Jan. 1, 2020 10 25 31 3
23 Python3.1 3.1.5 Aug. 17, 2009 June 26, 2009 April 9, 2012 4 19 33 1
24 Python3.0 3.0.1 Feb. 13, 2009 Dec. 19, 2008 June 27, 2009 4 18 24 1
25 Python2.6 2.6.9 Jan. 29, 2013 4 15 26 3
26 Python2.5 2.5.6 Jan. 1, 2000 4 25 29 2
27 Python2.4 2.4.6 Jan. 1, 2000 4 24 26 3
28 Python2.3 2.3.7 Jan. 1, 2000 4 23 25 3
29 Python2.2 2.2.3 Jan. 1, 2000 4 24 26 3
30 Python2.1 2.1.3 Jan. 1, 2000 4 22 26 3
31 Python2.0 2.0.1 Jan. 1, 2000 4 22 26 3
32 Python1.6 1.6.1 Jan. 1, 2000 3 22 21 3
33 Python1.5 1.5.2 Jan. 1, 2000 3 22 21 3
34 Python1.4 1.4 Jan. 1, 2000 3 21 21 3
35 Python1.3 1.3 Jan. 1, 2000 3 21 21 3
36 Python1.2 1.2 Jan. 1, 2000 3 21 21 3
37 Python1.1 1.1.1 Jan. 1, 2000 3 21 21 3
38 Python1.0 1.0.2 Jan. 1, 2000 3 21 21 3
39 Python0.9 0.9.9 Jan. 1, 2000 3 21 21 3
NVD Vulnerability Information
  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW
No CVSS3
CVSS2		 Level
Attach Vector		 Title CWE CVE cpe23Uri or higher or less more than less than Update date
Published date		 Show Affected Exploit
PoC
Search
11 7.5
- 		HIGH
Network 		The legacy email.utils.parseaddr function in Python through 3.11.4 allows attackers to trigger "RecursionError: maximum recursion depth exceeded while calling a Python object" via a crafted argument.… CWE-674
 Uncontrolled Recursion 		CVE-2023-36632 cpe:2.3:a:python:python:*:* 3.11.4 2024-11-21 17:10
2023-06-26 		Show GitHub Exploit DB Packet Storm
12 5.5
- 		MEDIUM
Local 		CPython v3.12.0 alpha 7 was discovered to contain a heap use-after-free via the function ascii_decode at /Objects/unicodeobject.c. CWE-416
 Use After Free 		CVE-2023-33595 cpe:2.3:a:python:python:3.12.0:alpha7 2024-11-21 17:05
2023-06-8 		Show GitHub Exploit DB Packet Storm
13 5.3
- 		MEDIUM
Network 		The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In … CWE-20
 Improper Input Validation  		CVE-2023-27043 cpe:2.3:a:python:python:*:* 3.0
 3.11
2.7.18

2024-11-21 16:52
2023-04-19 		Show GitHub Exploit DB Packet Storm
14 7.5
- 		HIGH
Network 		An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters. CWE-20
 Improper Input Validation  		CVE-2023-24329 cpe:2.3:a:python:python:*:* 3.10.0
3.9.0
3.8.0

3.11.0







3.10.12
3.9.17
3.8.17
3.7.17
3.11.4 		2024-11-21 16:47
2023-02-18 		Show GitHub Exploit DB Packet Storm
15 7.5
- 		HIGH
Network 		An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA (RFC 3490) decoder, such that a crafted, unreasonably lo… CWE-407
 Inefficient Algorithmic Complexity 		CVE-2022-45061 cpe:2.3:a:python:python:3.11.0:rc2
cpe:2.3:a:python:python:3.11.0:rc1
cpe:2.3:a:python:python:3.11.0:beta5
cpe…
3.8.0
3.9.0
3.10.0 		3.7.15
3.8.15
3.9.15
3.10.8





2024-11-21 16:28
2022-11-9 		Show GitHub Exploit DB Packet Storm
16 7.8
- 		HIGH
Local 		Python 3.9.x before 3.9.16 and 3.10.x before 3.10.9 on Linux allows local privilege escalation in a non-default configuration. The Python multiprocessing library, when used with the forkserver start … NVD-CWE-noinfo
CVE-2022-42919 cpe:2.3:a:python:python:*:* 3.9.0
3.10.0
3.8.3
3.7.3

3.8.15
3.7.15


3.9.16
3.10.9

 2024-11-21 16:25
2022-11-7 		Show GitHub Exploit DB Packet Storm
17 9.8
- 		CRITICAL
Network 		The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic… CWE-190
 Integer Overflow or Wraparound 		CVE-2022-37454 cpe:2.3:a:python:python:*:* 3.8.0
3.9.0
3.10.0
3.6.0





3.8.16
3.9.16
3.10.9
3.7.16 		2024-11-21 16:15
2022-10-21 		Show GitHub Exploit DB Packet Storm
18 7.5
- 		HIGH
Network 		A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"), a system could take 50ms to parse an int string with 100,000 digits and 5s for… CWE-704
 Incorrect Type Conversion or Cast 		CVE-2020-10735 cpe:2.3:a:python:python:3.11.0:rc1
cpe:2.3:a:python:python:3.11.0:beta5
cpe:2.3:a:python:python:3.11.0:beta4
c… 		3.8.0
3.10.0
3.9.0
3.7.0





3.8.14
3.10.7
3.9.14
3.7.14 		2024-11-21 13:55
2022-09-9 		Show GitHub Exploit DB Packet Storm
19 5.3
- 		MEDIUM
Network 		A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The issue is how the FTP client trusts the host from the PASV response by default. … CWE-252
 Unchecked Return Value 		CVE-2021-4189 cpe:2.3:a:python:python:3.10.0:-
cpe:2.3:a:python:python:*:* 		3.9.0
3.8.0
3.7.0
3.6.0





3.9.3
3.8.9
3.7.11
3.6.14 		2024-11-21 15:37
2022-08-25 		Show GitHub Exploit DB Packet Storm
20 7.4
- 		HIGH
Network 		Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at the beginning of URI path which may leads to information disclosure. N… CWE-601
Open Redirect 		CVE-2021-28861 cpe:2.3:a:python:python:3.11.0:beta3
cpe:2.3:a:python:python:3.11.0:beta2
cpe:2.3:a:python:python:3.11.0:beta1 		3.8.0
3.9.0
3.10.0
3.0.0





3.8.14
3.9.14
3.10.6
3.7.14 		2024-11-21 15:00
2022-08-23 		Show GitHub Exploit DB Packet Storm