P
Vendor security profile
python
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs78
Critical9
CISA KEV0
Public exploit32
Patch rate%79
Avg. CVSS6.9
12-month vulnerability rate
0
4
2
1
5
3
6
2
15
1
0
0
CVE KEV
CVE severity distribution
78toplam CVE
Critical9 (12%)
High35 (45%)
Medium31 (40%)
Low3 (4%)
Patch and exploitation view
%79
Verified patch
%0
CISA KEV
%41
Public exploit
61Patch available
1Partial
0Workaround
0Vendor: no patch
16Unknown
Latest vulnerabilities
7.6
CVE-2026-19553
SSLContext.wrap_bio() missing validation of server_hostname parameter
PS
Patch verifiedEPSS %0
9.2
CVE-2026-19445
Use-after-free of a server-side SSLContext when sni_callback switches contexts
PS
Patch verifiedEPSS %0
5.9
CVE-2026-12345
Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory
PS
Patch verifiedEPSS %0
8.7
CVE-2026-100689
GitPython before 3.1.62 Path Traversal via gitmodules path
G
Patch status unknownEPSS %0
4.2
CVE-2026-57179
social-auth-core has a Session Fixation issue
P
Patch status unknownEPSS %0
7.4
CVE-2026-57178
social-auth-core: VK App backend accepts unsigned callback data when auth_key is missing
P
Patch status unknownEPSS %0
4.3
CVE-2026-57177
social-auth-core has Login CSRF via Missing State Parameter in LoginRadius Backend
P
Patch status unknownEPSS %0
6.8
CVE-2026-57176
social-auth-core Vulnerable to Account Takeover via Identity Binding Flaw in Vend Backend
P
Patch status unknownEPSS %0
6.4
CVE-2026-57175
social-auth-core has an Improper Authentication issue
P
Patch status unknownEPSS %0
6.3
CVE-2026-59980
hpack: Unbounded variable integer decoding can cause run-away computation on malformed input
P
Patch status unknownEPSS %0