CVE-20XX-?
agent?

Python CVEs.

Published CVEs affecting Python, ranked by exploit odds.

1 CVEs · updated 2026-11-06 12:26 UTC

Reset all
  1. CVE-2026-3087

    If `shutil.unpack_archive()` is given a ZIP archive with an absolute Windows path containing a drive (`C:\\...`) then the archive will be extracted outside the target directory which is different than other operating systems. Only Windows is affected by this vulnerability.

    Disclosure OS & kernel Python

    6.0 MEDIUM 0.6% exploit odds Fix listed

All CVEs affecting Python that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.