CVE-20XX-?

Python CVEs.

Published CVEs affecting Python, ranked by exploit odds.

1 CVEs · updated 2026-11-06 06:22 UTC

Reset all
  1. CVE-2025-13836

    When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length. This allows a malicious server to cause the client to read large amounts of data into memory, potentially causing OOM or other DoS.

    Denial of service Server Python

    6.3 MEDIUM 2% exploit odds Fix listed

All CVEs affecting Python that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.