python3.13 vulnerabilities (Root)
11 vulnerabilities.
-
python3.13Root SSLContext.wrap_bio() missing validation of server_hostname parameter 7.6 High -
python3.13Root Use-after-free of a server-side SSLContext when sni_callback switches contexts 9.2 Critical -
python3.13Root tarfile extraction filters allow file modification and content disclosure via hard link to symlink 8.4 High -
python3.13Root Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations 8.7 High -
python3.13Root tarfile opened in streaming mode mishandles EOF 8.2 High -
python3.13Root tarfile extraction filter bypass allows escaping the destination directory 7.8 High -
python3.13Root The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection 6.3 Medium -
python3.13Root pkgutil.get_data() does not enforce documented restrictions 0.0 None -
python3.13Root base64.b64decode() always accepts "+/" characters, despite setting altchars 6.3 Medium -
python3.13Root POP3 command injection in user-controlled commands 5.9 Medium -
python3.13Root IMAP command injection in user-controlled commands 5.9 Medium