rootio-python3.13 vulnerabilities (Root)

11 vulnerabilities.

• rootio-python3.13 Root SSLContext.wrap_bio() missing validation of server_hostname parameter CVE-2026-19553 Public exploitFix available 7.6 HighSeptember 30, 2026
• rootio-python3.13 Root Use-after-free of a server-side SSLContext when sni_callback switches contexts CVE-2026-19445 Public exploitFix available 9.2 CriticalSeptember 30, 2026
• rootio-python3.13 Root tarfile extraction filters allow file modification and content disclosure via hard link to symlink CVE-2026-82049 Fix available 8.4 HighSeptember 9, 2026
• rootio-python3.13 Root Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations CVE-2026-15308 Fix available 8.7 HighJuly 9, 2026
• rootio-python3.13 Root tarfile opened in streaming mode mishandles EOF CVE-2026-11972 Fix available 8.2 HighJune 23, 2026
• rootio-python3.13 Root tarfile extraction filter bypass allows escaping the destination directory CVE-2026-11940 Fix available 7.8 HighJune 23, 2026
• rootio-python3.13 Root The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection CVE-2026-7210 Fix available 6.3 MediumMay 11, 2026
• rootio-python3.13 Root pkgutil.get_data() does not enforce documented restrictions CVE-2026-3479 Fix availableDisputed 0.0 NoneMarch 18, 2026
• rootio-python3.13 Root base64.b64decode() always accepts "+/" characters, despite setting altchars CVE-2025-12781 Fix available 6.3 MediumJanuary 21, 2026
• rootio-python3.13 Root POP3 command injection in user-controlled commands CVE-2025-15367 Fix available 5.9 MediumJanuary 20, 2026
• rootio-python3.13 Root IMAP command injection in user-controlled commands CVE-2025-15366 Fix available 5.9 MediumJanuary 20, 2026