Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/jython@2.7.2%2Brepack1-3?distro=trixie
purl pkg:deb/debian/jython@2.7.2%2Brepack1-3?distro=trixie
Next non-vulnerable version 2.7.2+repack1-5
Latest non-vulnerable version 2.7.2+repack1-5
Risk 2.8
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-v84j-ugn9-w3c8
Aliases:
CVE-2019-16935
python: XSS vulnerability in the documentation XML-RPC server in server_title field
2.7.2+repack1-5
Affected by 0 other vulnerabilities.
2.7.3+repack1-1
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (9)
Vulnerability Summary Aliases
VCID-1hw3-vhwb-nkcd Multiple vulberabilities have been discovered in Python and PyPy, the worst of which can lead to privilege escalation. CVE-2024-12718
VCID-4afh-28ss-mudf Multiple vulberabilities have been discovered in Python and PyPy, the worst of which can lead to privilege escalation. CVE-2025-4138
VCID-757r-fs6p-qqdd Multiple vulberabilities have been discovered in Python and PyPy, the worst of which can lead to privilege escalation. CVE-2025-4517
VCID-8zdt-4q7m-t7ht Multiple vulberabilities have been discovered in Python and PyPy, the worst of which can lead to privilege escalation. CVE-2025-4330
VCID-bn83-d2qp-9bfy cpython: Missing character filtering in Python CVE-2025-11468
VCID-eer2-83dz-ryea Jython Improper Access Restrictions vulnerability Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which allows local users to bypass intended access restrictions via unspecified vectors. CVE-2013-2027
GHSA-9347-9w64-q5wp
VCID-q6g1-cjz3-77e4 cpython: Tarfile extracts filtered members when errorlevel=0 CVE-2025-4435
VCID-vkq3-8asa-77aj Jython before 2.7.1rc1 allows attackers to execute arbitrary code via a crafted serialized PyFunction object. CVE-2016-4000
GHSA-6r7r-jj8h-pq6v
VCID-zxzn-25zt-ukct Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open()" API could have commands injected into the underlying shell. See CVE-2026-4519 for details. CVE-2026-4786

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-17T22:44:10.238741+00:00 Debian Importer Fixing VCID-zxzn-25zt-ukct https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T12:59:28.398815+00:00 Debian Importer Fixing VCID-8zdt-4q7m-t7ht https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T12:26:58.914550+00:00 Debian Importer Fixing VCID-q6g1-cjz3-77e4 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T11:31:38.885460+00:00 Debian Importer Fixing VCID-eer2-83dz-ryea https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T11:27:14.822539+00:00 Debian Importer Fixing VCID-1hw3-vhwb-nkcd https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T11:23:24.531235+00:00 Debian Importer Fixing VCID-vkq3-8asa-77aj https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T11:07:55.199698+00:00 Debian Importer Fixing VCID-757r-fs6p-qqdd https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:23:54.099643+00:00 Debian Importer Fixing VCID-bn83-d2qp-9bfy https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:21:16.281736+00:00 Debian Importer Fixing VCID-4afh-28ss-mudf https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T08:55:34.509817+00:00 Debian Importer Fixing VCID-8zdt-4q7m-t7ht https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T08:31:18.899029+00:00 Debian Importer Fixing VCID-q6g1-cjz3-77e4 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:51:24.943087+00:00 Debian Importer Fixing VCID-eer2-83dz-ryea https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:48:14.511082+00:00 Debian Importer Fixing VCID-1hw3-vhwb-nkcd https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:45:26.081037+00:00 Debian Importer Fixing VCID-vkq3-8asa-77aj https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:33:49.438894+00:00 Debian Importer Fixing VCID-757r-fs6p-qqdd https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:00:31.025939+00:00 Debian Importer Fixing VCID-bn83-d2qp-9bfy https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:14:55.091625+00:00 Debian Importer Fixing VCID-4afh-28ss-mudf https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:27:58.129906+00:00 Debian Importer Fixing VCID-757r-fs6p-qqdd https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:27:58.102416+00:00 Debian Importer Fixing VCID-q6g1-cjz3-77e4 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:27:58.074984+00:00 Debian Importer Fixing VCID-8zdt-4q7m-t7ht https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:27:58.047404+00:00 Debian Importer Fixing VCID-4afh-28ss-mudf https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:27:57.989530+00:00 Debian Importer Fixing VCID-bn83-d2qp-9bfy https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:27:57.962099+00:00 Debian Importer Fixing VCID-1hw3-vhwb-nkcd https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:27:57.917433+00:00 Debian Importer Affected by VCID-v84j-ugn9-w3c8 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:27:57.891681+00:00 Debian Importer Fixing VCID-vkq3-8asa-77aj https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:27:57.858293+00:00 Debian Importer Fixing VCID-eer2-83dz-ryea https://security-tracker.debian.org/tracker/data/json 38.1.0