Search for packages
| purl | pkg:deb/debian/python3.14@3.14.4-1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-11ed-tk56-8khn | python: Python: Command-line option injection in webbrowser.open() via crafted URLs |
CVE-2026-4519
|
| VCID-1pr1-jkqa-43g6 | cpython: CPython: Logging Bypass in Legacy .pyc File Handling |
CVE-2026-2297
|
| VCID-9vcx-2fts-gkfw | cpython: Stack overflow parsing XML with deeply nested DTD content models |
CVE-2026-4224
|
| VCID-gqzt-rh1w-jkfu | cpython: Incomplete control character validation in http.cookies |
CVE-2026-3644
|
| VCID-n4au-q9bs-kucb | The "tarfile" module would still apply normalization of AREGTYPE (\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other implementations. |
CVE-2025-13462
|
| VCID-q653-8f64-gkbe |
CVE-2026-3446
|