en
The Python Software Foundation is a nonprofit membership organization and public charity focused on open-source technology related to Python. Its mission is to promote, protect, and advance Python while supporting the core distribution, intellectual property, infrastructure, and a diverse international developer community.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
As of 10/23/2026, Python Software Foundation recorded 12 security vulnerabilities in the last 90 days across 1 products, including 3 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, CPython had the most security vulnerabilities in the Python Software Foundation ecosystem, with 12 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CVE-2026-114583tar filter allows writing outside destination via empty-named symlinkCVE-2026-19553SSLContext.wrap_bio() missing validation of server_hostname parameterCVE-2026-19445Use-after-free of a server-side SSLContext when sni_callback switches contextsCVE-2026-12345Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directoryCVE-2026-82049tarfile extraction filters allow file modification and content disclosure via hard link to symlink77 Results | Page 1 of 8
| SeverityHigh |
| SeverityCritical |
| SeverityMedium |
| SeverityHigh |
| SeverityMedium |
| SeverityLow |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |