p PatchFirst

PatchFirst · Aktuelle Sicherheitslücken

Schwachstellen im Stack Python · Seite 14

In den letzten 30 Tagen veröffentlichte Sicherheitslücken für Python: 306. Davon im KEV-Katalog: 0.

RSS ↗ JSON ↗
Sicherheitslücken filtern
Python

Sicherheitslücken: 7029

  1. CVE-2026-103000

    Hoch · CVSS 8.7EPSS 0,35%Korrektur verfügbar

    pypdf: Possible large memory usage when retrieving alphabetical page labels

    pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF can provide unusually large alphabetical page-label values that cause pypdf/_page_labels.py to generate strings beyond a reasonable page-label length when an application retrieves document page labels, consuming excessive memory and potentially making the application unavailable. This issue is fixed in version 6.19.0.

    pypdf pypdf pypdf pypdf pypdf pypdf2 pypdf2 pypdf2 pypdf2 pypdf pypdf2 pypdfBetriebssysteme Python
    • Auf 6.19.0 aktualisieren
    • Auf 6.19.0-1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  2. CVE-2026-102999

    Hoch · CVSS 8.7EPSS 0,35%Korrektur verfügbar

    pypdf: Possible long runtimes with large amount of embedded files

    pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF containing many embedded files can cause the dictionary-based attachments API in pypdf/_doc_common.py to reparse the full attachment list for each content lookup, producing repeated work and long runtimes when an application accesses the embedded-file mapping. This issue is fixed in version 6.19.0.

    pypdf pypdf pypdf pypdf pypdf2 pypdf2 pypdf2 pypdf2 pypdf pypdf2 pypdf pypdfBetriebssysteme Python
    • Auf 6.19.0 aktualisieren
    • Auf 6.19.0-1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  3. CVE-2026-102998

    Hoch · CVSS 8.7EPSS 0,34%Korrektur verfügbar

    pypdf: Possible long runtimes when generating appearance streams

    pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF with form field values can cause pypdf/generic/_appearance_stream.py appearance-stream generation to repeat invariant selection-data work inside a loop when an application updates fields with flattening enabled, resulting in excessive runtimes and application unavailability. This issue is fixed in version 6.19.0.

    pypdf pypdf pypdf pypdf pypdf2 pypdf2 pypdf2 pypdf2 pypdf pypdf2 pypdf pypdfBetriebssysteme Python
    • Auf 6.19.0 aktualisieren
    • Auf 6.19.0-1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  4. CVE-2026-102997

    Hoch · CVSS 8.7EPSS 0,34%Korrektur verfügbar

    pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up)

    pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF containing a partially malformed /FlateDecode stream with padded data can force pypdf/filters.py to use inefficient byte-by-byte decompression while the earlier recovery counter fails to advance for bytes that successfully decode, causing long runtimes and application unavailability. This is a residual issue after the malformed FlateDecode recovery fix. This issue is fixed in version 6.18.1.

    pypdf pypdf pypdf pypdf pypdf2 pypdf pypdf2 pypdf2 pypdf2 pypdf2 pypdf pypdf2Betriebssysteme Python
    • Auf 6.18.1 aktualisieren
    • Auf 6.19.0-1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  5. CVE-2026-102996

    Hoch · CVSS 8.7EPSS 0,34%Korrektur verfügbar

    pypdf: Possible large memory usage when parsing font data

    pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF can provide a TrueType or Type1 simple font with an unusually large /Widths array, causing pypdf/_font.py Font._collect_tt_t1_character_widths to process entries beyond the 256 character codes meaningful for a simple font and consume excessive memory during operations such as text extraction. This issue is fixed in version 6.18.1.

    pypdf pypdf pypdf pypdf pypdf2 pypdf2 pypdf2 pypdf2 pypdf pypdf2 pypdf pypdfBetriebssysteme Python
    • Auf 6.18.1 aktualisieren
    • Auf 6.19.0-1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  6. CVE-2026-102995

    Hoch · CVSS 8.7EPSS 0,34%Korrektur verfügbar

    pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2)

    pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF can place unusually large source-code or destination-string tokens in a font /ToUnicode mapping, causing pypdf/_cmap.py parse_bfchar to decode and retain oversized values during operations such as text extraction and consume excessive memory. This is a second follow-up to earlier /ToUnicode resource-consumption fixes and is limited to the remaining token-length path. This issue is fixed in version 6.18.1.

    pypdf pypdf pypdf pypdf pypdf2 pypdf pypdf2 pypdf2 pypdf2 pypdf2 pypdf pypdf2Betriebssysteme Python
    • Auf 6.18.1 aktualisieren
    • Auf 6.19.0-1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  7. CVE-2026-102994

    Hoch · CVSS 8.7EPSS 0,34%Korrektur verfügbar

    pypdf: Possible long runtimes/large memory usage when parsing indirect objects

    pypdf is a free and open-source pure-python PDF library. Prior to 6.18.0, a crafted PDF containing indirect-object identifiers or generation-number tokens that continue for a long time without whitespace can cause pypdf/_reader.py and pypdf/generic/_base.py to scan excessive input through read_until_whitespace, resulting in long runtimes and application unavailability. This issue is fixed in version 6.18.0.

    pypdf pypdf pypdf pypdf pypdf2 pypdf pypdf2 pypdf2 pypdf2 pypdf2 pypdf pypdf2Betriebssysteme Python
    • Auf 6.18.0 aktualisieren
    • Auf 6.19.0-1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  8. CVE-2026-102993

    Hoch · CVSS 8.7EPSS 0,35%Korrektur verfügbar

    pypdf: Possible large memory usage when retrieving Roman page labels

    pypdf is a free and open-source pure-python PDF library. Prior to 6.17.0, a crafted PDF can provide unusually large Roman page-label values that cause pypdf/_page_labels.py to generate excessively large numeral strings when an application retrieves document page labels, consuming large amounts of memory and potentially making the application unavailable. This issue is fixed in version 6.17.0.

    pypdf pypdf pypdf pypdf pypdf pypdf2 pypdf2 pypdf2 pypdf2 pypdf pypdf2 pypdfBetriebssysteme Python
    • Auf 6.17.0 aktualisieren
    • Auf 6.19.0-1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  9. CVE-2026-102991

    Mittel · CVSS 6.5EPSS 0,36%Korrektur verfügbar

    Mako: Path traversal via drive-letter URI on Windows in TemplateLookup

    Mako is a template library written in Python. Prior to 1.4.2, on Windows, TemplateLookup.get_template() in mako/lookup.py resolves template URIs with posixpath, while Template.__init__() in mako/template.py validates them with os.path, which uses ntpath. A URI beginning with a drive designator causes ntpath to absorb the traversal segments before the leading dot-dot check, while posixpath resolution can escape the configured template directory. An application that passes attacker-controlled template names or include paths can disclose process-readable files on the same volume, and a targeted file containing Mako template syntax may also be pa

    mako mako mako mako mako mako mako mako makoBetriebssysteme Python
    • Auf 1.4.2 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  10. CVE-2026-103241

    Mittel · CVSS 6.9EPSS 0,71%Korrektur verfügbar

    vllm-project vLLM Gemma4UnifiedParser gemma4.rs denial of service

    A flaw has been found in vllm-project vLLM up to 0.26.0. This vulnerability affects unknown code of the file rust/src/parser/src/unified/gemma4.rs of the component Gemma4UnifiedParser. Executing a manipulation can lead to denial of service. The attack may be launched remotely. The exploit has been published and may be used. Upgrading to version 0.29.1rc0 is able to resolve this issue. This patch is called 3439bad37e68ba9755a46f4f6b44a4aeaf1f60a9. Upgrading the affected component is advised.

    vllm vllmPython
    • Auf 0.27.0 aktualisieren
    • Auf 0.29.1rc0 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  11. CVE-2026-19553

    Hoch · CVSS 7.6EPSS 0,55%Öffentlicher ExploitKorrektur verfügbar

    SSLContext.wrap_bio() missing validation of server_hostname parameter

    ssl.SSLContext.wrap_bio() didn't require the server_hostname argument to not be None if ssl.SSLContext.check_hostname was set. Due to a missing parameter check in SSLObject, if the server_hostname argument isn't supplied then hostname verification would be silently skipped. This defect could lead to programs where certificate hostname verification *appeared* to be succeeding with SSLContext.check_hostname = True and no ValueError being raised due to misconfiguration. If the program passes a server_hostname value that isn't an empty string or None to any of these APIs then certificate hostname verification proceeds as expected and the prog

    python pypy3 pypy3 pypy3 python3.11 python3.13 python3.13 python3.14 python3.15 python2.7 python3.4 python3.5Betriebssysteme Python
    • Auf 3.10.22 aktualisieren
    • Auf 3.11.17 aktualisieren
    • Auf 3.11.2-6+deb12u9 aktualisieren
    • Auf 3.12.15 aktualisieren
    • Auf 3.13.16 aktualisieren
    • Auf 3.14.8 aktualisieren
    • Auf 3.14.8-1 aktualisieren
    • Auf 3.15.0rc3 aktualisieren
    • Auf 3.15.0~rc3-1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  12. CVE-2026-19445

    Kritisch · CVSS 9.2EPSS 0,52%Öffentlicher ExploitKorrektur verfügbar

    Use-after-free of a server-side SSLContext when sni_callback switches contexts

    A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its sni_callback assigns a different context to SSLSocket.context (the documented way to select a certificate per server name) and nothing else keeps the original ssl.SSLContext alive. Typical cases are servers that create an SSLContext per connection or replace it while connections are open; servers that wrap their listening socket with it are not affected. Mitigation: keep a reference to every SSLContext that sets sni_callback for the lifetime of the server. TLS clients are not affected.

    python pypy3 pypy3 pypy3 python3.11 python3.13 python3.13 python3.14 python3.15 python2.7 python3.4 python3.5Betriebssysteme Python
    • Auf 3.10.22 aktualisieren
    • Auf 3.11.17 aktualisieren
    • Auf 3.11.2-6+deb12u9 aktualisieren
    • Auf 3.12.15 aktualisieren
    • Auf 3.13.16 aktualisieren
    • Auf 3.14.8 aktualisieren
    • Auf 3.14.8-1 aktualisieren
    • Auf 3.15.0rc3 aktualisieren
    • Auf 3.15.0~rc3-1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  13. CVE-2026-102938

    Mittel · CVSS 5.8EPSS 0,15%Korrektur verfügbar

    virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection

    virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.11, PyEnvCfg.write() writes prompt values verbatim to the line-oriented pyvenv.cfg format while PyEnvCfg._read_values() parses the file with str.splitlines() and accepts the last value for duplicate keys. An attacker who influences --prompt, VIRTUALENV_PROMPT, or configuration input can insert a recognized line boundary and additional keys, including home, causing consumers to use an attacker-selected base interpreter or corrupted environment metadata. The security impact requires prompt input from outside the operator's trust boundary; directly supplied pro

    virtualenv python-virtualenv python-virtualenv python-virtualenv virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenvBetriebssysteme Python
    • Auf 21.7.11 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  14. CVE-2026-102937

    Hoch · CVSS 7.3EPSS 0,14%Korrektur verfügbar

    virtualenv: Command injection via --prompt in activate.bat (batch activator)

    virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, BatchActivator.quote() returns prompt text unchanged before activate.bat inserts it into a cmd.exe set "VAR=value" statement. An attacker who influences --prompt, VIRTUALENV_PROMPT, or the corresponding configuration value can include a double quote that closes the assignment and leaves following cmd.exe operators as executable syntax. When a user activates the generated Windows environment, the injected commands run with that user's privileges. This issue is fixed in version 21.7.12.

    virtualenv python-virtualenv python-virtualenv python-virtualenv virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenvBetriebssysteme Python
    • Auf 21.7.12 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  15. CVE-2026-102930

    Hoch · CVSS 7.7EPSS 0,2%Korrektur verfügbar

    virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use

    virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, download_wheel() accepts pip and setuptools seed wheels fetched for periodic updates or the --download option without checking their bytes against an authoritative digest equivalent to the embedded wheels' BUNDLE_SHA256 verification. A compromised index, stale mirror, or intercepted TLS connection can substitute a different wheel under the requested distribution, version, and filename, after which virtualenv caches and seeds the attacker-controlled wheel into subsequently created environments. The verification applies to the default PyPI path and is inte

    virtualenv python-virtualenv python-virtualenv python-virtualenv virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenvBetriebssysteme Python
    • Auf 21.7.12 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  16. CVE-2026-102925

    Hoch · CVSS 7.8EPSS 0,16%Korrektur verfügbar

    virtualenv bash and fish activation scripts execute commands embedded in paths

    virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.13, the generated activate (bash and zsh) and activate.fish scripts place values already escaped by shlex.quote inside an additional quoted context. In the bash and zsh script, a crafted virtual environment path reaches __VIRTUAL_ENV__ when a relocated environment's recorded directory is absent; in the fish script, crafted Tcl or Tk library paths reach __TCL_LIBRARY__ or __TK_LIBRARY__. The surplus quotes can terminate the data-only quoted run and leave shell metacharacters parsed as commands when a user sources the activation script, allowing code execution

    virtualenv python-virtualenv python-virtualenv virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenvBetriebssysteme Python
    • Auf 21.7.13 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  17. CVE-2026-102904

    Mittel · CVSS 5.4EPSS 0,21%Korrektur verfügbar

    JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs

    JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.0.0 until 4.5.11 and 4.6.4, the PyPI Extension Manager uninstall request reaches ExtensionHandler.post, which validates extension names for installation but passes uninstall names to PyPIExtensionManager.uninstall and python -m pip uninstall without rejecting option-like values. The security impact requires that the PyPI Extension Manager is enabled, the account can call the extension API, and kernels and terminals are disabled or delegated to remote hosts; otherwise the user can already read files

    jupyterlab jupyterlab jupyterlab jupyterlab jupyterlab jupyterlab jupyterlab jupyterlabBetriebssysteme Python
    • Auf 4.5.11 aktualisieren
    • Auf 4.6.4 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  18. CVE-2026-102831

    Hoch · CVSS 8.1EPSS 0,19%Korrektur verfügbar

    JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboard

    JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.5.0 until 4.5.11 and 4.6.4, from Notebook 7.5.0 until 7.6.3, and from JupyterLite Core 0.7.0 until 0.8.4, the system clipboard cell-paste path accepts attacker-controlled cell JSON without clearing metadata.trusted. When useSystemClipboardForCells is active and pasteCodeCellsWithoutOutput is disabled, a pasted code cell can mark HTML output as trusted, bypass output sanitization, and execute script in the authenticated JupyterLab origin without executing the cell. Markdown and raw cells are not affe

    jupyterlab notebook jupyterlite-core jupyter-notebook jupyter-notebook jupyter-notebook jupyterlab jupyterlab notebook jupyterlite jupyterlite-core jupyterlabBetriebssysteme Python
    • Auf 0.8.4 aktualisieren
    • Auf 4.5.11 aktualisieren
    • Auf 4.6.4 aktualisieren
    • Auf 7.6.3 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  19. CVE-2026-102830

    Mittel · CVSS 6.8EPSS 0,26%Korrektur verfügbar

    JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json)

    JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 3.0.0 until 4.5.11 and 4.6.4, and in JupyterLite Core 0.8.3 and earlier, the Plural-Forms header in a selected third-party language pack can append JavaScript after a valid plural rule because prefix-only regular-expression validation accepts a matching prefix without requiring the entire header to match. JupyterLab passes the accepted expression to new Function, so loading the catalogue and translating a plural string executes the appended code in the authenticated JupyterLab origin. Where Jupyter Se

    jupyterlab jupyterlite-core jupyterlab jupyterlab jupyterlab jupyterlab jupyterlite-core jupyterlab jupyterlab jupyterlabBetriebssysteme Python
    • Auf 0.8.4 aktualisieren
    • Auf 4.5.11 aktualisieren
    • Auf 4.6.4 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  20. CVE-2026-12345

    Mittel · CVSS 5.9EPSS 0,34%Korrektur verfügbar

    Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory

    The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of the temporary directory to be deleted or have their permissions and file flags reset, with the privileges of the process performing the cleanup. Note that platforms where shutil.rmtree.avoids_symlink_attacks is false, remain affected, and file flags may still be reset outside of the tree on all platforms.

    python pypy3 pypy3 pypy3 python3.11 python3.13 python3.13 python3.14 python3.15 python2.7 python3.4 python3.5Betriebssysteme Python
    • Auf 3.12.15 aktualisieren
    • Auf 3.13.18 aktualisieren
    • Auf 3.14.9 aktualisieren
    • Auf 3.15.0rc3 aktualisieren
    • Auf 3.15.0~rc3-1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

Prüfen Sie Ihren Server

Gleichen Sie Ihren installierten Stack und seine Versionen mit den aktuellen Sicherheitsmeldungen ab.

Prüfen Sie Ihren Server →