The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at the beginning of URI path which may leads to information disclosure. NOTE: this is disputed by a third party because the http.server.html documentation page states "Warning: http.server is not recommended for production. It only implements basic security checks."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-develUpgrade python39-plyUpgrade python39-idnaUpgrade python39-tkinterUpgrade platform-python-debugUpgrade python38-tkinterUpgrade python38-jinja2Upgrade python38-wcwidthUpgrade python39-pytestUpgrade python38-sixUpgrade python38-pytzUpgrade python39-libsUpgrade python38-more-itertoolsUpgrade python38-pipUpgrade python39-pysocksUpgrade python38-setuptoolsUpgrade python38-lxmlUpgrade python39-testUpgrade python38-CythonUpgrade python38-babelUpgrade python38-chardetUpgrade python39-setuptools-wheelUpgrade python39-pyparsingUpgrade python39-tomlUpgrade python3-idleUpgrade python39-setuptoolsUpgrade python39-chardetUpgrade python38-debugUpgrade python39-pybind11Upgrade python3-tkinterUpgrade python38-psycopg2Upgrade python39Upgrade python39-wheel-wheelUpgrade python38-atomicwritesUpgrade python39-more-itertoolsUpgrade python39-iniconfigUpgrade python38-develUpgrade python38-plyUpgrade python38-packagingUpgrade python39-requestsUpgrade python39-cryptographyUpgrade platform-python-develUpgrade python39-rpm-macrosUpgrade python38-PyMySQLUpgrade python39-develUpgrade python39-wheelUpgrade python38-rpm-macrosUpgrade python39-mod_wsgiUpgrade python39-sixUpgrade python39-pipUpgrade python39-pyUpgrade python3-debugUpgrade python39-psutilUpgrade python38-pluggyUpgrade python3-libsUpgrade python39-debugUpgrade python39-cffiUpgrade python38-pyyamlUpgrade python38-mod_wsgiUpgrade python38-asn1cryptoUpgrade python38-wheel-wheelUpgrade python38-pyparsingUpgrade python39-pluggyUpgrade python38-wheelUpgrade python39-packagingUpgrade platform-pythonUpgrade python38-numpy-docUpgrade python38-idleUpgrade python38-pyUpgrade python39-pyyamlUpgrade python38-libsUpgrade python38-pip-wheelUpgrade python39-pybind11-develUpgrade python39-PyMySQLUpgrade python38-numpy-f2pyUpgrade python39-lxmlUpgrade python38-setuptools-wheelUpgrade python38-psycopg2-testsUpgrade python39-psycopg2Upgrade python38-requestsUpgrade python38-markupsafeUpgrade python38-numpyUpgrade python3-testUpgrade python38-pytestUpgrade python38Upgrade python38-cryptographyUpgrade python39-numpy-f2pyUpgrade python39-scipyUpgrade python39-pycparserUpgrade python39-psycopg2-testsUpgrade python38-scipyUpgrade python38-idnaUpgrade python39-pip-wheelUpgrade python39-attrsUpgrade python38-psycopg2-docUpgrade python38-urllib3Upgrade python38-cffiUpgrade python38-attrsUpgrade python3Upgrade python39-urllib3Upgrade python39-numpyUpgrade python39-psycopg2-docUpgrade python39-CythonUpgrade python38-pycparserUpgrade python39-idleUpgrade python38-psutilUpgrade python38-testUpgrade python39-wcwidthUpgrade python39-numpy-docUpgrade python-unversioned-commandUpgrade python38-pysocks | Nov 18, 2022 | Aug 23, 2022 |
| Amazon Linux Ami 2 | — | Upgrade python3-debuginfoUpgrade python38-debuginfoUpgrade python38-develUpgrade python38-debugUpgrade python38-tkinterUpgrade python3-libsUpgrade python3-testUpgrade python3-debugUpgrade python3-tkinterUpgrade python3Upgrade python3-develUpgrade python38-toolsUpgrade python38-testUpgrade python38-libsUpgrade python3-toolsUpgrade python38 | Nov 14, 2024 | Aug 23, 2022 |
| Centos_linux | — | Upgrade python38-cffi-debuginfoUpgrade python3.9-debuginfoUpgrade python39-requestsUpgrade python38-psutil-debuginfoUpgrade python-lxml-debugsourceUpgrade python3-develUpgrade python39-debuginfoUpgrade python39-numpy-f2pyUpgrade python39-sixUpgrade python39-plyUpgrade python39-PyMySQLUpgrade python38-lxml-debuginfoUpgrade python38-idleUpgrade python38-scipy-debuginfoUpgrade python38-debuginfoUpgrade python3-tkinterUpgrade python-markupsafe-debugsourceUpgrade python39-testUpgrade python39-cffi-debuginfoUpgrade python-unversioned-commandUpgrade python38-debugsourceUpgrade python39-tomlUpgrade python39-develUpgrade python39-idnaUpgrade python39-idleUpgrade python38-develUpgrade python39-cryptography-debuginfoUpgrade python38-urllib3Upgrade python38-setuptoolsUpgrade python3-libsUpgrade python-psycopg2-debugsourceUpgrade python-cryptography-debugsourceUpgrade platform-python-develUpgrade python39-lxmlUpgrade python38Upgrade python38-lxmlUpgrade python39-setuptoolsUpgrade python38-scipyUpgrade python39-scipy-debuginfoUpgrade python39-rpm-macrosUpgrade python38-psycopg2Upgrade platform-python-debugUpgrade python39-psycopg2-testsUpgrade python38-requestsUpgrade python38-plyUpgrade python38-cryptographyUpgrade python3-idleUpgrade python3.9-debugsourceUpgrade Cython-debugsourceUpgrade python39-pycparserUpgrade python39-pyyamlUpgrade python38-babelUpgrade python39-setuptools-wheelUpgrade python3-debuginfoUpgrade python38-pyyamlUpgrade python39-libsUpgrade python38-jinja2Upgrade python3-debugsourceUpgrade python38-markupsafeUpgrade python39-wheelUpgrade python38-mod_wsgiUpgrade python38-pip-wheelUpgrade python38-chardetUpgrade python38-pysocksUpgrade python38-pyyaml-debuginfoUpgrade numpy-debugsourceUpgrade python38-numpy-docUpgrade python38-testUpgrade python38-wheelUpgrade python39-mod_wsgiUpgrade python39-pyyaml-debuginfoUpgrade python38-idnaUpgrade python39-wheel-wheelUpgrade python39-tkinterUpgrade python38-rpm-macrosUpgrade python38-setuptools-wheelUpgrade python38-Cython-debuginfoUpgrade python39-pip-wheelUpgrade python39-urllib3Upgrade python38-asn1cryptoUpgrade python39-debugsourceUpgrade scipy-debugsourceUpgrade PyYAML-debugsourceUpgrade python3-testUpgrade python38-wheel-wheelUpgrade python39-cffiUpgrade python39-pipUpgrade python38-cffiUpgrade python38-markupsafe-debuginfoUpgrade python-cffi-debugsourceUpgrade python38-pipUpgrade python38-psutilUpgrade python39-numpy-debuginfoUpgrade python38-libsUpgrade python38-pytzUpgrade python38-sixUpgrade python38-debugUpgrade python-psutil-debugsourceUpgrade python3Upgrade python38-numpy-f2pyUpgrade python38-CythonUpgrade python39-pysocksUpgrade python38-PyMySQLUpgrade python39-lxml-debuginfoUpgrade python39-psutil-debuginfoUpgrade python38-cryptography-debuginfoUpgrade python38-pycparserUpgrade python39-scipyUpgrade python39-numpyUpgrade python38-numpyUpgrade python38-psycopg2-testsUpgrade python39-cryptographyUpgrade python39-chardetUpgrade python39-psycopg2Upgrade python38-numpy-debuginfoUpgrade python38-tkinterUpgrade python39Upgrade python38-psycopg2-debuginfoUpgrade python38-psycopg2-docUpgrade python39-psutilUpgrade python39-psycopg2-debuginfoUpgrade platform-pythonUpgrade python39-psycopg2-docUpgrade python39-numpy-doc | Nov 16, 2022 | Aug 23, 2022 |
| Debian | — | Upgrade python3.11Upgrade pypy3Upgrade python3.9 | Jul 30, 2024 | Aug 23, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/python.Upgrade dev-python/pypy3. | May 4, 2023 | Aug 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-unversioned-commandUpgrade python3 | Nov 3, 2022 | Aug 23, 2022 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3Upgrade python3-fgoUpgrade python3-unversioned-command | Oct 24, 2025 | Nov 2, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3Upgrade python3-libsUpgrade python3-develUpgrade python3-testUpgrade python3-unversioned-command | Dec 9, 2022 | Aug 23, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3Upgrade python3-unversioned-command | Nov 15, 2022 | Aug 23, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 4, 2023 |
| Oracle_linux | — | Upgrade python39-pybind11Upgrade python39-pyparsingUpgrade python39-pyUpgrade python39-sixUpgrade python39-tkinterUpgrade python39-develUpgrade python38-packagingUpgrade python39-pipUpgrade python39-pysocksUpgrade python39-psutilUpgrade python3-idleUpgrade python38-atomicwritesUpgrade python39-libsUpgrade python38-debugUpgrade platform-python-develUpgrade python39-chardetUpgrade python38-rpm-macrosUpgrade python38-sixUpgrade python39-mod_wsgiUpgrade python39-cffiUpgrade python38-babelUpgrade python38-develUpgrade python39Upgrade python39-setuptoolsUpgrade python39-psycopg2Upgrade python39-pytestUpgrade python39-tomlUpgrade python38-CythonUpgrade python3-tkinterUpgrade python38-pytzUpgrade python38-pyyamlUpgrade python38-pluggyUpgrade python3-libsUpgrade python39-wheel-wheelUpgrade python38-pycparserUpgrade python38-chardetUpgrade python38-mod_wsgiUpgrade python38-wcwidthUpgrade python38-psycopg2Upgrade python39-idnaUpgrade python39-plyUpgrade python38-plyUpgrade python3-debugUpgrade python3-develUpgrade python39-setuptools-wheelUpgrade python39-wheelUpgrade python39-rpm-macrosUpgrade platform-python-debugUpgrade python38-pipUpgrade python38-PyMySQLUpgrade python39-debugUpgrade python38-pytestUpgrade python38-lxmlUpgrade python39-requestsUpgrade python38-asn1cryptoUpgrade python39-numpy-docUpgrade python38-pip-wheelUpgrade python39-psycopg2-docUpgrade python39-pip-wheelUpgrade python39-numpy-f2pyUpgrade python39-iniconfigUpgrade python39-CythonUpgrade python38-psycopg2-docUpgrade python38-more-itertoolsUpgrade python38-libsUpgrade python38-setuptools-wheelUpgrade python3-testUpgrade python39-scipyUpgrade python39-testUpgrade python39-PyMySQLUpgrade python39-pybind11-develUpgrade python39-cryptographyUpgrade python38-cryptographyUpgrade python38-setuptoolsUpgrade python38-urllib3Upgrade python38-pysocksUpgrade python39-psycopg2-testsUpgrade python39-idleUpgrade python39-numpyUpgrade python38-testUpgrade python39-urllib3Upgrade python38-psutilUpgrade python39-wcwidthUpgrade python38-wheelUpgrade python38-idnaUpgrade python38-numpy-docUpgrade python38-idleUpgrade python39-pluggyUpgrade python39-pyyamlUpgrade python38-psycopg2-testsUpgrade python38-requestsUpgrade python39-attrsUpgrade python38-wheel-wheelUpgrade python38-numpy-f2pyUpgrade python38-numpyUpgrade python38-cffiUpgrade python38-attrsUpgrade python3Upgrade python38Upgrade python39-more-itertoolsUpgrade python38-pyUpgrade platform-pythonUpgrade python38-markupsafeUpgrade python38-jinja2Upgrade python39-lxmlUpgrade python39-pycparserUpgrade python39-packagingUpgrade python38-pyparsingUpgrade python-unversioned-commandUpgrade python38-tkinterUpgrade python38-scipy | Nov 22, 2022 | Aug 22, 2022 |
| Redhat_linux | — | Upgrade python-lxml-debugsourceUpgrade python38-libsUpgrade python38-lxml-debuginfoUpgrade python39-testUpgrade python39-debuginfoUpgrade python38-atomicwritesUpgrade python3-develUpgrade python38-psycopg2-docUpgrade python38-numpyUpgrade python39-psycopg2-testsUpgrade python38-cffiUpgrade python39-iniconfigUpgrade python39-numpy-docUpgrade Cython-debugsourceUpgrade python39-pyyamlUpgrade python38-lxmlUpgrade python39-attrsUpgrade python38-chardetUpgrade python-unversioned-commandUpgrade platform-python-develUpgrade python39-rpm-macrosUpgrade python38-more-itertoolsUpgrade python39-Cython-debuginfoUpgrade python38-mod_wsgiUpgrade python39-psycopg2-docUpgrade python39-psutil-debuginfoUpgrade python38-urllib3Upgrade python38-scipyUpgrade python39-numpy-f2pyUpgrade python38-markupsafeUpgrade python38-cffi-debuginfoUpgrade python38-debuginfoUpgrade python39-numpyUpgrade python39-develUpgrade python38-pyUpgrade python39-tomlUpgrade python39-pyparsingUpgrade python39-tkinterUpgrade platform-python-debugUpgrade python39-scipyUpgrade python39-CythonUpgrade python39-pybind11-develUpgrade python39-more-itertoolsUpgrade python39-PyMySQLUpgrade python39-libsUpgrade python38-babelUpgrade python3.9-debugsourceUpgrade python38-pip-wheelUpgrade python39-pybind11Upgrade python39-pluggyUpgrade python39-pyUpgrade python38-pysocksUpgrade python38-psutilUpgrade python3-idleUpgrade python39-debugUpgrade python38Upgrade python39-packagingUpgrade python39-wcwidthUpgrade python38-idleUpgrade python39-lxml-debuginfoUpgrade python3.9-debuginfoUpgrade python38-setuptoolsUpgrade python38-pyparsingUpgrade PyYAML-debugsourceUpgrade python38-attrsUpgrade python39-cffi-debuginfoUpgrade python3-debuginfoUpgrade python38-cryptographyUpgrade python3-libsUpgrade python-cryptography-debugsourceUpgrade python39-scipy-debuginfoUpgrade python39-lxmlUpgrade python38-debugsourceUpgrade python38-pyyaml-debuginfoUpgrade python38-pyyamlUpgrade python38-testUpgrade python39-pytestUpgrade python38-scipy-debuginfoUpgrade python39-psycopg2Upgrade python39-sixUpgrade python38-rpm-macrosUpgrade python38-asn1cryptoUpgrade platform-pythonUpgrade python38-setuptools-wheelUpgrade python39-psutilUpgrade python38-sixUpgrade python39-numpy-debuginfoUpgrade python38-CythonUpgrade python39-pip-wheelUpgrade python39-setuptoolsUpgrade python38-psycopg2Upgrade python38-idnaUpgrade python3-tkinterUpgrade python38-markupsafe-debuginfoUpgrade numpy-debugsourceUpgrade python38-Cython-debuginfoUpgrade python38-pluggyUpgrade python38-numpy-f2pyUpgrade python38-pipUpgrade python38-PyMySQLUpgrade python39-idnaUpgrade python38-debugUpgrade python38-wheelUpgrade python39-pycparserUpgrade python39-pysocksUpgrade python39-pipUpgrade python38-wcwidthNo solution existsUpgrade python38-pytestUpgrade scipy-debugsourceUpgrade python38-tkinterUpgrade python38-pycparserUpgrade python38-pytzUpgrade python39-psycopg2-debuginfoUpgrade python39-debugsourceUpgrade python39-setuptools-wheelUpgrade python-psycopg2-debugsourceUpgrade python39-requestsUpgrade python39-idleUpgrade python39-cryptography-debuginfoUpgrade python38-develUpgrade python38-psutil-debuginfoUpgrade python38-psycopg2-debuginfoUpgrade python39-urllib3Upgrade python39Upgrade python38-plyUpgrade python39-wheel-wheelUpgrade python38-numpy-docUpgrade python3Upgrade python39-pyyaml-debuginfoUpgrade python38-cryptography-debuginfoUpgrade python38-packagingUpgrade python38-psycopg2-testsUpgrade python39-cffiUpgrade python3-debugUpgrade python-psutil-debugsourceUpgrade python3-testUpgrade python39-wheelUpgrade python-markupsafe-debugsourceUpgrade python38-wheel-wheelUpgrade python38-requestsUpgrade python39-plyUpgrade python-cffi-debugsourceUpgrade python3-debugsourceUpgrade python38-numpy-debuginfoUpgrade python38-jinja2Upgrade python39-chardetUpgrade python39-cryptographyUpgrade python39-mod_wsgi | Nov 16, 2022 | Aug 23, 2022 |
| Rocky_linux | — | Upgrade python38-pyyamlUpgrade python39-lxml-debuginfoUpgrade python-lxml-debugsourceUpgrade python38-cffi-debuginfoUpgrade python3-debugsourceUpgrade python3-tkinterUpgrade python3-libsUpgrade python-psycopg2-debugsourceUpgrade Cython-debugsourceUpgrade python3-debugUpgrade python39-lxmlUpgrade python3.9-debuginfoUpgrade python38-cryptographyUpgrade python39-pyyamlUpgrade python39-cffiUpgrade python3-debuginfoUpgrade python3-develUpgrade python38-psycopg2Upgrade python38-psutil-debuginfoUpgrade platform-python-develUpgrade python38-psycopg2-debuginfoUpgrade python3Upgrade python38-psycopg2-docUpgrade python39-numpy-f2pyUpgrade python3-idleUpgrade platform-python-debugUpgrade python38-lxmlUpgrade python39-pybind11Upgrade python39-pybind11-develUpgrade python-cryptography-debugsourceUpgrade python-markupsafe-debugsourceUpgrade PyYAML-debugsourceUpgrade python39-cffi-debuginfoUpgrade python38-CythonUpgrade python38-lxml-debuginfoUpgrade python38-cffiUpgrade python39-psutil-debuginfoUpgrade python38-psycopg2-testsUpgrade python39-numpy-debuginfoUpgrade platform-pythonUpgrade numpy-debugsourceUpgrade python38-pyyaml-debuginfoUpgrade python39-Cython-debuginfoUpgrade python38-cryptography-debuginfoUpgrade python3-testUpgrade python38-markupsafe-debuginfoUpgrade python38-psutilUpgrade python38-Cython-debuginfoUpgrade python38-markupsafeUpgrade python39-CythonUpgrade python39-psutilUpgrade python-psutil-debugsourceUpgrade python-cffi-debugsourceUpgrade python39-pyyaml-debuginfoUpgrade python39-numpy | Apr 18, 2024 | Aug 23, 2022 |
| Suse | — | Upgrade python-demoUpgrade python310-testsuiteUpgrade python3-docUpgrade python-tkUpgrade python39-32bitUpgrade python-idleUpgrade python3-toolsUpgrade libpython2_7-1_0-32bitUpgrade python3-idleUpgrade python36-develUpgrade libpython3_4m1_0-32bitUpgrade python39-base-32bitUpgrade python-doc-pdfUpgrade python310-base-32bitUpgrade python-32bitUpgrade python39-docUpgrade python-xmlUpgrade python3-cursesUpgrade python3-develUpgrade python-baseUpgrade python39-cursesUpgrade python3-dbmUpgrade python310-idleUpgrade pythonUpgrade python-gdbmUpgrade python-base-32bitUpgrade libpython2_7-1_0Upgrade libpython3_10-1_0Upgrade python39-dbmUpgrade python310-baseUpgrade python310-docUpgrade python3-doc-devhelpUpgrade python3Upgrade libpython3_9-1_0Upgrade python3-baseUpgrade python310-dbmUpgrade python3-testsuiteUpgrade python310-doc-devhelpUpgrade python36-baseUpgrade python310-develUpgrade libpython3_10-1_0-32bitUpgrade python3-tkUpgrade libpython3_4m1_0Upgrade python310-tkUpgrade libpython3_6m1_0Upgrade python39-tkUpgrade python-develUpgrade python39-doc-devhelpUpgrade python39-baseUpgrade python39Upgrade python310Upgrade python39-testsuiteUpgrade python-docUpgrade python310-32bitUpgrade python39-toolsUpgrade python36Upgrade python310-cursesUpgrade python310-toolsUpgrade python-cursesUpgrade python39-develUpgrade python39-idleUpgrade libpython3_9-1_0-32bitUpgrade libpython3_6m1_0-32bit | Oct 26, 2022 | Aug 23, 2022 |
| Ubuntu | — | Upgrade libpython3.5-minimal (Ubuntu Pro)Upgrade python3.5-minimal (Ubuntu Pro)Upgrade python3.5 (Ubuntu Pro)Upgrade python3.9-minimal (Ubuntu Pro)Upgrade libpython3.5-stdlib (Ubuntu Pro)Upgrade python3.9 (Ubuntu Pro)Upgrade libpython3.5 (Ubuntu Pro) | Sep 23, 2022 | Aug 23, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 23, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub