Read the docs

PyPy

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

PyPy records in CISA KEV

No PyPy vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Pypy 1 record HIGH

Records

2 records

TI-2022-17508 CVE-2022-37454 · GHSA-6w4m-2xhg-2658

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and…

Priority HIGH 82

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07413 Published 2022-10-21 Partial fix · 1.0.5 CWE-190
TI-2026-53708 CVE-2026-76875 · GHSA-4h3r-h8c5-46cf

PyPy pyexpat ExternalEntityParserCreate Use-After-Free

Priority LOW 34

PyPy before versions 3.11.16 and 3.12.14 contains a use-after-free vulnerability in the pyexpat module's ExternalEntityParserCreate function that allows attackers to corrupt memory by supplying a crafted XML document to…

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.0024 Published 2026-09-29 Fixed in 3.11.16, 3.12.14 CWE-416
Open these records in search →