Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Python Software Foundation CPython 3.10.22, 3.11.17 and 4 more versions Clear all filters
TI-2026-13296 CVE-2026-15806 · GHSA-2v69-2w5x-455j

`HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matching

Priority MEDIUM 60

The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme into account when matching stored credential…

CVSS 4.0MEDIUM 6.0 Network No auth User interaction EPSS 0.00528 Published 2026-08-18 Fixed in 3.10.22, 3.11.17 +4 CWE-319
TI-2026-14214 CVE-2026-17084 · GHSA-w246-x8qv-r8f5

stringprep.map_table_b2() deviates from RFC 3454 Table B.2

Priority LOW 28

The "stringprep" module didn't process characters from RFC 3454 tables B.2 or B.3 correctly: the latest Unicode codepoint attributes were used instead of the specified Unicode 3.2.0.

CVSS 4.0MEDIUM 6.0 Network No auth User interaction EPSS 0.00734 Published 2026-08-18 Fixed in 3.10.22, 3.11.17 +4 CWE-436