Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Priority LOW 34

PyPy before versions 3.11.16 and 3.12.14 contains a use-after-free vulnerability in the pyexpat module's ExternalEntityParserCreate function that allows attackers to corrupt memory by supplying a crafted XML document to…

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.0024 Published 2026-09-29 Fixed in 3.11.16, 3.12.14 CWE-416
Priority HIGH 82

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07413 Published 2022-10-21 Partial fix · 1.0.5 CWE-190