← All credits
Seth Larson (https://github.com/sethmlarson)
19 vulnerability records and advisories credit this contributor.
CVE-2026-3276
Potential DoS via quadratic complexity in unicodedata.normalize()
CVE-2026-119170
Regression in FIPS enforcement of hash algorithms affecting only Python 3.14.10
CVE-2026-103995
Lenient parsing of integers for response body and chunk framing
CVE-2026-116566
socket.getaddrinfo() accepts embedded null bytes in host and port
CVE-2026-0864
Configuration Injection via Carriage Return (\r) in write() method
CVE-2026-3087
shutil.unpack_archive() doesn't check for Windows absolute paths in ZIPs
CVE-2026-3298
Out-of-bounds write in Windows asyncio.ProacterEventLoop.sock_recvfrom_into() when using nbytes
CVE-2026-4360
Tarfile.extract() doesn't fully respect filter parameter
CVE-2026-7774
tarfile.data_filter path traversal bypass allows writing outside the extraction directory