Search CVE reports


Toggle filters

11 – 12 of 12 results


CVE-2024-6923

Medium priority

Some fixes available 8 of 16

There is a MEDIUM severity vulnerability affecting CPython. The email module didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized.

11 affected packages

python2.7, python3.10, python3.11, python3.12, python3.13...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
python2.7 Not in release Fixed Fixed Fixed
python3.10 Not in release Fixed Not in release Not in release
python3.11 Not in release Needs evaluation Not in release Not in release
python3.12 Fixed Not in release Not in release Not in release
python3.13 Not in release Not in release Not in release Not in release
python3.4 Not in release Not in release Not in release Not in release
python3.5 Not in release Not in release Not in release Not in release
python3.6 Not in release Not in release Not in release Needs evaluation
python3.7 Not in release Not in release Not in release Needs evaluation
python3.8 Not in release Not in release Fixed Needs evaluation
python3.9 Not in release Not in release Needs evaluation Not in release
Show all 11 packages Show less packages

CVE-2023-27043

Medium priority

Some fixes available 10 of 21

The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker...

11 affected packages

python2.7, python3.10, python3.11, python3.12, python3.13...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
python2.7 Not in release Fixed Fixed Fixed
python3.10 Not in release Fixed Not in release Not in release
python3.11 Not in release Vulnerable Not in release Not in release
python3.12 Fixed Not in release Not in release Not in release
python3.13 Not in release Not in release Not in release Not in release
python3.4 Not in release Not in release Not in release Not in release
python3.5 Not in release Not in release Not in release Not in release
python3.6 Not in release Not in release Not in release Vulnerable
python3.7 Not in release Not in release Not in release Vulnerable
python3.8 Not in release Not in release Fixed Vulnerable
python3.9 Not in release Not in release Vulnerable Not in release
Show all 11 packages Show less packages