{
  "product": "Python 3.13",
  "url": "https://patchblox.com/security/product/windows-app/python-3.13",
  "summary": "The latest version of Python 3.13 is 3.13.17, released October 21, 2026. Patch Radar has 11 security fixes for Python 3.13, closing 57 CVEs. The newest security fix is Python 3.13 3.13.16, released September 30, 2026. Version 3.13.17 adds no new CVE fixes and includes all of them. 9 CVEs have no fix yet.",
  "platform": "windows-app",
  "vendor": "Python Software Foundation",
  "supported": true,
  "latestVersion": "3.13.17",
  "latestReleased": "2026-10-21T00:00:00Z",
  "latestIncludesAllFixes": true,
  "fixCount": 11,
  "cveCount": 57,
  "exploitedCveCount": 0,
  "unfixedCveCount": 9,
  "fixes": [
    {
      "fix": "Python 3.13 3.13.16",
      "url": "https://patchblox.com/security/fix/windows-app/python.python.3.13-3.13.16",
      "released": "2026-09-30T00:00:00Z",
      "fixedVersion": "3.13.16",
      "priority": "Urgent",
      "cveCount": 7,
      "exploitedCveCount": 0
    },
    {
      "fix": "Python 3.13 3.13.15",
      "url": "https://patchblox.com/security/fix/windows-app/python.python.3.13-3.13.15",
      "released": "2026-08-05T00:00:00Z",
      "fixedVersion": "3.13.15",
      "priority": "High",
      "cveCount": 8,
      "exploitedCveCount": 0
    },
    {
      "fix": "Python 3.13 3.13.14",
      "url": "https://patchblox.com/security/fix/windows-app/python.python.3.13-3.13.14",
      "released": "2026-06-10T00:00:00Z",
      "fixedVersion": "3.13.14",
      "priority": "High",
      "cveCount": 10,
      "exploitedCveCount": 0
    },
    {
      "fix": "Python 3.13 3.13.13",
      "url": "https://patchblox.com/security/fix/windows-app/python.python.3.13-3.13.13",
      "released": "2026-04-07T00:00:00Z",
      "fixedVersion": "3.13.13",
      "priority": "High",
      "cveCount": 7,
      "exploitedCveCount": 0
    },
    {
      "fix": "Python 3.13 3.13.12",
      "url": "https://patchblox.com/security/fix/windows-app/python.python.3.13-3.13.12",
      "released": "2026-02-03T00:00:00Z",
      "fixedVersion": "3.13.12",
      "priority": "High",
      "cveCount": 5,
      "exploitedCveCount": 0
    },
    {
      "fix": "Python 3.13 3.13.11",
      "url": "https://patchblox.com/security/fix/windows-app/python.python.3.13-3.13.11",
      "released": "2025-12-05T00:00:00Z",
      "fixedVersion": "3.13.11",
      "priority": "High",
      "cveCount": 3,
      "exploitedCveCount": 0
    },
    {
      "fix": "Python 3.13 3.13.10",
      "url": "https://patchblox.com/security/fix/windows-app/python.python.3.13-3.13.10",
      "released": "2025-12-02T00:00:00Z",
      "fixedVersion": "3.13.10",
      "priority": "High",
      "cveCount": 3,
      "exploitedCveCount": 0
    },
    {
      "fix": "Python 3.13 3.13.6",
      "url": "https://patchblox.com/security/fix/windows-app/python.python.3.13-3.13.6",
      "released": "2025-08-06T00:00:00Z",
      "fixedVersion": "3.13.6",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "Python 3.13 3.13.4",
      "url": "https://patchblox.com/security/fix/windows-app/python.python.3.13-3.13.4",
      "released": "2025-06-03T00:00:00Z",
      "fixedVersion": "3.13.4",
      "priority": "High",
      "cveCount": 6,
      "exploitedCveCount": 0
    },
    {
      "fix": "Python 3.13 3.13.2",
      "url": "https://patchblox.com/security/fix/windows-app/python.python.3.13-3.13.2",
      "released": "2025-02-04T00:00:00Z",
      "fixedVersion": "3.13.2",
      "priority": "High",
      "cveCount": 2,
      "exploitedCveCount": 0
    },
    {
      "fix": "Python 3.13 3.13.1",
      "url": "https://patchblox.com/security/fix/windows-app/python.python.3.13-3.13.1",
      "released": "2024-12-03T00:00:00Z",
      "fixedVersion": "3.13.1",
      "priority": "High",
      "cveCount": 5,
      "exploitedCveCount": 0
    }
  ],
  "noFixYet": [
    {
      "cveId": "CVE-2026-115557",
      "url": "https://patchblox.com/security/cve/CVE-2026-115557",
      "title": "Distrust compromised intermediate certificates in ssl module",
      "priority": "Urgent",
      "status": "no-fix",
      "affectedVersion": "3.13.17"
    },
    {
      "cveId": "CVE-2025-15367",
      "url": "https://patchblox.com/security/cve/CVE-2025-15367",
      "title": "POP3 command injection in user-controlled commands",
      "priority": "High",
      "status": "no-fix",
      "affectedVersion": "3.13.17"
    },
    {
      "cveId": "CVE-2026-12345",
      "url": "https://patchblox.com/security/cve/CVE-2026-12345",
      "title": "Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory",
      "priority": "High",
      "status": "no-fix",
      "affectedVersion": "3.13.17"
    },
    {
      "cveId": "CVE-2024-3220",
      "url": "https://patchblox.com/security/cve/CVE-2024-3220",
      "title": "Default mimetype known files writeable on Windows",
      "priority": "Routine",
      "status": "no-fix",
      "affectedVersion": "3.13.17"
    },
    {
      "cveId": "CVE-2026-103995",
      "url": "https://patchblox.com/security/cve/CVE-2026-103995",
      "title": "Lenient parsing of integers for response body and chunk framing",
      "priority": "Routine",
      "status": "no-fix",
      "affectedVersion": "3.13.17"
    },
    {
      "cveId": "CVE-2026-114583",
      "url": "https://patchblox.com/security/cve/CVE-2026-114583",
      "title": "tar filter allows writing outside destination via empty-named symlink",
      "priority": "Routine",
      "status": "no-fix",
      "affectedVersion": "3.13.17"
    },
    {
      "cveId": "CVE-2026-116566",
      "url": "https://patchblox.com/security/cve/CVE-2026-116566",
      "title": "socket.getaddrinfo() accepts embedded null bytes in host and port",
      "priority": "Routine",
      "status": "no-fix",
      "affectedVersion": "3.13.17"
    },
    {
      "cveId": "CVE-2026-19672",
      "url": "https://patchblox.com/security/cve/CVE-2026-19672",
      "title": "tarfile extraction filter bypass allows creation of directories outside the destination",
      "priority": "Routine",
      "status": "no-fix",
      "affectedVersion": "3.13.17"
    },
    {
      "cveId": "CVE-2026-3087",
      "url": "https://patchblox.com/security/cve/CVE-2026-3087",
      "title": "shutil.unpack_archive() doesn\u0027t check for Windows absolute paths in ZIPs",
      "priority": "Routine",
      "status": "no-fix",
      "affectedVersion": "3.13.17"
    }
  ],
  "dataAsOf": "2026-11-07T12:40:37Z"
}