Windows apps · Python Software Foundation
Python 3.11 security updates
The latest version of Python 3.11 is 3.11.9, released April 2, 2024. Patch Radar has 5 security fixes for Python 3.11, closing 13 CVEs. The newest security fix is Python 3.11 3.11.9, released April 2, 2024. 68 CVEs have no fix yet.
68 with no fix yet
Latest version
3.11.9
Released Apr 2, 2024
Security fixes
5
On record in Patch Radar
CVEs
13
Closed by those fixes
Exploited
0
Vendor report or CISA KEV
CVEs with no fix yet
| Priority | CVE | Title | Status |
|---|---|---|---|
| Urgent | CVE-2026-115557 | Distrust compromised intermediate certificates in ssl module | no-fix |
| Urgent | CVE-2026-19445 | Use-after-free of a server-side SSLContext when sni_callback switches contexts | no-fix |
| High | CVE-2024-12254 | Unbounded memory buffering in SelectorSocketTransport.writelines() | no-fix |
| High | CVE-2024-12718 | Bypass extraction filter to modify file metadata outside extraction directory | no-fix |
| High | CVE-2024-4030 | tempfile.mkdtemp() may be readable and writeable by all users on Windows | no-fix |
| High | CVE-2024-4032 | Incorrect IPv4 and IPv6 private ranges | no-fix |
| High | CVE-2024-6232 | Regular-expression DoS when parsing TarFile headers | no-fix |
| High | CVE-2024-6923 | Email header injection due to unquoted newlines | no-fix |
| High | CVE-2024-7592 | Quadratic complexity parsing cookies with backslashes | no-fix |
| High | CVE-2024-8088 | Infinite loop when iterating over zip archive entry names from zipfile.Path | no-fix |
| High | CVE-2024-9287 | Virtual environment (venv) activation scripts don't quote paths | no-fix |
| High | CVE-2025-0938 | URL parser allowed square brackets in domain names | no-fix |
| High | CVE-2025-12084 | Quadratic complexity in node ID cache clearing | no-fix |
| High | CVE-2025-13836 | Excessive read buffering DoS in http.client | no-fix |
| High | CVE-2025-13837 | Out-of-memory when loading Plist | no-fix |
| High | CVE-2025-15282 | Header injection via newlines in data URL mediatype | no-fix |
| High | CVE-2025-15366 | IMAP command injection in user-controlled commands | no-fix |
| High | CVE-2025-15367 | POP3 command injection in user-controlled commands | no-fix |
| High | CVE-2025-4138 | Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory | no-fix |
| High | CVE-2025-4330 | Extraction filter bypass for linking outside extraction directory | no-fix |
| High | CVE-2025-4435 | Tarfile extracts filtered members when errorlevel=0 | no-fix |
| High | CVE-2025-4516 | Use-after-free in "unicode_escape" decoder with error handler | no-fix |
| High | CVE-2025-4517 | Arbitrary writes via tarfile realpath overflow | no-fix |
| High | CVE-2025-8194 | Tarfile infinite loop during parsing with negative member offset | no-fix |
| High | CVE-2025-8291 | ZIP64 End of Central Directory (EOCD) Locator record offset not checked | no-fix |
| High | CVE-2026-0672 | Header injection in http.cookies.Morsel | no-fix |
| High | CVE-2026-0865 | wsgiref.headers.Headers allows header newline injection | no-fix |
| High | CVE-2026-11940 | tarfile extraction filter bypass allows escaping the destination directory | no-fix |
| High | CVE-2026-11972 | tarfile opened in streaming mode mishandles EOF | no-fix |
| High | CVE-2026-12345 | Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory | no-fix |
| High | CVE-2026-1299 | email BytesGenerator header injection due to unquoted newlines | no-fix |
| High | CVE-2026-1502 | HTTP client proxy tunnel headers not validated for CR/LF | no-fix |
| High | CVE-2026-15308 | Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations | no-fix |
| High | CVE-2026-19553 | SSLContext.wrap_bio() missing validation of server_hostname parameter | no-fix |
| High | CVE-2026-2297 | SourcelessFileLoader does not use io.open_code() | no-fix |
| High | CVE-2026-3298 | Out-of-bounds write in Windows asyncio.ProacterEventLoop.sock_recvfrom_into() when using nbytes | no-fix |
| High | CVE-2026-3644 | Incomplete control character validation in http.cookies | no-fix |
| High | CVE-2026-4519 | webbrowser.open() allows leading dashes in URLs | no-fix |
| High | CVE-2026-4786 | Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open() | no-fix |
| High | CVE-2026-6019 | BaseCookie.js_output() does not neutralize embedded characters | no-fix |
| High | CVE-2026-6100 | Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure | no-fix |
| High | CVE-2026-7210 | The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection | no-fix |
| High | CVE-2026-82049 | tarfile extraction filters allow file modification and content disclosure via hard link to symlink | no-fix |
| High | CVE-2026-9669 | bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow | no-fix |
| Routine | CVE-2023-27043 | Python 3.10 and 8 others: Improper Input Validation | no-fix |
| Routine | CVE-2024-3219 | Pure-Python fallback of socket.socketpair() doesn’t authenticate peer connection | no-fix |
| Routine | CVE-2024-3220 | Default mimetype known files writeable on Windows | no-fix |
| Routine | CVE-2025-11468 | Folding email comments of unfoldable characters doesn't preserve parenthesis | no-fix |
| Routine | CVE-2025-12781 | base64.b64decode() always accepts "+/" characters, despite setting altchars | no-fix |
| Routine | CVE-2025-13462 | tarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handling | no-fix |
| Routine | CVE-2026-0864 | Configuration Injection via Carriage Return (\r) in write() method | no-fix |
| Routine | CVE-2026-103995 | Lenient parsing of integers for response body and chunk framing | no-fix |
| Routine | CVE-2026-114583 | tar filter allows writing outside destination via empty-named symlink | no-fix |
| Routine | CVE-2026-116566 | socket.getaddrinfo() accepts embedded null bytes in host and port | no-fix |
| Routine | CVE-2026-12003 | CPython >3.11 Insecure Input Validation resulting in privilege escalation | no-fix |
| Routine | CVE-2026-15310 | zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits | no-fix |
| Routine | CVE-2026-15806 | `HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matching | no-fix |
| Routine | CVE-2026-17084 | stringprep.map_table_b2() deviates from RFC 3454 Table B.2 | no-fix |
| Routine | CVE-2026-18503 | Super-linear CPU usage for unbounded input to csv.Sniffer.sniff() | no-fix |
| Routine | CVE-2026-19672 | tarfile extraction filter bypass allows creation of directories outside the destination | no-fix |
| Routine | CVE-2026-3087 | shutil.unpack_archive() doesn't check for Windows absolute paths in ZIPs | no-fix |
| Routine | CVE-2026-3276 | Potential DoS via quadratic complexity in unicodedata.normalize() | no-fix |
| Routine | CVE-2026-3446 | Base64 decoding stops at first padded quad by default | no-fix |
| Routine | CVE-2026-3479 | pkgutil.get_data() does not enforce documented restrictions | no-fix |
| Routine | CVE-2026-6879 | Quadratic Behavior in xml.etree.ElementPath Index Predicates | no-fix |
| Routine | CVE-2026-7774 | tarfile.data_filter path traversal bypass allows writing outside the extraction directory | no-fix |
| Routine | CVE-2026-8328 | FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address | no-fix |
| Routine | CVE-2026-87910 | tarfile hardlink fallback ignores custom extraction filter rejection via None | no-fix |
Security fixes, newest first
| Priority | Fix | Fixed in | CVEs | Exploited | Released |
|---|---|---|---|---|---|
| High | Python 3.11 3.11.9 | 3.11.9 | 2 | Apr 2, 2024 | |
| High | Python 3.11 3.11.8 | 3.11.8 | 2 | Feb 6, 2024 | |
| High | Python 3.11 3.11.5 | 3.11.5 | 3 | Aug 24, 2023 | |
| High | Python 3.11 3.11.4 | 3.11.4 | 3 | Jun 6, 2023 | |
| High | Python 3.11 3.11.1 | 3.11.1 | 3 | Dec 6, 2022 |
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.