Datastore

Certifi removes GLOBALTRUST root certificate

Starlette has possible denial-of-service vector when parsing large files in multipart forms

aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence

aiohttp: Multiple instances of excessive or unbounded memory/CPU use

PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524)

AIOHTTP has CRLF injection through multipart part content type header construction

urllib3 streaming API improperly handles highly compressed data

Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)

virtualenv: Xonsh activation literals depend on the script decoding codec

AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS

PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt / verify_signature=False)

virtualenv: Deletion recovery can change a symlink target's mode

urllib3 does not control redirects in browsers and Node.js

AIOHTTP: Secure attribute not enforced for shared cookie

virtualenv: Downloaded wheel selection and caching precede verification

aiohttp: HTTP/1 Pipelined Requests Queue Without Limit

aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections

pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size

Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching

Vulnerable OpenSSL included in cryptography wheels

AIOHTTP vulnerable to brute-force leak of internal static file path components

Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction

virtualenv: Generated files can follow existing destination links

filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale break

virtualenv Has TOCTOU Vulnerabilities in Directory Creation

Denial of service (DoS) via deformation `multipart/form-data` boundary

Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies

AnyIO process-pool workers can block indefinitely on undrained stderr

python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service

virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST

aiohttp server lacks an initial request/header timeout

AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection/security bypass

aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines

Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix

AIOHTTP's unicode processing of header values could cause parsing discrepancies

filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock path

AIOHTTP: Connector pool exhaustion via Max-Age overflow

AIOHTTP vulnerable to denial of service through large payloads

python-multipart: Semicolon treated as querystring field separator enables parameter smuggling

AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb

certifi bundles emSign root CAs with compromised intermediate CA keys

virtualenv: Bash prompt values can change meaning under older compatibility modes

pytest has vulnerable tmpdir handling

PyJWT accepts unknown `crit` header extensions

Vulnerable OpenSSL included in cryptography wheels

Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``

protobuf affected by a JSON recursion depth bypass

AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing