Python Security Announcements
Printed in Security Desk · mail.python.org
Publishes about 4 a month · last piece Sep 30, 2026
How often
about 4 a month, by the archive: 5 pieces since Sep 11, 2026.
12 weeks agothis week
Latest pieces
- [Security-announce][CVE-2026-19445] Use-after-free of a server-side SSLContext when sni_callback switches contexts
- [Security-announce][CVE-2026-19553] SSLContext.wrap_bio() missing validation of server_hostname parameter
- [Security-announce][CVE-2026-12345] Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory
- [Security-announce][CVE-2026-82049] tarfile extraction filters allow file modification and content disclosure via hard link to symlink
- [Security-announce][CVE-2026-87910] tarfile hardlink fallback ignores custom extraction filter rejection via None
In these topics
Pick one in My Edition to read it with its neighbors.