CPython security vulnerabilities

CPython is a Python interpreter implemented in C language by the Python Foundation. CPython has a security vulnerability that stems from the email module’s improper handling of line breaks during email serialization, which may lead to header injection attacks...

CVE-2026-1299: Improper Neutralization of CRLF Sequences

The email module, specifically the "BytesGenerator" class, didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized. This is only applicable if using "LiteralHeader" writing headers that don't respect email foldin...

MiracleLinux 9 : python3.12-3.12.1-4.el9_4.3 (AXSA:2024-8798:06)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8798:06 advisory. cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection CVE-2024-6923 Tenable has extracted the preceding...

Siemens Ruggedcom ROX Improper Input Validation (CVE-2023-27043)

The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is...

EUVD-2020-2685

Malware in sbrugna...

EUVD-2020-4966

Malware in sbrugna...

EUVD-2019-6919

Malware in sbrugna...

EUVD-2018-4518

Malware in sbrugna...

EUVD-2014-4639

Malware in sbrugna...

EUVD-2009-2142

Malware in sbrugna...

EUVD-2009-1038

Malware in sbrugna...

EUVD-2024-34993

Malicious code in bioql PyPI...

EUVD-2023-53246

Malicious code in bioql PyPI...

The vulnerability of the email module in the Python programming language allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the email module in the Python programming language interpreter is related to improper code generation. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

BIT-LIBPYTHON-2024-6923 Email header injection due to unquoted newlines

There is a MEDIUM severity vulnerability affecting CPython. The email module didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized...

SuiteCRM SQL注入漏洞

SuiteCRM is a customer relationship management system from the SuiteCRM team. SuiteCRM suffers from a SQL injection vulnerability that stems from the InboundEmail module allowing arbitrary queries to be executed in the back-end database, which could lead to SQL injection...

CVE-2025-54788 SuiteCRM: Authenticated Blind SQL Injection in InboundEmail module

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. In versions and below, the InboundEmail module allows the arbitrary execution of queries in the backend database, leading to SQL injection. This can have wide-reaching implications on...

NewStart CGSL MAIN 7.02 : python3.11 Multiple Vulnerabilities (NS-SA-2025-0109)

The remote NewStart CGSL host, running version MAIN 7.02, has python3.11 packages installed that are affected by multiple vulnerabilities: - A vulnerability has been found in the CPython venv module and CLI where path names provided when creating a virtual environment were not quoted properly,...

TencentOS Server 3: python3.11 (TSSA-2024:0197)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0197 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

TencentOS Server 4: python3.11 (TSSA-2024:0589)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0589 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...