https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:13:07.395802+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-04977 bdu:2023-04977 2026-10-02T17:13:07.413194+00:00 bdu:2023-04977 https://cve.radiocsirt.org/vuln/bit-libpython-2023-36632 BIT-libpython-2023-36632 2026-10-02T17:13:07.413232+00:00

Affected: Bitnami: libpython

The legacy email.utils.parseaddr function in Python through 3.11.4 allows attackers to trigger "RecursionError: maximum recursion depth exceeded while calling a Python object" via a crafted argument. This argument is plausibly an untrusted value from an application's input data that was supposed to contain a name and an e-mail address. NOTE: email.utils.parseaddr is categorized as a Legacy API in the documentation of the Python email package. Applications should instead use the email.parser.BytesParser or email.parser.Parser class. NOTE: the vendor's perspective is that this is neither a vulnerability nor a bug. The email package is intended to have size limits and to throw an exception when limits are exceeded; they were exceeded by the example demonstration code.

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0262 certfr-2024-avi-0262 — De multiples vulnérabilités ont été découvertes dans <span class="textit">les produits IBM</span>. Certaines d'entre el… 2026-10-02T17:13:07.413269+00:00 certfr-2024-avi-0262 https://cve.radiocsirt.org/vuln/euvd-2026-204922 EUVD-2026-204922 2026-10-02T17:13:07.413286+00:00 EUVD-2026-204922 https://cve.radiocsirt.org/vuln/fkie_cve-2023-36632 fkie_cve-2023-36632 2026-10-02T17:13:07.413297+00:00

The legacy email.utils.parseaddr function in Python through 3.11.4 allows attackers to trigger "RecursionError: maximum recursion depth exceeded while calling a Python object" via a crafted argument. This argument is plausibly an untrusted value from an application's input data that was supposed to contain a name and an e-mail address. NOTE: email.utils.parseaddr is categorized as a Legacy API in the documentation of the Python email package. Applications should instead use the email.parser.BytesParser or email.parser.Parser class. NOTE: the vendor's perspective is that this is neither a vulnerability nor a bug. The email package is intended to have size limits and to throw an exception when limits are exceeded; they were exceeded by the example demonstration code.

 https://cve.radiocsirt.org/vuln/ghsa-gv66-v8c8-v69c GHSA-gv66-v8c8-v69c 2026-10-02T17:13:07.413321+00:00

The legacy email.utils.parseaddr function in Python through 3.11.4 allows attackers to trigger "RecursionError: maximum recursion depth exceeded while calling a Python object" via a crafted argument. This argument is plausibly an untrusted value from an application's input data that was supposed to contain a name and an e-mail address. NOTE: email.utils.parseaddr is categorized as a Legacy API in the documentation of the Python email package. Applications should instead use the email.parser.BytesParser or email.parser.Parser class.

 https://cve.radiocsirt.org/vuln/gsd-2023-36632 gsd-2023-36632 2026-10-02T17:13:07.413338+00:00 gsd-2023-36632 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1561 WID-SEC-W-2023-1561 — Python: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-02T17:13:07.413348+00:00

Ein Angreifer kann eine Schwachstelle in Python ausnutzen, um Sicherheitsvorkehrungen zu umgehen.