CVE-2020-10735High· 7.5▾ TwilightA flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"), a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits (float, decimal, int…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0.9 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 7.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
7.2%
Last analysed / modified upstream
A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"), a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits (float, decimal, int.from_bytes(), and int() for binary bases 2, 4, 8, 16, and 32 are not affected). The highest threat from this vulnerability is to system availability.
python >= 3.7.0, < 3.7.14python >= 3.8.0, < 3.8.14python >= 3.9.0, < 3.9.14python >= 3.10.0, < 3.10.7python = 3.11.0quay = 3.0.0software_collectionsfedora = 35fedora = 36fedora = 37enterprise_linux = 8.0Upgrade past the affected range:
python 3.10.7Connected by shared product, vendor, weakness, or advisory.
CVE-2022-45061High· 7.5An issue was discovered in Python before 3.11.1
CVE-2021-28861High· 7.4Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at the beginning of URI path which may leads to information disclosure
CVE-2021-4189Medium· 5.3A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode
CVE-2021-3737High· 7.5A flaw was found in python
CVE-2021-3426Medium· 5.7There's a flaw in Python 3's pydoc
CVE-2021-3733Medium· 6.5There's a flaw in urllib's AbstractBasicAuthHandler class