CVE-2026-103995Low· 2.0▾ SunlitResponse body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 11 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents.
CPython < 3.16.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-115557Critical· 9.4Distrust compromised intermediate certificates in ssl module
CVE-2026-114583Medium· 6.9tar filter allows writing outside destination via empty-named symlink
CVE-2024-3220Low· 2.3There is a defect in the CPython standard library module “mimetypes” where on Windows the default list of known file locations are writable meaning other users can create invalid files to cause MemoryError to be raised on Python runtime …
CVE-2026-18503Low· 2.4Attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU when applications pass unbounded input to csv.Sniffer.sniff().
CVE-2026-15806Medium· 6.0The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme into account when matching stored credentials against a reque…
CVE-2026-19445Critical· 9.2A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its sni_callback assigns a different context to SSLSocket.context (the documented way to select a certificate per server name) and nothing el…