Skip to content
Critical Python Vulnerabilities Affecting Ubuntu Systems

Critical Python Vulnerabilities Affecting Ubuntu Systems

First seen 6 Jul 2026, 23:49 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •July 7, 2026 at 21:39 UTC
  • •Python vulnerabilities affect Ubuntu 22.04 LTS and 24.04 LTS.
  • •Critical issues include path normalization flaws and denial of service risks.
  • •Immediate system updates are recommended to address these vulnerabilities.

Multiple vulnerabilities have been identified in Python, impacting Ubuntu 22.04 LTS and 24.04 LTS. Key issues include improper path normalization in the tarfile module (CVE-2025-13462), which could allow attackers to bypass path restrictions, and flaws in HTMLParser (CVE-2025-69534) that could lead to denial of service. Other vulnerabilities include issues in the email module (CVE-2026-1299) and http.client module (CVE-2026-1502) that could enable header injection attacks. These vulnerabilities were disclosed on July 6, 2026, and are critical for users of the affected Ubuntu versions to address. Users are advised to update their systems to mitigate these risks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 93d ago How this analysis works

Timeline

2022-08-24
CVE-2021-4189 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-01-20
CVE-2026-0672 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-01-23
CVE-2026-1299 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-03-04
CVE-2026-2297 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-03-05
CVE-2025-69534 published
Vulnerability in Python's HTMLParser could lead to denial of service attacks.
Ubuntu
2026-03-12
CVE-2025-13462 published
Python's tarfile module vulnerability disclosed, allowing path restriction bypass.
Ubuntu
2026-03-16
CVE-2026-3644 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-03-16
CVE-2026-4224 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-03-20
CVE-2026-4519 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-04-10
CVE-2026-1502 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE

More articles in this cluster (2)

Following this threat?

Track Ubuntu and CVE-2021-4189 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (25)

1 / 3