VULNERABILITY INTELLIGENCE

CVE-2025-15367

EPSS probability0.38%
CISA KEVNot currently listed
Published2026-01-20
Last modified2026-06-17

Description

The poplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters.

Weakness classification

  • cna@python.org: CWE-77

Primary references