Seth Larson
19 credited records · 8 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
21Monitor | CVE-2026-6357No exploit | pip self-update functionality can import newly installed modules after wheel installationpip maintainers · pip · CWE-829 | Medium5.3 | — | 0.2% | Apr 27, 2026 |
28Monitor | CVE-2026-4786No exploit | Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open()python software foundation · cpython · CWE-77 | High7.0 | — | 0.5% | Apr 13, 2026 |
36Monitor | CVE-2026-6100No exploit | Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressurepython software foundation · cpython · CWE-416 | Critical9.1 | — | 0.8% | Apr 13, 2026 |
22Monitor | CVE-2026-1502No exploit | HTTP client proxy tunnel headers not validated for CR/LFpython software foundation · cpython · CWE-93 | Medium5.7 | — | 0.6% | Apr 10, 2026 |
28Monitor | CVE-2026-4519No exploit | webbrowser.open() allows leading dashes in URLspython · python · CWE-20 | High7.0 | — | 0.4% | Mar 20, 2026 |
24Monitor | CVE-2026-3644No exploit | Incomplete control character validation in http.cookiespython · python · CWE-20 | Medium6.0 | — | 0.5% | Mar 16, 2026 |
22Monitor | CVE-2025-11468No exploit | Folding email comments of unfoldable characters doesn't preserve parenthesispython software foundation · cpython · CWE-93 | Medium5.7 | — | 0.6% | Jan 20, 2026 |
25Monitor | CVE-2025-12084No exploit | Quadratic complexity in node ID cache clearingpython · python · CWE-407 | Medium6.3 | — | 0.8% | Dec 3, 2025 |
17Monitor | CVE-2025-8291No exploit | ZIP64 End of Central Directory (EOCD) Locator record offset not checkedpython software foundation · cpython · CWE-1285 | Medium4.3 | — | 0.5% | Oct 7, 2025 |
30Monitor | CVE-2025-8194No exploit | Tarfile infinite loop during parsing with negative member offsetpython software foundation · cpython · CWE-835 | High7.5 | — | 0.7% | Jul 28, 2025 |
37Monitor | CVE-2025-4517Proof of concept | Arbitrary writes via tarfile realpath overflowpython software foundation · cpython · CWE-22 | Critical9.4 | — | 1.4% | Jun 3, 2025 |
30Monitor | CVE-2025-4435No exploit | Tarfile extracts filtered members when errorlevel=0python software foundation · cpython · CWE-682 | High7.5 | — | 0.6% | Jun 3, 2025 |
30Monitor | CVE-2025-4330No exploit | Extraction filter bypass for linking outside extraction directorypython software foundation · cpython · CWE-22 | High7.5 | — | 0.9% | Jun 3, 2025 |
30Monitor | CVE-2025-4138Proof of concept | Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directorypython software foundation · cpython · CWE-22 | High7.5 | — | 1.4% | Jun 3, 2025 |
21Monitor | CVE-2024-12718No exploit | Bypass extraction filter to modify file metadata outside extraction directorypython software foundation · cpython · CWE-22 | Medium5.3 | — | 0.8% | Jun 3, 2025 |
35Monitor | CVE-2024-12254No exploit | Unbounded memory buffering in SelectorSocketTransport.writelines()python software foundation · cpython · CWE-400 | High8.7 | — | 1.9% | Dec 6, 2024 |
31Monitor | CVE-2024-6232Proof of concept | Regular-expression DoS when parsing TarFile headerspython · python · CWE-1333 | High7.5 | — | 2.2% | Sep 3, 2024 |
34Monitor | CVE-2024-8088No exploit | Infinite loop when iterating over zip archive entry names from zipfile.Pathpython software foundation · cpython · CWE-835 | High8.7 | — | 1.3% | Aug 22, 2024 |
22Monitor | CVE-2024-6923No exploit | Email header injection due to unquoted newlinespython software foundation · cpython · CWE-94 | Medium5.5 | — | 1.1% | Aug 1, 2024 |
- CVE-2026-635721Monitor
pip self-update functionality can import newly installed modules after wheel installation
MediumCVSS 5.3No exploitEPSS 0%pip maintainers · pipApr 27, 2026
- CVE-2026-478628Monitor
Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open()
HighCVSS 7.0No exploitEPSS 0%python software foundation · cpythonApr 13, 2026
- CVE-2026-610036Monitor
Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure
CriticalCVSS 9.1No exploitEPSS 1%python software foundation · cpythonApr 13, 2026
- CVE-2026-150222Monitor
HTTP client proxy tunnel headers not validated for CR/LF
MediumCVSS 5.7No exploitEPSS 1%python software foundation · cpythonApr 10, 2026
- CVE-2026-451928Monitor
webbrowser.open() allows leading dashes in URLs
HighCVSS 7.0No exploitEPSS 0%python · pythonMar 20, 2026
- CVE-2026-364424Monitor
Incomplete control character validation in http.cookies
MediumCVSS 6.0No exploitEPSS 0%python · pythonMar 16, 2026
- CVE-2025-1146822Monitor
Folding email comments of unfoldable characters doesn't preserve parenthesis
MediumCVSS 5.7No exploitEPSS 1%python software foundation · cpythonJan 20, 2026
- CVE-2025-1208425Monitor
Quadratic complexity in node ID cache clearing
MediumCVSS 6.3No exploitEPSS 1%python · pythonDec 3, 2025
- CVE-2025-829117Monitor
ZIP64 End of Central Directory (EOCD) Locator record offset not checked
MediumCVSS 4.3No exploitEPSS 0%python software foundation · cpythonOct 7, 2025
- CVE-2025-819430Monitor
Tarfile infinite loop during parsing with negative member offset
HighCVSS 7.5No exploitEPSS 1%python software foundation · cpythonJul 28, 2025
- CVE-2025-451737Monitor
Arbitrary writes via tarfile realpath overflow
CriticalCVSS 9.4Proof of conceptEPSS 1%python software foundation · cpythonJun 3, 2025
- CVE-2025-443530Monitor
Tarfile extracts filtered members when errorlevel=0
HighCVSS 7.5No exploitEPSS 1%python software foundation · cpythonJun 3, 2025
- CVE-2025-433030Monitor
Extraction filter bypass for linking outside extraction directory
HighCVSS 7.5No exploitEPSS 1%python software foundation · cpythonJun 3, 2025
- CVE-2025-413830Monitor
Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory
HighCVSS 7.5Proof of conceptEPSS 1%python software foundation · cpythonJun 3, 2025
- CVE-2024-1271821Monitor
Bypass extraction filter to modify file metadata outside extraction directory
MediumCVSS 5.3No exploitEPSS 1%python software foundation · cpythonJun 3, 2025
- CVE-2024-1225435Monitor
Unbounded memory buffering in SelectorSocketTransport.writelines()
HighCVSS 8.7No exploitEPSS 2%python software foundation · cpythonDec 6, 2024
- CVE-2024-623231Monitor
Regular-expression DoS when parsing TarFile headers
HighCVSS 7.5Proof of conceptEPSS 2%python · pythonSep 3, 2024
- CVE-2024-808834Monitor
Infinite loop when iterating over zip archive entry names from zipfile.Path
HighCVSS 8.7No exploitEPSS 1%python software foundation · cpythonAug 22, 2024
- CVE-2024-692322Monitor
Email header injection due to unquoted newlines
MediumCVSS 5.5No exploitEPSS 1%python software foundation · cpythonAug 1, 2024