CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-3426 — MEDIUM severity vulnerability | Release Alert
CVE-2021-3426
5.7
MEDIUMCVSS v3
Published
May 20, 2021
CVSS v2
2.7 LOW
Affected
15 projects
Assigned by
Red Hat
Severity scale
010
Description
There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince another local or adjacent user to start a pydoc server could access the server and use it to disclose sensitive information belonging to the other user that they would not normally be able to access. The highest risk of this flaw is to data confidentiality. This flaw affects Python versions before 3.8.9, Python versions before 3.9.3 and Python versions before 3.10.0a7.
ChocolateyPython is a programming language that lets you work more quickly and integrate your systems more effectively. You can learn to use Python and see almost immediate gains in productivity and lower maintenance costs.
## Notes
- This package depends on the the latest major version of python package.
- This package do not support package parameters, please install the package [python315](https://chocolatey.org/packages/python315) directly when using package parameters.
- **If the package is out of date please check [Version History](#versionhistory) for the latest submitted version. If you have a question, please ask it in [Chocolatey Community Package Discussions](https://github.com/chocolatey-community/chocolatey-packages/discussions) or raise an issue on the [Chocolatey Community Packages Repository](https://github.com/chocolatey-community/chocolatey-packages/issues) if you have problems with the package. Disqus comments will generally not be responded to.**
Visual Studio MarketplacePython language support with extension access points for IntelliSense (Pylance), Debugging (Python Debugger), linting, formatting, refactoring, unit tests, and more.