Windows apps · Application version · December 3, 2024

Python 3.13 3.13.1

Python 3.13 3.13.1, released December 3, 2024, fixes 5 CVEs in Python 3.13 (version 3.13.1). None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0230

83rd percentile

Priority of the 5 CVEs

Patch now 0
                                Urgent 0
                                High 3
                                Routine 2

Applies to

Product	Version
Python 3.13	3.13.1

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2024-7592	Quadratic complexity parsing cookies with backslashes	7.5	0.0230	None reported
High	CVE-2024-6232	Regular-expression DoS when parsing TarFile headers	7.5	0.0220	None reported
High	CVE-2024-9287	Virtual environment (venv) activation scripts don't quote paths	7.8	0.0065	None reported
Routine	CVE-2023-38898	Python 3.13: An issue in Python cpython v.3.7 allows an attacker to obtain sensitive information via the _asyncio._swap_current_task…	5.3	0.0174	None reported
Routine	CVE-2023-6507	Groups not dropped before running subprocess when using empty 'extra_groups' parameter	4.9	0.0134	None reported