Windows apps · Application version · June 3, 2025

Python 3.13 3.13.4

Python 3.13 3.13.4, released June 3, 2025, fixes 6 CVEs in Python 3.13 (version 3.13.4). None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0149

74th percentile

Priority of the 6 CVEs

Patch now 0
                                Urgent 0
                                High 5
                                Routine 1

Applies to

Product	Version
Python 3.13	3.13.4

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2025-4138	Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory	7.5	0.0149	None reported
High	CVE-2025-4517	Arbitrary writes via tarfile realpath overflow	9.4	0.0148	None reported
High	CVE-2025-4330	Extraction filter bypass for linking outside extraction directory	7.5	0.0097	None reported
High	CVE-2024-12718	Bypass extraction filter to modify file metadata outside extraction directory	7.6	0.0083	None reported
High	CVE-2025-4435	Tarfile extracts filtered members when errorlevel=0	7.5	0.0062	None reported
Routine	CVE-2025-4516	Use-after-free in "unicode_escape" decoder with error handler	5.9	0.0023	None reported