Windows apps · Python Software Foundation

Python 3.13 security updates

The latest version of Python 3.13 is 3.13.17, released October 21, 2026. Patch Radar has 11 security fixes for Python 3.13, closing 57 CVEs. The newest is Python 3.13 3.13.16 (3.13.16), released September 30, 2026. 9 CVEs have no fix yet.

9 with no fix yet
Latest version
3.13.17
Released Oct 21, 2026
Security fixes
11
On record in Patch Radar
CVEs
57
Closed by those fixes
Exploited
0
Vendor report or CISA KEV

CVEs with no fix yet

PriorityCVETitleStatus
Urgent CVE-2026-115557 Distrust compromised intermediate certificates in ssl moduleno-fix
High CVE-2025-15367 POP3 command injection in user-controlled commandsno-fix
Routine CVE-2024-3220 Default mimetype known files writeable on Windowsno-fix
Routine CVE-2026-103995 Lenient parsing of integers for response body and chunk framingno-fix
Routine CVE-2026-114583 tar filter allows writing outside destination via empty-named symlinkno-fix
Routine CVE-2026-116566 socket.getaddrinfo() accepts embedded null bytes in host and portno-fix
Routine CVE-2026-12345 Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directoryno-fix
Routine CVE-2026-19672 tarfile extraction filter bypass allows creation of directories outside the destinationno-fix
Routine CVE-2026-3087 shutil.unpack_archive() doesn't check for Windows absolute paths in ZIPsno-fix

Security fixes, newest first

PriorityFixFixed inCVEsExploitedReleased
Urgent Python 3.13 3.13.163.13.16 7 Sep 30, 2026
High Python 3.13 3.13.153.13.15 8 Aug 5, 2026
High Python 3.13 3.13.143.13.14 10 Jun 10, 2026
High Python 3.13 3.13.133.13.13 7 Apr 7, 2026
High Python 3.13 3.13.123.13.12 5 Feb 3, 2026
High Python 3.13 3.13.113.13.11 3 Dec 5, 2025
Routine Python 3.13 3.13.103.13.10 3 Dec 2, 2025
High Python 3.13 3.13.63.13.6 1 Aug 6, 2025
High Python 3.13 3.13.43.13.4 6 Jun 3, 2025
High Python 3.13 3.13.23.13.2 2 Feb 4, 2025
High Python 3.13 3.13.13.13.1 5 Dec 3, 2024