CVE-2020-27619

CriticalCVSS 9.8/10Last modified Oct 8, 2026

Description

In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Oct 22, 2020
Last modified
Oct 8, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-27624.9Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.19 and prior. EaCVE-2020-276206.1The Cosmos Skin for MediaWiki through 1.35.0 has stored XSS because MediaWiki messages were not being properly escaped. This is related to wCVE-2020-276214.3The FileImporter extension in MediaWiki through 1.35.0 was not properly attributing various user actions to a specific user's IP address. InCVE-2020-276225.3In JetBrains IntelliJ IDEA before 2020.2, the built-in web server could expose information about the IDE version.CVE-2020-276237.5JetBrains IdeaVim before version 0.58 might have caused an information leak in limited circumstances.CVE-2020-276245.3JetBrains YouTrack before 2020.3.888 was vulnerable to SSRF.CVE-2020-276255.3In JetBrains YouTrack before 2020.3.888, notifications might have mentioned inaccessible issues.CVE-2020-276265.3JetBrains YouTrack before 2020.3.5333 was vulnerable to SSRF.CVE-2020-276276.1JetBrains TeamCity before 2020.1.2 was vulnerable to URL injection.CVE-2020-276284.3In JetBrains TeamCity before 2020.1.5, the Guest user had access to audit records.CVE-2020-276295.3In JetBrains TeamCity before 2020.1.5, secure dependency parameters could be not masked in depending builds when there are no internal artifCVE-2020-27634.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 5.6.47
CVE-2020-27619: Critical severity, CVSS 9.8 | Vulnix