Search: CVE-2025-15366

This security update for python313 addresses multiple vulnerabilities including command injection via user-controlled input and control characters, configuration file injection in the configparser module, improper handling of tarfile extraction leading to arbitrary file read/write and denial of service, trust issues in FTP peer address handling, and a CPU exhaustion denial of service in the Incremental HTMLParser. These issues could allow attackers to execute additional commands, manipulate configuration files, bypass extraction filters, cause denial of service, or read and write arbitrary files.