Skip to content

Vendor

pypy vulnerabilities

2 published CVES affecting pypy, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
1
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of pypy alerts

Products

Latest pypy CVEs

Newest publication first

  1. CVE-2026-76875 PyPy pyexpat ExternalEntityParserCreate Use-After-Free

    Published
    MediumCVSS 6.3 EPSS 0.24%

    PyPy before versions 3.11.16 and 3.12.14 contains a use-after-free vulnerability in the pyexpat module's ExternalEntityParserCreate function that allows attackers to corrupt memory by supplying a crafted XML document to applications that create external-entity sub-parsers without...

  2. CVE-2022-37454 Buffer overflow in sponge queue functions

    Published
    CriticalCVSS 9.8 EPSS 7.4% PoC

    The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.