AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
← CVE index
Δ / VULNERABILITY RECORD

CVE-2020-27619.

Source-reported disclosure and enrichment record.

SEVERITY / CVSSCRITICAL / 9.8CVSS 3.1 · nvd@nist.gov
EXPLOITATION STATUSNot listed in the cached KEV catalogThis does not establish absence of exploitation.
RECORD STATUSModifiedModified Oct 08, 2026

Disclosure summary

In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP.

Source-reported weakness categories

NVD-CWE-noinfo

Source-specific records & product guidance

Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.

NIST National Vulnerability Database · NVD-CVE-2020-27619

Open original source · Updated Oct 08, 2026

Only CPE matches marked vulnerable=true are indexed. AND/OR platform conditions must be checked in the original NVD record.

VendorProduct / associationVersion / bounds
pythonpython* {"versionStartIncluding":"3.9.0","versionEndExcluding":"3.9.1"}
fedoraprojectfedora33
fedoraprojectfedora34
oraclecommunications_cloud_native_core_network_function_cloud_native_environment22.2.0

Original records & references

PUBLISHED 2020-10-21T23:16:31-04:00
MODIFIED 2026-10-08T17:17:27-04:00
INGESTED 2026-10-10T20:50:19-04:00