UpHeron
All vulnerabilities

Servers and applications

CVE-2021-3426

There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince another local or adjacent user to start a pydoc server could access the server and use it to disclose sensitive information belonging to the other user that they would not normally be able to access. The highest risk of this flaw is to data confidentiality. This flaw affects Python versions…

Severity
Medium 5.7
Published
20 May 2021
Last changed
14 Oct 2026
Added to UpHeron
21 Oct 2026
Fixed in
2.7.18, 3.6.13, 3.7.10, 3.8.8, 3.9.3
Sources
NVD

Affected software

SoftwareAffected versions
PythonServers and applications · cpe:a:python:python
  • Version 3.10.0-alpha6
  • Version 3.10.0-alpha5
  • Version 3.10.0-alpha4
  • Version 3.10.0-alpha3
All 11 release lines
  • Every version before 2.7.18
  • From 3.6.0 before 3.6.13
  • From 3.7.0 before 3.7.10
  • From 3.8.0 before 3.8.8
  • From 3.9.0 before 3.9.3
  • Version 3.10.0-alpha1
  • Version 3.10.0-alpha2
  • Version 3.10.0-alpha3
  • Version 3.10.0-alpha4
  • Version 3.10.0-alpha5
  • Version 3.10.0-alpha6

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-3426
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-3426