← All credits

Gregory P. Smith (https://github.com/gpshead)

6 vulnerability records and advisories credit this contributor.

Use-after-free of a server-side SSLContext when sni_callback switches contexts

The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection

pip can extract console_scripts and gui_scripts outside installation directory

Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations

tarfile.data_filter path traversal bypass allows writing outside the extraction directory

FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address