Ubuntu Python-apt — known CVE vulnerabilities

Every CVE whose affected-product data names Ubuntu Python-apt, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2025-6966 — CVSS 5.5 (medium): NULL pointer dereference in TagSection.keys() in python-apt on APT-based Linux systems allows a local attacker to cause a denial of service…
• CVE-2019-15795 — CVSS 4.7 (medium): python-apt only checks the MD5 sums of downloaded files in `Version.fetch_binary()` and `Version.fetch_source()` of apt/package.py in…
• CVE-2019-15796 — CVSS 4.7 (medium): Python-apt doesn't check if hashes are signed in `Version.fetch_binary()` and `Version.fetch_source()` of apt/package.py or in…