CVE-2025-0938: URL parser allowed square brackets in domain names
Deferred
AliasesALPINE-CVE-2025-0938SUSE-SU-2025:0419-1SUSE-SU-2025:0434-1SUSE-SU-2025:0502-1SUSE-SU-2025:0514-1SUSE-SU-2025:0551-1SUSE-SU-2025:0552-1SUSE-SU-2025:0553-1SUSE-SU-2025:0554-1SUSE-SU-2025:0756-1SUSE-SU-2025:0814-1SUSE-SU-2025:20346-1RHSA-2025:6977RHSA-2025:7107RHSA-2025:7109RHSA-2026:5588UBUNTU-CVE-2025-0938USN-7280-1USN-7280-2USN-7348-2DEBIAN-CVE-2025-0938CGA-79g3-9jmv-v39jCGA-9jm2-92j9-6j5hCGA-grvg-rqx9-7qcgCGA-h8j3-8r3w-3r5rCGA-h8w3-v52w-xgr3CGA-hjxf-2929-v7xpCGA-mmh7-3wrq-48mhCGA-x59j-9jf8-vmq3SUSE-SU-2025:0386-1SUSE-SU-2025:0406-1openSUSE-SU-2025:14750-1openSUSE-SU-2025:14751-1openSUSE-SU-2025:14758-1openSUSE-SU-2025:14759-1openSUSE-SU-2025:14760-1openSUSE-SU-2025:14761-1CGA-42vh-qv2v-26gcCGA-539h-9pc8-9966
Published 31-01-2025Last modified 31-07-2026
Vulnerability summary
CVE-2025-0938 is a medium (CVSS 6.3) Improper Input Validation vulnerability in python software foundation cpython. EPSS estimates a 1.56% chance of exploitation in the next 30 days, higher than 75.1% of scored vulnerabilities.
Priority
Routine
Not severe (CVSS 6.3, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?CVSS score
6.3/10
010
Medium · v4.0 (CVE.org)EPSS score
1.56%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 12 · Related 10Timeline
- 31-01-2025PublishedVulnerability first disclosed.
- 31-07-2026Last modifiedVulnerability information updated.
Description
The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that included square brackets which isn't valid according to RFC 3986. Square brackets are only meant to be used as delimiters for specifying IPv6 and IPvFuture hosts in URLs. This could result in differential parsing across the Python URL parser and other specification-compliant URL parsers.
CVSS metrics
8 scores · 8 sources · 2 versionsMedium 6.3Preferred score · CVE.org (CNA)
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:NSourcesAll 7 agree
- OSV · AlpineEcosystem advisory · calculated6.3MediumCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- OSV · UbuntuEcosystem advisory · calculated6.3MediumCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N
- OSV · DebianEcosystem advisory · calculated6.3MediumCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- OSV · WolfiEcosystem advisory · calculated6.3MediumCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N
- OSV · ChainguardEcosystem advisory · calculated6.3MediumCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N
- NVDNIST6.3MediumCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Medium 6.8Preferred score · OSV · Red hat (Ecosystem advisory) · calculated from vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:NSourcesSingle source
EPSS trend
Probability
1.56%
Chance of exploitation in the next 30 days
Percentile
75%
Versus all other CVEs
30-day change
No change 0.00 pp
From 1.56% on 04-10-2026
04-10-202603-11-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Version check
Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Redhat34 products
- platform-python< 0:3.6.8-74.el8_10
- platform-python-debug< 0:3.6.8-74.el8_10
- platform-python-devel< 0:3.6.8-74.el8_10
- python-unversioned-command< 0:3.9.21-2.el9
- python3< 0:3.9.21-2.el9 | < 0:3.6.8-74.el8_10
Suse29 products
- python-base&distro=SUSE Linux Enterprise Module for Package Hub 15 SP6< 2.7.18-150000.71.1 | < 2.7.18-150000.74.1
- python-base&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5< 2.7.18-33.41.1 | < 2.7.18-33.44.1
- python-doc&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5< 2.7.18-33.41.1 | < 2.7.18-33.44.1
- python3-base&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5< 3.4.10-25.148.1
- python3-core&distro=SUSE Linux Enterprise Micro 5.1< 3.6.15-150000.3.170.1
Opensuse21 products
- python-base&distro=openSUSE Leap 15.6< 2.7.18-150000.71.1 | < 2.7.18-150000.74.1
- python-doc&distro=openSUSE Leap 15.6< 2.7.18-150000.71.1 | < 2.7.18-150000.74.1
- python3-core&distro=openSUSE Leap 15.6< 3.6.15-150300.10.81.1
- python3-documentation&distro=openSUSE Leap 15.6< 3.6.15-150300.10.81.1
- python310-core&distro=openSUSE Leap 15.6< 3.10.16-150400.4.69.1
Ubuntu11 products
- pypy3All versions (No fix recorded)
- python2.7< 2.7.6-8ubuntu0.6+esm25 | < 2.7.6-8ubuntu0.6+esm28 | < 2.7.12-1ubuntu0~16.04.18+esm16 | < 2.7.17-1~18.04ubuntu1.13+esm11 | < 2.7.18-1~20.04.7+esm7 | < 2.7.18-13ubuntu1.5+esm6
- python3.10< 3.10.12-1~22.04.9
- python3.11< 3.11.0~rc1-1~22.04.1~esm3
- python3.12< 3.12.3-1ubuntu0.5
Chainguard5 products
- python-3.10< 3.10.19-r0
- python-3.11< 3.11.14-r0
- python-3.12< 3.12.9-r0
- python-3.13< 3.13.2-r0
- python-3.9< 3.9.25-r0
Wolfi4 products
- python-3.10< 3.10.19-r0
- python-3.11< 3.11.14-r0
- python-3.12< 3.12.9-r0
- python-3.13< 3.13.2-r0
Debian3 products
- pypy3All versions (No fix recorded) | < 7.3.18+dfsg-2
- python3.11< 3.11.2-6+deb12u6
- python3.13< 3.13.2-1
Alpine1 product
- python3< 3.11.12-r0 | < 3.12.9-r0
Python software foundation1 product
- cpython< 3.9.22 | ≥ 3.10.0, < 3.10.17 | ≥ 3.11.0, < 3.11.12 | ≥ 3.12.0, < 3.12.9 | ≥ 3.13.0, < 3.13.2 | ≥ 3.14.0a1, < 3.14.0a5
9 vendors · 109 products
References
59 links- mail.python.org/archives/list/security-announce@python.org/thread/K4EUG6EKV6JYFIC24BASYOZS4M5XOQIB/Vendor AdvisoryREPORTAdvisory
Show all 59 references
- github.com/python/cpythonPACKAGE
- lists.opensuse.org/archives/…Advisory
- lists.opensuse.org/archives/…Advisory
- lists.opensuse.org/archives/…Advisory
- lists.opensuse.org/archives/…Advisory
- lists.opensuse.org/archives/…Advisory