Is python2.7 safe to use?

Vulert records 58 vulnerabilities for python2.7 in Ubuntu: 0 critical, 0 high, 0 medium and 0 low, plus 58 not yet rated. 11 of them have no published fix yet, so those are the ones to avoid or mitigate.

How many vulnerabilities does python2.7 have?

58 vulnerabilities are recorded for python2.7 in the Ubuntu ecosystem: 0 critical, 0 high, 0 medium and 0 low, plus 58 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new python2.7 vulnerabilities disclosed?

0 vulnerabilities were recorded for python2.7 in the last 12 months, and the oldest entry in this database dates to 28 Aug 2007. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of python2.7 are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor python2.7 for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at https://vulert.com/scanner and Vulert keeps checking the python2.7 version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.

Vulnerability Database · Ubuntu · Package report

python2.7: vulnerability history, versions and safety

python2.7 is a package in the Ubuntu ecosystem. Vulert records 58 vulnerabilities for it across 38 releases, from Aug 2007 to Sep 2025. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

58 vulnerabilities recorded U58

11 with no fix published

No patched version yet — these are the ones to plan around.

See the unfixed vulnerabilities →

0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →

0 malicious-package vulnerabilities

No published version shipped hostile code.

See all python2.7 vulnerabilities

Vulert verdict on python2.7 i

Updated on 23 Oct 2026

Careful: 11 of the 58 vulnerabilities Vulert records for this package have no fix yet. Plan around those, or apply the workaround listed for each. The rest have a fixed version to move to.

Long-term outlook: usable, but needs attention 58 vulnerabilities on record across 18 years, none in the last year.

What to do: Plan around the 11 vulnerabilities with no published fix: each lists the affected range and any workaround that reduces exposure. No fix yet: Vulert alerts you the moment one is published. Monitor it with Vulert →

Vulnerabilities on record 58 over 18 years · 0 in the last year i
Latest disclosure 29 Sep 2025 i
Highest CVSS 9.8 i
With no published fix 11 i

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

Scan your app free →

01 Versions

Which versions are affected

Every version Vulert holds for python2.7, newest first, with the vulnerabilities that name it. A version with a count of zero has no recorded vulnerabilities; open a version to see the vulnerabilities it is exposed to.

Version	Vulert vulnerabilities	Fix published	Details
2.7.6-8	U58	No	Details →
2.7.6-8ubuntu0.6+esm28	U8	No	Details →
2.7.6-8ubuntu0.6+esm26	U12	No	Details →
2.7.6-8ubuntu0.6+esm25	U14	No	Details →
2.7.6-8ubuntu0.6+esm24	U15	No	Details →
2.7.6-8ubuntu0.6+esm22	U17	No	Details →
2.7.6-8ubuntu0.6+esm21	U18	No	Details →
2.7.6-8ubuntu0.6+esm20	U21	No	Details →
2.7.6-8ubuntu0.6+esm18	U25	No	Details →
2.7.6-8ubuntu0.6+esm17	U28	No	Details →
2.7.6-8ubuntu0.6+esm16	U30	No	Details →
2.7.6-8ubuntu0.6+esm15	U32	No	Details →
2.7.6-8ubuntu0.6+esm14	U34	No	Details →
2.7.6-8ubuntu0.6+esm13	U35	No	Details →
2.7.6-8ubuntu0.6+esm12	U37	No	Details →
2.7.6-8ubuntu0.6+esm11	U40	No	Details →
2.7.6-8ubuntu0.6+esm10	U42	No	Details →
2.7.6-8ubuntu0.6+esm9	U44	No	Details →
2.7.6-8ubuntu0.6+esm8	U45	No	Details →
2.7.6-8ubuntu0.6+esm7	U45	No	Details →
2.7.6-8ubuntu0.6+esm6	U45	No	Details →
2.7.6-8ubuntu0.6+esm5	U48	No	Details →
2.7.6-8ubuntu0.6+esm3	U50	No	Details →
2.7.6-8ubuntu0.6+esm2	U52	No	Details →
2.7.6-8ubuntu0.5	U58	No	Details →
2.7.6-8ubuntu0.4	U58	No	Details →
2.7.6-8ubuntu0.3	U58	No	Details →
2.7.6-8ubuntu0.2	U58	No	Details →
2.7.6-7	U58	No	Details →
2.7.6-5	U58	No	Details →
2.7.6-4	U58	No	Details →
2.7.6-4ubuntu1	U58	No	Details →
2.7.6-3	U58	No	Details →
2.7.6-3ubuntu1	U58	No	Details →
2.7.6-2	U58	No	Details →
2.7.6-2ubuntu1	U58	No	Details →
2.7.5-8ubuntu4	U58	No	Details →
2.7.5-8ubuntu3	U58	No	Details →

Newest 38 of 38 versions on record. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

2007 1
2014 2
2018 1
2019 10
2020 3
2021 4
2022 8
2023 11
2024 10
2025 8

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 58 were recorded in the last 12 months.

Other ways into the data

03 Vulnerabilities

Recorded vulnerabilities for python2.7

Vulnerability	Severity	Fixed version ↓	Disclosed ↓
Critical Buffer Overflow Vulnerability in Python Packages: CVE-2021-3177	9.8 critical	2.7.6-8ubuntu0.6+esm10	19 Jan 2021
Critical Directory Traversal Vulnerability in Python Packages: CVE-2007-4559	9.8 critical	No fix published	28 Aug 2007
Critical Vulnerability in Python Packages: CVE-2019-10160	9.8 critical	2.7.6-8ubuntu0.6+esm2	07 Jun 2019
Critical Vulnerability in Python Packages: CVE-2019-9636 - Information Disclosure Risk	9.8 critical	2.7.6-8ubuntu0.6+esm2	08 Mar 2019
Critical XML External Entity Vulnerability in Python Packages	9.8 critical	2.7.6-8ubuntu0.6+esm16	22 Aug 2023

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315