ZeroDay Findings
Sign inSign up

Findings

CVE-2020-15801

In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations.

Published Jul 17, 2020 · updated Oct 14, 2026 · python python

In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations. The ._pth file (e.g., the python._pth file) is not affected.

Timeline

Detection, updates, and resolution for this record.

  1. Jul 17, 2020 · NIST NVD

    Detected

    In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations. The ._pth file (e.g., the python._pth file) is not affected.

  2. Oct 14, 2026 · NIST NVD

    Updated

    In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations. The ._pth file (e.g., the python._pth file) is not affected.

Affected

  • cpe netapp/max dataversion unspecified
  • cpe python/pythonversion unspecified

Sources

  • CVE.orgCVE-2020-15801

    Official CVE identifier

    cve.org
  • NIST NVDCVE-2020-15801

    In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations. The ._pth file (e.g., the python._pth file) is not affected.

    nvd.nist.gov

References