No, there is nothing inherently insecure about python. However Python can be used to make a vulnerability. For instance it would be easy to make a web portal that executes anything that is typed in. This is true for any programming language, but python makes it extra easy. And I know, you would know better, but IT departments see all their users as idiots (often with good reason). Answer from novel_yet_trivial on reddit.com
Reddit
reddit.com › r/learnpython › potential security risks of using python at work
r/learnpython on Reddit: Potential Security Risks of using Python at Work
January 21, 2025 -
So I wanted to install Python, download Selenium library on it, and combine it with Webdriver to access web-driven accounting software to automate some stuff; mainly downloading reports from the accounting software since there are tones of reports to download every month, which the software does not have automation function for. I don't want to deal with any data.
Senior director and I went to IT for the request to download Python and they declined; they said there is a security risk.
Does anyone know what potential security risks they are referring to? I don't have cs background so I'm not very sure. And is there a way to mitigate those risks?
Top answer 1 of 5
12
A few people have given plausible guesses, but the fact is we can't know how to answer this because we don't know where you work, what systems you're trying to install python and what the security requirements of those systems are. There are a million possible reasons the IT people responsible for security might not want a general-purpose programming environment on a given system. Unfortunately, you have to ask them which ones they are actually concerned about.
2 of 5
11
I feel like you should be asking your IT, not reddit. Regardless, you're using open source resources, if those get compromised, who will be responsible? It would be IT, because they were the ones to allow it. If your senior director is willing to sign some paperwork, placing all financial data breaches due to the use of your tool as their responsibility, then I'm certain IT would be more willing. My additional guess, is that your senior director will not sign such paperwork either.
Security Compass
securitycompass.com › home › kontra › is python secure?
Is Python Secure? - Kontra Hands-on Labs
November 11, 2025 - While Python is secure, it is still vulnerable to common security issues such as injection attacks, insecure libraries, and improper user input handling. These vulnerabilities don’t arise from Python but from how it is used in specific contexts, ...
Videos
02:04
open source python code is less secure today due to not succumbing ...
22:29
Securing Python Applications - YouTube
08:34
5 Lesser Known Python Security Pitfalls - YouTube
01:07:02
Secure coding for Python with SheHacksPurple Talk Python to Me ...
18:23
Secure Coding Guide for Python - David Mather & Bart Karas, Ericsson ...
06:00
Why Python apps are becoming less secure - YouTube
What is Python secure coding and why is it important?
Python secure coding refers to writing code that defends against security vulnerabilities such as code injection, cross-site scripting (XSS), and data exposure. It involves validating user inputs, avoiding hardcoded credentials, using secure libraries, and applying proper authentication mechanisms. At Binmile, we embed secure coding principles into the development lifecycle to protect our clients’ applications from evolving cyber threats.
binmile.com
binmile.com › blog › python-security-best-practices-and-strategies
Top 7 Python Security Best Practices: What You Need to Know
Why is Python security important in software development?
Python security is crucial because Python is widely used in building web applications, automation scripts, data pipelines, and even financial platforms—making it a prime target for cyber threats. Poorly secured Python code can lead to data breaches, unauthorized access, code injection attacks, and severe system vulnerabilities. By following security best practices, developers can safeguard sensitive information, ensure regulatory compliance, and build user trust. Additionally, as applications scale and integrate with external services or APIs, the risk of exposure increases—so prioritizing sec
binmile.com
binmile.com › blog › python-security-best-practices-and-strategies
Top 7 Python Security Best Practices: What You Need to Know
How does Binmile ensure the security of Python applications developed for clients?
Binmile follows secure coding guidelines and best practices throughout the development lifecycle.
We conduct code reviews with a focus on identifying potential security vulnerabilities.
We utilize static and dynamic application security testing (SAST/DAST) tools to automate vulnerability detection.
Our team stays updated on the latest security threats and proactively implements preventative measures.
We can provide penetration testing services to evaluate the security posture of the application.
We emphasize the importance of secure deployment practices and ongoing security monitoring.
binmile.com
binmile.com › blog › python-security-best-practices-and-strategies
Top 7 Python Security Best Practices: What You Need to Know
Aqua Security
aquasec.com › home › application security › python security
Python Security: 6 Common Risks & What You Can Do About Them
July 23, 2024 - Most Python programs create temporary files. You can generate arbitrary filenames using the mktemp() function. However, this feature is not completely secure. Because the name is randomly generated, you may end up with another file with the same name. Doing so will overwrite other previously saved files and may result in loss of information. Attackers can manipulate this behavior to obtain sensitive data from temporary files.
Reddit
reddit.com › r/python › is python a security vulnerability?
r/Python on Reddit: Is Python a Security Vulnerability?
November 20, 2017 -
I recently sent a request to my employer's IT department asking for access to Python 3.6.3. The request was denied with the justification "Python is dangerous to have on a pc. It is a useful attack vector."
Can anyone provide insight on what this might mean? Does simply having Python installed on your computer make you more susceptible to attacks? I can't tell if my employer has a valid concern here or if they are just taking the easy route.
EDIT: Spelling
Top answer 1 of 12
37
No, there is nothing inherently insecure about python.
However Python can be used to make a vulnerability. For instance it would be easy to make a web portal that executes anything that is typed in. This is true for any programming language, but python makes it extra easy.
And I know, you would know better, but IT departments see all their users as idiots (often with good reason).
2 of 12
19
Every Macintosh and a lot of Linux distributions for desktop have Python installed by default. I don't think they are unsafe.
Python
python.org › dev › security
Python Security | Python.org
To reach the response team, send email to security at python dot org. Only the response team members will see your email, and it will be treated confidentially. The PSRT mailing list is tightly controlled, so you can have confidence that your security issue will only be read by a highly trusted cabal of Python developers.
Qwiet AI
qwiet.ai › appsec-resources › secure-python-development-guidelines
Secure Python Development Guidelines - Preventing the Unpreventable | Qwietᴬᴵ
February 7, 2025 - The second example uses a parameterized query, where ? is a placeholder that safely incorporates username into the query, preventing SQL Injection. We’ve gone through the basics of keeping Python code safe from big online threats, like hackers trying to sneak in or mess with data. Keeping code secure is a never-ending job that needs careful attention and sticking to smart safety steps.
Binmile
binmile.com › blog › python-security-best-practices-and-strategies
Top 7 Python Security Best Practices: What You Need to Know
July 16, 2025 - After all, it’s not just about coding that works; it’s also about developing digital products that can stand against the threats of cybercriminals or security threats. Even though Python is a crowd-favorite for its simplicity, versatility, and a large collection of libraries, it’s still not exempt from security vulnerabilities.
Address 2803 Philadelphia Pike, Suite B 191, 19703, Claymont
Medium
medium.com › codex › python-was-is-and-will-always-be-vulnerable-programming-language-and-hackers-love-this-fab5cfa744f1
Python was, is and will always be VULNERABLE Programming Language (And HACKERS Love this) | by Sabrina Carpenter 🐍 | CodeX | Medium
January 22, 2022 - The problem with these vulnerabilities was that they could allow hackers to take over systems without even being detected by most antivirus programs or firewalls. Because of these vulnerabilities, we need to make sure that our systems are protected ...
Spectral
spectralops.io › home › 4 reasons why python libraries are not secure
4 Reasons why Python libraries are not secure - Spectral
August 23, 2024 - The malicious libraries were removed from PyPI, but in 2021, it was recorded that almost half of all packages in PyPI contain problematic or potentially exploitable code. This security issue raises an alarm for organizations that use open-source ...
ZDNET
zdnet.com › home › tech › security
Python is a hit with hackers, report finds | ZDNET
The company says more than a third of daily attacks against sites the company protects come from a malicious or legitimate tool coded in Python. Imperva says that around 77 percent of all the sites the company protects, have been attacked by ...
Published July 11, 2019
ActuIA
actuia.com › en › news › is-python-secure
Is Python secure?
February 14, 2025 - In more than 60% of Python projects, there are code-related items present in the OWASP TOP 10 2021 issues. These types of issues can lead cybercriminals to inject client-side scripts into websites (XSS).
HackerNoon
hackernoon.com › why-do-ethical-hackers-use-python
Why Do Ethical Hackers Use Python? | HackerNoon
September 30, 2021 - In recent years, Python has allowed ethical hackers to create scripts and automate structured processes. Ethical hacking using Python is helping to identify vulnerabilities and potential threats to computer networks.
Kiuwan
kiuwan.com › blog › python-security-best-practices
Python Security Best Practices | Kiuwan
January 7, 2026 - While Python is not inherently more vulnerable to XSS attacks than other programming languages, its flexibility can be its downfall. For example, flexible string handling can make it easier for hackers to exploit your app if you don’t sanitize ...
Quora
quora.com › Is-the-Python-language-secure
Is the Python language secure? - Quora
Answer (1 of 4): Security has very little to do with the language. You can do very secure things is any language, and also very insecure things. The program usually does what you tell it to do, if you are sloppy and careless then the software ...
Aikido
aikido.dev › home › articles › top 10 python security vulnerabilities developers should avoid
Python Security Vulnerabilities | Top Issues
January 29, 2026 - Python is loved for its simplicity, but that same flexibility can turn dangerous if secure coding practices are neglected. From code injection pitfalls to vulnerable third-party libraries, even a small oversight can open the door for attackers.
Black Duck
blackduck.com › blog › python-security-best-practices.html
Six Python Security Best Practices for Developers | Black Duck Blog
March 18, 2024 - But like all programming languages, Python is not immune to security threats. Secure coding best practices must be adopted to avoid risks from attackers.
Quora
quora.com › Is-Python-safe-for-my-computer
Is Python safe for my computer? - Quora
Answer (1 of 6): Considering Python is in regular use across tens of thousands of computer systems across the world; everything from desktop machines, to internet servers, to small devices on the Internet of Things. There is no reason to suspect that Python is any less safe than any other softwa...
Edureka
edureka.co › blog › ethical-hacking-using-python
Hacking With Python - Beginners Guide With Examples
July 15, 2025 - Ethical hackers generally develop small scripts and python being a scripting language provides amazing performance for small programs · Python has a huge community, hence any doubt related programming is quickly solved by the community · Learning Python also opens up your doors to several other career opportunities · Gain valuable insights into the Cyber Security industry and prepare for a successful career path during this Cybersecurity Internship.
Qwiet AI
qwiet.ai › hacking-and-securing-python-applications
Hacking and Securing Python Applications - Preventing the Unpreventable | Qwietᴬᴵ
July 31, 2023 - A good way to prevent trust boundary violation is to never write untrusted input into session stores until it is verified. See an example of this mitigation implemented in Python here. What other security concepts do you want to learn about? I’d love to know. Feel free to connect on Twitter @vickieli7. Now that you know how to fix these vulnerabilities, secure your Python application by scanning for these vulnerabilities! ShiftLeft CORE can find these vulnerabilities in your application, show you how to fix these bugs, and protect you from Python security issues.
Webscale
section.io › home › blog
Securing your Python Application from Hackers
June 24, 2025 - Both live in a chat widget. Both answer questions. But one is built to deflect. The other is built to sell.