Python
A general-purpose language and runtime, popular for web apps.
Where It Sits
The small stack marks its layer. Beside it, each related technology links to its own page.
- App
- Framework
- Web Server
- RuntimePython
- Containers
- OS
- Hypervisor
- Firmware
- Hardware
- Data
About
Python is a general-purpose language whose runtime also powers many web applications. Frameworks such as Django run on it, served by an app server such as Gunicorn, usually with nginx in front. It is a rival to the other runtimes on this layer.
How to Spot It
These are signs that a system runs Python, seen from outside without signing in, such as a response header, a cookie, a path or a default port. They help you find where it runs across your own estate. A version shown to the world also tells anyone scanning which flaws might apply, so it is worth hiding.
- Response header
Server: gunicorn- Response header
Server: Werkzeug/3.0.1 Python/3.11.6
If It Has a Flaw
A flaw in the Python runtime reaches every Python application on the machine, below any single app's own controls.
A flaw exposes what runs on it and the data it reaches.
- Framework and Libraries
Django- Web and App Servers
Gunicorn- Data
PostgreSQL
Rivals
Rivals do the same job on the same layer, so a system usually runs one of them in any one place. A flaw in a rival does not reach Python.
Stacks and Code
Python is part of the common stacks below, and each stack's page shows who runs every layer. Its code arrives from the sources listed, and each source's page says how bad code could get in through it.
- In Common Stacks
- A Django App
- Its Code Comes From
PyPIOS Packages