fence-agents-apc-snmp vulnerabilities (AlmaLinux)
30 vulnerabilities.
-
fence-agents-apc-snmpAlmaLinux PyJWT BOM Bypass 7.4 High -
fence-agents-apc-snmpAlmaLinux PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guard 7.4 High -
fence-agents-apc-snmpAlmaLinux PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard 9.1 Critical -
fence-agents-apc-snmpAlmaLinux PyJWT: PyJWKClient follows redirects when fetching JWKS 7.4 High -
fence-agents-apc-snmpAlmaLinux PyJWK accepts empty HMAC keys, bypassing PyJWT's empty-key validation 7.4 High -
fence-agents-apc-snmpAlmaLinux pyasn1: Uncontrolled resource consumption when converting decoded REAL values 7.5 High -
fence-agents-apc-snmpAlmaLinux httplib2: Decompression Bomb Denial of Service via Unbounded gzip/deflate Response Handling 7.5 High -
fence-agents-apc-snmpAlmaLinux PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed 7.4 High -
fence-agents-apc-snmpAlmaLinux urllib3: Sensitive headers forwarded across origins in proxied low-level redirects 8.2 High -
fence-agents-apc-snmpAlmaLinux pyasn1 Vulnerable to Denial of Service via Unbounded Recursion 7.5 High -
fence-agents-apc-snmpAlmaLinux PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation) 7.5 High -
fence-agents-apc-snmpAlmaLinux cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves 8.2 High -
fence-agents-apc-snmpAlmaLinux pyasn1 has a DoS vulnerability in decoder 7.5 High -
fence-agents-apc-snmpAlmaLinux urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) 8.9 High -
fence-agents-apc-snmpAlmaLinux urllib3 Streaming API improperly handles highly compressed data 8.9 High -
fence-agents-apc-snmpAlmaLinux urllib3 allows an unbounded number of links in the decompression chain 8.9 High -
fence-agents-apc-snmpAlmaLinux Requests vulnerable to .netrc credentials leak via malicious URLs 5.3 Medium -
fence-agents-apc-snmpAlmaLinux setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write 7.7 High -
fence-agents-apc-snmpAlmaLinux Remote Code Execution in pypa/setuptools 8.8 High -
fence-agents-apc-snmpAlmaLinux Proxy-Authorization request header isn't stripped during cross-origin redirects in urllib3 4.4 Medium -
fence-agents-apc-snmpAlmaLinux Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter 5.4 Medium -
fence-agents-apc-snmpAlmaLinux Jinja vulnerable to Cross-Site Scripting (XSS) 5.4 Medium -
fence-agents-apc-snmpAlmaLinux PyCryptodome and pycryptodomex side-channel leakage for OAEP decryption 5.9 Medium -
fence-agents-apc-snmpAlmaLinux Request body not stripped after redirect in urllib3 4.2 Medium -
fence-agents-apc-snmpAlmaLinux `Cookie` HTTP header isn't stripped on cross-origin redirects 5.9 Medium -
fence-agents-apc-snmpAlmaLinux Certifi's removal of e-Tugra root certificate 7.5 High -
fence-agents-apc-snmpAlmaLinux OAuthLib vulnerable DoS when attacker provides malicious IPV6 URI 5.7 Medium -
fence-agents-apc-snmpAlmaLinux fence-agents bug fix and enhancement update No score -
fence-agents-apc-snmpAlmaLinux fence-agents bug fix and enhancement update No score -
fence-agents-apc-snmpAlmaLinux fence-agents bug fix and enhancement update No score