pcs vulnerabilities (AlmaLinux)
40 vulnerabilities.
-
pcsAlmaLinux Tornado: Urlencoded body parsing omits max_num_fields, so one request can stall the event loop 7.5 High -
pcsAlmaLinux lodash vulnerable to Code Injection via `_.template` imports key names 8.1 High -
pcsAlmaLinux Tornado has a DoS due to too many multipart parts 8.7 High -
pcsAlmaLinux Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions 6.9 Medium -
pcsAlmaLinux Tornado is Vulnerable to Quadratic DoS via Crafted Multipart Parameters 7.5 High -
pcsAlmaLinux Tornado is Vulnerable to Quadratic DoS via Repeated Header Coalescing 7.5 High -
pcsAlmaLinux Rack is vulnerable to a memory-exhaustion DoS through unbounded URL-encoded body parsing 7.5 High -
pcsAlmaLinux Rack's multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion) 7.5 High -
pcsAlmaLinux Rack's multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion) 7.5 High -
pcsAlmaLinux Rack's unbounded multipart preamble buffering enables DoS (memory exhaustion) 7.5 High -
pcsAlmaLinux Rack QueryParser has an unsafe default allowing params_limit bypass via semicolon-separated parameters 7.5 High -
pcsAlmaLinux Tornado vulnerable to excessive logging caused by malformed multipart form data 7.5 High -
pcsAlmaLinux Unbounded-Parameter DoS in Rack::QueryParser 7.5 High -
pcsAlmaLinux Tornado has HTTP cookie parsing DoS vulnerability 7.5 High -
pcsAlmaLinux Sinatra vulnerable to Reliance on Untrusted Inputs in a Security Decision 5.4 Medium -
pcsAlmaLinux REXML ReDoS vulnerability 6.6 Medium -
pcsAlmaLinux REXML denial of service vulnerability 5.9 Medium -
pcsAlmaLinux REXML DoS vulnerability 5.3 Medium -
pcsAlmaLinux REXML DoS vulnerability 5.3 Medium -
pcsAlmaLinux Tornado before 6.4.1 HTTP Request Smuggling via Transfer-Encoding 9.0 Critical -
pcsAlmaLinux REXML contains a denial of service vulnerability 5.3 Medium -
pcsAlmaLinux Rack ReDos in content type parsing (2nd degree polynomial) 5.3 Medium -
pcsAlmaLinux Possible DoS Vulnerability with Range Header in Rack 5.8 Medium -
pcsAlmaLinux Possible Denial of Service Vulnerability in Rack Header Parsing 5.3 Medium -
pcsAlmaLinux It was discovered that an update for PCS package in RHBA-2023:2151 erratum released as part of... 9.8 Critical -
pcsAlmaLinux Possible Denial of Service Vulnerability in Rack's header parsing 5.3 Medium -
pcsAlmaLinux Cross-realm object access in Webpack 5 9.8 Critical -
pcsAlmaLinux Rack has possible DoS Vulnerability in Multipart MIME parsing 7.5 High -
pcsAlmaLinux Sinatra vulnerable to Reflected File Download attack 8.8 High -
pcsAlmaLinux decode-uri-component vulnerable to Denial of Service (DoS) 7.5 High -
pcsAlmaLinux A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a... 7.8 High -
pcsAlmaLinux pcs bug fix and enhancement update No score -
pcsAlmaLinux sinatra does not validate expanded path matches 7.5 High -
pcsAlmaLinux A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired... 8.8 High -
pcsAlmaLinux pcs bug fix and enhancement update No score -
pcsAlmaLinux pcs bug fix and enhancement update No score -
pcsAlmaLinux pcs bug fix and enhancement update No score -
pcsAlmaLinux pcs bug fix and enhancement update No score -
pcsAlmaLinux Cross-Site Scripting in jquery 6.1 Medium -
pcsAlmaLinux Potential XSS vulnerability in jQuery 6.9 Medium