python2-wheel-wheel vulnerabilities (AlmaLinux)

23 vulnerabilities.

• python2-wheel-wheel AlmaLinux Jinja vulnerable to Cross-Site Scripting (XSS) CVE-2024-22195 Fix available 5.4 MediumJanuary 11, 2024
• python2-wheel-wheel AlmaLinux `Cookie` HTTP header isn't stripped on cross-origin redirects CVE-2023-43804 Public exploitFix available 5.9 MediumOctober 2, 2023
• python2-wheel-wheel AlmaLinux An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and... CVE-2023-40217 Fix available 5.3 MediumAugust 24, 2023
• python2-wheel-wheel AlmaLinux An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no... CVE-2022-48565 Public exploitFix available 9.8 CriticalAugust 22, 2023
• python2-wheel-wheel AlmaLinux A use-after-free exists in Python through 3.9 via heappushpop in heapq. CVE-2022-48560 Fix available 7.5 HighAugust 22, 2023
• python2-wheel-wheel AlmaLinux Unintended leak of Proxy-Authorization header in requests CVE-2023-32681 Public exploitFix available 6.1 MediumMay 22, 2023
• python2-wheel-wheel AlmaLinux An issue in the urllib.parse component of Python before v3.11 allows attackers to bypass... CVE-2023-24329 Public exploitFix available EPSS 20.5% 7.5 HighFebruary 17, 2023
• python2-wheel-wheel AlmaLinux pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS) CVE-2022-40897 Fix available 5.9 MediumDecember 22, 2022
• python2-wheel-wheel AlmaLinux An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one... CVE-2022-45061 Fix available 7.5 HighNovember 9, 2022
• python2-wheel-wheel AlmaLinux In Python (aka CPython) through 3.10.4, the mailcap module does not add escape characters into... CVE-2015-20107 Public exploitFix available 7.6 HighApril 13, 2022
• python2-wheel-wheel AlmaLinux A flaw was found in Python, specifically within the urllib.parse module. This module helps break... CVE-2022-0391 Fix available 7.5 HighFebruary 9, 2022
• python2-wheel-wheel AlmaLinux A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in... CVE-2021-4189 Fix available 5.3 MediumDecember 31, 2021
• python2-wheel-wheel AlmaLinux HTML Cleaner allows crafted and SVG embedded scripts to pass through CVE-2021-43818 Fix available 8.2 HighDecember 13, 2021
• python2-wheel-wheel AlmaLinux Directory Traversal in Babel CVE-2021-42771 Fix available 7.8 HighOctober 20, 2021
• python2-wheel-wheel AlmaLinux There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious... CVE-2021-3733 Fix available 6.5 MediumSeptember 2, 2021
• python2-wheel-wheel AlmaLinux A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python... CVE-2021-3737 Fix available EPSS 13.2% 7.5 HighAugust 31, 2021
• python2-wheel-wheel AlmaLinux Relative Path Traversal in Babel 2.9.0 allows an attacker to load arbitrary locale files on disk... CVE-2021-20095 Fix availableRejected 7.8 HighApril 29, 2021
• python2-wheel-wheel AlmaLinux lxml vulnerable to Cross-Site Scripting CVE-2021-28957 Fix available 6.1 MediumMarch 21, 2021
• python2-wheel-wheel AlmaLinux Pygments vulnerable to Regular Expression Denial of Service (ReDoS) CVE-2021-27291 Fix available 7.5 HighMarch 17, 2021
• python2-wheel-wheel AlmaLinux Infinite Loop in Pygments CVE-2021-20270 Fix available 7.5 HighMarch 9, 2021
• python2-wheel-wheel AlmaLinux Web Cache Poisoning CVE-2021-23336 Fix available EPSS 40.7% 5.9 MediumFebruary 15, 2021
• python2-wheel-wheel AlmaLinux Regular Expression Denial of Service (ReDoS) CVE-2020-28493 Fix available 5.3 MediumFebruary 1, 2021
• python2-wheel-wheel AlmaLinux In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on... CVE-2020-27619 Fix available 9.8 CriticalOctober 22, 2020