python3 vulnerabilities (Alpaquita)
67 vulnerabilities.
python3AlpaquitaBypassing extraction filter to create symlinks to arbitrary targets outside extraction directory7.5 Highpython3AlpaquitaExtraction filter bypass for linking outside extraction directory7.5 Highpython3AlpaquitaArbitrary writes via tarfile realpath overflow9.4 Criticalpython3AlpaquitaUse-after-free in "unicode_escape" decoder with error handler5.9 Mediumpython3AlpaquitaURL parser allowed square brackets in domain names6.3 Mediumpython3AlpaquitaUnbounded memory buffering in SelectorSocketTransport.writelines()8.7 Highpython3AlpaquitaImproper validation of IPv6 and IPvFuture addresses6.3 Mediumpython3AlpaquitaVirtual environment (venv) activation scripts don't quote paths5.3 Mediumpython3AlpaquitaRegular-expression DoS when parsing TarFile headers7.5 Highpython3AlpaquitaInfinite loop when iterating over zip archive entry names from zipfile.Path8.7 Highpython3AlpaquitaQuadratic complexity parsing cookies with backslashes7.5 Highpython3AlpaquitaEmail header injection due to unquoted newlines5.5 Mediumpython3AlpaquitaIncorrect IPv4 and IPv6 private ranges7.5 Highpython3AlpaquitaAn issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.2,...7.8 Highpython3AlpaquitaAn issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed...7.5 Highpython3AlpaquitaThe e-mail module of Python 0 - 2.7.18, 3.x - 3.11 incorrectly parses e-mail addresses which...5.3 Medium