python3 vulnerabilities (Azure Linux)
94 vulnerabilities.
python3Azure LinuxTarfile infinite loop during parsing with negative member offset7.5 Highpython3Azure LinuxHTMLParser quadratic complexity when processing malformed inputs4.3 Mediumpython3Azure LinuxBypass extraction filter to modify file metadata outside extraction directory5.3 Mediumpython3Azure LinuxTarfile extracts filtered members when errorlevel=07.5 Highpython3Azure LinuxBypassing extraction filter to create symlinks to arbitrary targets outside extraction directory7.5 Highpython3Azure LinuxExtraction filter bypass for linking outside extraction directory7.5 Highpython3Azure LinuxArbitrary writes via tarfile realpath overflow9.4 Criticalpython3Azure LinuxUse-after-free in "unicode_escape" decoder with error handler5.9 Mediumpython3Azure LinuxMishandling of comma during folding and unicode-encoding of email headers2.3 Lowpython3Azure LinuxURL parser allowed square brackets in domain names6.3 Mediumpython3Azure LinuxUnbounded memory buffering in SelectorSocketTransport.writelines()8.7 Highpython3Azure LinuxImproper validation of IPv6 and IPvFuture addresses6.3 Mediumpython3Azure LinuxVirtual environment (venv) activation scripts don't quote paths5.3 Mediumpython3Azure LinuxRegular-expression DoS when parsing TarFile headers7.5 Highpython3Azure LinuxInfinite loop when iterating over zip archive entry names from zipfile.Path8.7 Highpython3Azure LinuxQuadratic complexity parsing cookies with backslashes7.5 Highpython3Azure LinuxEmail header injection due to unquoted newlines5.5 Mediumpython3Azure LinuxRemote Code Execution in pypa/setuptools8.8 Highpython3Azure LinuxProxy-Authorization request header isn't stripped during cross-origin redirects in urllib34.4 Mediumpython3Azure LinuxMemory race condition in ssl.SSLContext certificate store methods7.4 Highpython3Azure LinuxIncorrect IPv4 and IPv6 private ranges7.5 Highpython3Azure LinuxDenial of Service via Quadratic Complexity in kjd/idna6.2 Mediumpython3Azure LinuxQuoted zip-bomb protection for zipfile6.2 Mediumpython3Azure LinuxAn issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.2,...7.8 Highpython3Azure LinuxGroups not dropped before running subprocess when using empty 'extra_groups' parameter6.1 Mediumpython3Azure LinuxMercurial configuration injectable in repo revision when installing via pip5.5 Mediumpython3Azure LinuxRequest body not stripped after redirect in urllib34.2 Mediumpython3Azure Linux`Cookie` HTTP header isn't stripped on cross-origin redirects5.9 Mediumpython3Azure LinuxAn issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and...5.3 Mediumpython3Azure LinuxThe e-mail module of Python 0 - 2.7.18, 3.x - 3.11 incorrectly parses e-mail addresses which...5.3 Mediumpython3Azure LinuxAn issue in the urllib.parse component of Python before v3.11 allows attackers to bypass...7.5 Highpython3Azure Linuxpypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)5.9 Mediumpython3Azure LinuxAn issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one...7.5 Highpython3Azure LinuxPython 3.9.x and 3.10.x through 3.10.8 on Linux allows local privilege escalation in a non...7.8 Highpython3Azure LinuxBuffer overflow in sponge queue functions9.8 Criticalpython3Azure LinuxPython 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no...7.4 Highpython3Azure LinuxIn Python (aka CPython) through 3.10.4, the mailcap module does not add escape characters into...7.6 Highpython3Azure LinuxDirectory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile...6.8 Medium