python3 vulnerabilities (BellSoft Hardened Containers)
67 vulnerabilities.
python3BellSoft Hardened ContainersBypassing extraction filter to create symlinks to arbitrary targets outside extraction directory7.5 Highpython3BellSoft Hardened ContainersExtraction filter bypass for linking outside extraction directory7.5 Highpython3BellSoft Hardened ContainersArbitrary writes via tarfile realpath overflow9.4 Criticalpython3BellSoft Hardened ContainersUse-after-free in "unicode_escape" decoder with error handler5.9 Mediumpython3BellSoft Hardened ContainersURL parser allowed square brackets in domain names6.3 Mediumpython3BellSoft Hardened ContainersUnbounded memory buffering in SelectorSocketTransport.writelines()8.7 Highpython3BellSoft Hardened ContainersImproper validation of IPv6 and IPvFuture addresses6.3 Mediumpython3BellSoft Hardened ContainersVirtual environment (venv) activation scripts don't quote paths5.3 Mediumpython3BellSoft Hardened ContainersRegular-expression DoS when parsing TarFile headers7.5 Highpython3BellSoft Hardened ContainersInfinite loop when iterating over zip archive entry names from zipfile.Path8.7 Highpython3BellSoft Hardened ContainersQuadratic complexity parsing cookies with backslashes7.5 Highpython3BellSoft Hardened ContainersEmail header injection due to unquoted newlines5.5 Mediumpython3BellSoft Hardened ContainersIncorrect IPv4 and IPv6 private ranges7.5 Highpython3BellSoft Hardened ContainersAn issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.2,...7.8 Highpython3BellSoft Hardened ContainersAn issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed...7.5 Highpython3BellSoft Hardened ContainersThe e-mail module of Python 0 - 2.7.18, 3.x - 3.11 incorrectly parses e-mail addresses which...5.3 Medium