libpython vulnerabilities (Bitnami)
101 vulnerabilities.
libpythonBitnamiBypassing extraction filter to create symlinks to arbitrary targets outside extraction directory7.5 HighlibpythonBitnamiExtraction filter bypass for linking outside extraction directory7.5 HighlibpythonBitnamiArbitrary writes via tarfile realpath overflow9.4 CriticallibpythonBitnamiUse-after-free in "unicode_escape" decoder with error handler5.9 MediumlibpythonBitnamiMishandling of comma during folding and unicode-encoding of email headers2.3 LowlibpythonBitnamiURL parser allowed square brackets in domain names6.3 MediumlibpythonBitnamiUnbounded memory buffering in SelectorSocketTransport.writelines()8.7 HighlibpythonBitnamiImproper validation of IPv6 and IPvFuture addresses6.3 MediumlibpythonBitnamiAn issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser...5.9 MediumlibpythonBitnamiVirtual environment (venv) activation scripts don't quote paths5.3 MediumlibpythonBitnamiRegular-expression DoS when parsing TarFile headers7.5 HighlibpythonBitnamiInfinite loop when iterating over zip archive entry names from zipfile.Path8.7 HighlibpythonBitnamiQuadratic complexity parsing cookies with backslashes7.5 HighlibpythonBitnamiEmail header injection due to unquoted newlines5.5 MediumlibpythonBitnamiBuffer overread when using an empty list with SSLContext.set_npn_protocols()6.5 MediumlibpythonBitnamiMemory race condition in ssl.SSLContext certificate store methods7.4 HighlibpythonBitnamiIncorrect IPv4 and IPv6 private ranges7.5 HighlibpythonBitnamiQuoted zip-bomb protection for zipfile6.2 MediumlibpythonBitnamiAn issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.2,...7.8 HighlibpythonBitnamiGroups not dropped before running subprocess when using empty 'extra_groups' parameter6.1 MediumlibpythonBitnamiAn issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and...5.3 MediumlibpythonBitnamiAn issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed...7.5 HighlibpythonBitnamiAn issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time...5.9 MediumlibpythonBitnamiAn XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no...9.8 CriticallibpythonBitnamiread_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU...6.5 MediumlibpythonBitnamiA use-after-free exists in Python through 3.9 via heappushpop in heapq.7.5 HighlibpythonBitnamiThe legacy email.utils.parseaddr function in Python through 3.11.4 allows attackers to trigger ...7.5 HighlibpythonBitnamiCPython v3.12.0 alpha 7 was discovered to contain a heap use-after-free via the function...5.5 MediumlibpythonBitnamiThe e-mail module of Python 0 - 2.7.18, 3.x - 3.11 incorrectly parses e-mail addresses which...5.3 MediumlibpythonBitnamiAn issue in the urllib.parse component of Python before v3.11 allows attackers to bypass...7.5 HighlibpythonBitnamiAn issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one...7.5 HighlibpythonBitnamiPython 3.9.x and 3.10.x through 3.10.8 on Linux allows local privilege escalation in a non...7.8 HighlibpythonBitnamiBuffer overflow in sponge queue functions9.8 CriticallibpythonBitnamiA flaw was found in python. In algorithms with quadratic time complexity using non-binary bases,...7.5 HighlibpythonBitnamiPython 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no...7.4 HighlibpythonBitnamiIn Python before 3.10.3 on Windows, local users can gain privileges because the search path is...7.0 HighlibpythonBitnamiA flaw was found in Python, specifically within the urllib.parse module. This module helps break...7.5 HighlibpythonBitnamiA flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in...5.3 MediumlibpythonBitnamiThere's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious...6.5 MediumlibpythonBitnamiA flaw was found in python. An improperly handled HTTP response in the HTTP client code of python...7.5 HighlibpythonBitnamiImproper input validation of octal strings in Python stdlib ipaddress 3.10 and below allows...9.8 CriticallibpythonBitnamiThere's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to...5.7 MediumlibpythonBitnamiWeb Cache Poisoning5.9 MediumlibpythonBitnamiPython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...9.8 CriticallibpythonBitnamiIn Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on...9.8 CriticallibpythonBitnamihttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...7.2 HighlibpythonBitnamiIn Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing...9.8 CriticallibpythonBitnamiIn Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on...7.8 HighlibpythonBitnamiIncorrect Calculation and Use of Insufficiently Random Values in Python5.9 MediumlibpythonBitnamiPython 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8...6.5 Medium- Show moreLoading…