python-min vulnerabilities (Bitnami)
103 vulnerabilities.
python-minBitnamiBypassing extraction filter to create symlinks to arbitrary targets outside extraction directory7.5 Highpython-minBitnamiExtraction filter bypass for linking outside extraction directory7.5 Highpython-minBitnamiArbitrary writes via tarfile realpath overflow9.4 Criticalpython-minBitnamiUse-after-free in "unicode_escape" decoder with error handler5.9 Mediumpython-minBitnamiMishandling of comma during folding and unicode-encoding of email headers2.3 Lowpython-minBitnamiDefault mimetype known files writeable on Windows2.3 Lowpython-minBitnamiURL parser allowed square brackets in domain names6.3 Mediumpython-minBitnamiUnbounded memory buffering in SelectorSocketTransport.writelines()8.7 Highpython-minBitnamiImproper validation of IPv6 and IPvFuture addresses6.3 Mediumpython-minBitnamiAn issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser...5.9 Mediumpython-minBitnamiVirtual environment (venv) activation scripts don't quote paths5.3 Mediumpython-minBitnamiRegular-expression DoS when parsing TarFile headers7.5 Highpython-minBitnamiInfinite loop when iterating over zip archive entry names from zipfile.Path8.7 Highpython-minBitnamiQuadratic complexity parsing cookies with backslashes7.5 Highpython-minBitnamiEmail header injection due to unquoted newlines5.5 Mediumpython-minBitnamiBuffer overread when using an empty list with SSLContext.set_npn_protocols()6.5 Mediumpython-minBitnamiMemory race condition in ssl.SSLContext certificate store methods7.4 Highpython-minBitnamiIncorrect IPv4 and IPv6 private ranges7.5 Highpython-minBitnamiQuoted zip-bomb protection for zipfile6.2 Mediumpython-minBitnamiAn issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.2,...7.8 Highpython-minBitnamiGroups not dropped before running subprocess when using empty 'extra_groups' parameter6.1 Mediumpython-minBitnamiAn issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and...5.3 Mediumpython-minBitnamiAn issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed...7.5 Highpython-minBitnamiAn issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time...5.9 Mediumpython-minBitnamiAn XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no...9.8 Criticalpython-minBitnamiread_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU...6.5 Mediumpython-minBitnamiA use-after-free exists in Python through 3.9 via heappushpop in heapq.7.5 Highpython-minBitnamiThe legacy email.utils.parseaddr function in Python through 3.11.4 allows attackers to trigger ...7.5 Highpython-minBitnamiCPython v3.12.0 alpha 7 was discovered to contain a heap use-after-free via the function...5.5 Mediumpython-minBitnamiThe e-mail module of Python 0 - 2.7.18, 3.x - 3.11 incorrectly parses e-mail addresses which...5.3 Mediumpython-minBitnamiAn issue in the urllib.parse component of Python before v3.11 allows attackers to bypass...7.5 Highpython-minBitnamiAn issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one...7.5 Highpython-minBitnamiPython 3.9.x and 3.10.x through 3.10.8 on Linux allows local privilege escalation in a non...7.8 Highpython-minBitnamiBuffer overflow in sponge queue functions9.8 Criticalpython-minBitnamiA flaw was found in python. In algorithms with quadratic time complexity using non-binary bases,...7.5 Highpython-minBitnamiPython 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no...7.4 Highpython-minBitnamiIn Python before 3.10.3 on Windows, local users can gain privileges because the search path is...7.0 Highpython-minBitnamiA flaw was found in Python, specifically within the urllib.parse module. This module helps break...7.5 Highpython-minBitnamiA flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in...5.3 Mediumpython-minBitnamiThere's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious...6.5 Mediumpython-minBitnamiA flaw was found in python. An improperly handled HTTP response in the HTTP client code of python...7.5 Highpython-minBitnamiImproper input validation of octal strings in Python stdlib ipaddress 3.10 and below allows...9.8 Criticalpython-minBitnamiThere's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to...5.7 Mediumpython-minBitnamiWeb Cache Poisoning5.9 Mediumpython-minBitnamiPython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...9.8 Criticalpython-minBitnamiIn Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on...9.8 Criticalpython-minBitnamihttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...7.2 Highpython-minBitnamiIn Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing...9.8 Criticalpython-minBitnamiIn Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on...7.8 Highpython-minBitnamiIncorrect Calculation and Use of Insufficiently Random Values in Python5.9 Medium- Show moreLoading…