python vulnerabilities (Bitnami)
105 vulnerabilities.
pythonBitnamiBypassing extraction filter to create symlinks to arbitrary targets outside extraction directory7.5 HighpythonBitnamiExtraction filter bypass for linking outside extraction directory7.5 HighpythonBitnamiArbitrary writes via tarfile realpath overflow9.4 CriticalpythonBitnamiUse-after-free in "unicode_escape" decoder with error handler5.9 MediumpythonBitnamiMishandling of comma during folding and unicode-encoding of email headers2.3 LowpythonBitnamiDefault mimetype known files writeable on Windows2.3 LowpythonBitnamiURL parser allowed square brackets in domain names6.3 MediumpythonBitnamiUnbounded memory buffering in SelectorSocketTransport.writelines()8.7 HighpythonBitnamiImproper validation of IPv6 and IPvFuture addresses6.3 MediumpythonBitnamiAn issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser...5.9 MediumpythonBitnamiVirtual environment (venv) activation scripts don't quote paths5.3 MediumpythonBitnamiRegular-expression DoS when parsing TarFile headers7.5 HighpythonBitnamiInfinite loop when iterating over zip archive entry names from zipfile.Path8.7 HighpythonBitnamiQuadratic complexity parsing cookies with backslashes7.5 HighpythonBitnamiEmail header injection due to unquoted newlines5.5 MediumpythonBitnamiBuffer overread when using an empty list with SSLContext.set_npn_protocols()6.5 MediumpythonBitnamiMemory race condition in ssl.SSLContext certificate store methods7.4 HighpythonBitnamiIncorrect IPv4 and IPv6 private ranges7.5 HighpythonBitnamitempfile.mkdtemp() may be readable and writeable by all users on Windows7.1 HighpythonBitnamiQuoted zip-bomb protection for zipfile6.2 MediumpythonBitnamiAn issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.2,...7.8 HighpythonBitnamiGroups not dropped before running subprocess when using empty 'extra_groups' parameter6.1 MediumpythonBitnamiAn issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and...5.3 MediumpythonBitnamiAn issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed...7.5 HighpythonBitnamiAn issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time...5.9 MediumpythonBitnamiAn XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no...9.8 CriticalpythonBitnamiread_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU...6.5 MediumpythonBitnamiA use-after-free exists in Python through 3.9 via heappushpop in heapq.7.5 HighpythonBitnamiAn issue in Python cpython v.3.7 allows an attacker to obtain sensitive information via the...5.3 MediumpythonBitnamiThe legacy email.utils.parseaddr function in Python through 3.11.4 allows attackers to trigger ...7.5 HighpythonBitnamiCPython v3.12.0 alpha 7 was discovered to contain a heap use-after-free via the function...5.5 MediumpythonBitnamiThe e-mail module of Python 0 - 2.7.18, 3.x - 3.11 incorrectly parses e-mail addresses which...5.3 MediumpythonBitnamiAn issue in the urllib.parse component of Python before v3.11 allows attackers to bypass...7.5 HighpythonBitnamiAn issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one...7.5 HighpythonBitnamiPython 3.9.x and 3.10.x through 3.10.8 on Linux allows local privilege escalation in a non...7.8 HighpythonBitnamiBuffer overflow in sponge queue functions9.8 CriticalpythonBitnamiA flaw was found in python. In algorithms with quadratic time complexity using non-binary bases,...7.5 HighpythonBitnamiPython 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no...7.4 HighpythonBitnamiIn Python before 3.10.3 on Windows, local users can gain privileges because the search path is...7.0 HighpythonBitnamiA flaw was found in Python, specifically within the urllib.parse module. This module helps break...7.5 HighpythonBitnamiA flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in...5.3 MediumpythonBitnamiThere's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious...6.5 MediumpythonBitnamiA flaw was found in python. An improperly handled HTTP response in the HTTP client code of python...7.5 HighpythonBitnamiImproper input validation of octal strings in Python stdlib ipaddress 3.10 and below allows...9.8 CriticalpythonBitnamiThere's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to...5.7 MediumpythonBitnamiWeb Cache Poisoning5.9 MediumpythonBitnamiPython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...9.8 CriticalpythonBitnamiIn Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on...9.8 CriticalpythonBitnamihttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...7.2 HighpythonBitnamiIn Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing...9.8 Critical- Show moreLoading…