jython vulnerabilities (Debian)
12 vulnerabilities.
-
jythonDebian tar filter allows writing outside destination via empty-named symlink 6.9 Medium -
jythonDebian webbrowser.open() allows leading dashes in URLs 7.0 High -
jythonDebian POP3 command injection in user-controlled commands 5.9 Medium -
jythonDebian IMAP command injection in user-controlled commands 5.9 Medium -
jythonDebian wsgiref.headers.Headers allows header newline injection 5.9 Medium -
jythonDebian Quadratic complexity in node ID cache clearing 6.3 Medium -
jythonDebian ZIP64 End of Central Directory (EOCD) Locator record offset not checked 4.3 Medium -
jythonDebian HTMLParser quadratic complexity when processing malformed inputs 4.3 Medium -
jythonDebian The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3... 6.1 Medium -
jythonDebian ** DISPUTED ** Lib/webbrowser.py in Python through 3.6.3 does not validate strings before... 8.8 High -
jythonDebian Deserialization of Untrusted Data in Jython 9.8 Critical -
jythonDebian Jython Improper Access Restrictions vulnerability 4.6 Medium