pypy3 vulnerabilities (Debian)
80 vulnerabilities.
pypy3DebianQuadratic complexity parsing cookies with backslashes7.5 Highpypy3DebianEmail header injection due to unquoted newlines5.5 Mediumpypy3DebianBuffer overread when using an empty list with SSLContext.set_npn_protocols()6.5 Mediumpypy3DebianMemory race condition in ssl.SSLContext certificate store methods7.4 Highpypy3DebianIncorrect IPv4 and IPv6 private ranges7.5 Highpypy3DebianQuoted zip-bomb protection for zipfile6.2 Mediumpypy3DebianAn issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.2,...7.8 Highpypy3DebianAn issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and...5.3 Mediumpypy3DebianAn issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time...5.9 Mediumpypy3DebianAn XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no...9.8 Criticalpypy3Debianread_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU...6.5 Mediumpypy3DebianThe e-mail module of Python 0 - 2.7.18, 3.x - 3.11 incorrectly parses e-mail addresses which...5.3 Mediumpypy3DebianAn issue in the urllib.parse component of Python before v3.11 allows attackers to bypass...7.5 Highpypy3DebianAn issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one...7.5 Highpypy3DebianPython 3.9.x and 3.10.x through 3.10.8 on Linux allows local privilege escalation in a non...7.8 Highpypy3DebianBuffer overflow in sponge queue functions9.8 Criticalpypy3DebianA flaw was found in python. In algorithms with quadratic time complexity using non-binary bases,...7.5 Highpypy3DebianPython 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no...7.4 Highpypy3DebianIn Python (aka CPython) through 3.10.4, the mailcap module does not add escape characters into...7.6 Highpypy3DebianA flaw was found in Python, specifically within the urllib.parse module. This module helps break...7.5 Highpypy3DebianA flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in...5.3 Mediumpypy3DebianThere's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious...6.5 Mediumpypy3DebianA flaw was found in python. An improperly handled HTTP response in the HTTP client code of python...7.5 Highpypy3DebianImproper input validation of octal strings in Python stdlib ipaddress 3.10 and below allows...9.8 Criticalpypy3DebianThere's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to...5.7 Mediumpypy3DebianWeb Cache Poisoning5.9 Mediumpypy3Debianpy vulnerable to Regular Expression Denial of Service7.5 Highpypy3DebianIn Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on...9.8 Criticalpypy3Debianhttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...7.2 Highpypy3DebianIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...7.5 High