python-scrapy vulnerabilities (Debian)
10 vulnerabilities.
-
python-scrapyDebian Scrapy: S3DownloadHandler sends signed S3 requests over plaintext HTTP by default 7.4 High -
python-scrapyDebian Scrapy: Arbitrary Module Import via Referrer-Policy Header in RefererMiddleware 7.5 High -
python-scrapyDebian Brotli decompression bomb DoS in scrapy/scrapy 7.5 High -
python-scrapyDebian Authorization Header Leakage in scrapy/scrapy on Scheme Change Redirects 7.5 High -
python-scrapyDebian XML External Entity (XXE) Vulnerability in scrapy/scrapy 7.5 High -
python-scrapyDebian Authorization Header Leak During Cross-Domain Redirect in scrapy/scrapy 7.5 High -
python-scrapyDebian ReDoS Vulnerability in scrapy/scrapy's XMLFeedSpider 7.5 High -
python-scrapyDebian Exposure of Sensitive Information to an Unauthorized Actor in scrapy/scrapy 8.8 High -
python-scrapyDebian HTTP authentication credential leak to target websites in scrapy 5.7 Medium -
python-scrapyDebian Scrapy denial of service vulnerability 7.5 High