Cython vulnerabilities (Red Hat)
80 vulnerabilities.
CythonRed HatWeb Cache Poisoning5.9 MediumCythonRed HatImproper Input Validation in PyYAML9.8 CriticalCythonRed HatRegular Expression Denial of Service (ReDoS)5.3 MediumCythonRed HatPython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...9.8 CriticalCythonRed Hatlxml vulnerable to Cross-site Scripting6.1 MediumCythonRed HatIn Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on...9.8 CriticalCythonRed HatCRLF injection in urllib36.5 MediumCythonRed Hathttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...7.2 HighCythonRed HatPath Traversal in pip7.5 HighCythonRed HatIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...7.5 HighCythonRed HatIncorrect Calculation and Use of Insufficiently Random Values in Python5.9 MediumCythonRed HatImproper Input Validation in PyYAML9.8 CriticalCythonRed HatDeserialization of Untrusted Data in PyYAML9.8 CriticalCythonRed HatPython 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8...6.5 MediumCythonRed HatDouble Free in psutil7.5 HighCythonRed HatThe documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3...6.1 MediumCythonRed HatAn issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7...7.5 HighCythonRed Hathttp.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3...5.3 MediumCythonRed HatImproper Certificate Validation in urllib37.5 HighCythonRed HatImproper Neutralization of CRLF Sequences in urllib3 library for Python6.1 MediumCythonRed Haturllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for...9.1 CriticalCythonRed HatAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 MediumCythonRed HatAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 MediumCythonRed HatPython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...9.8 CriticalCythonRed HatSQLAlchemy vulnerable to SQL Injection via order_by parameter9.8 CriticalCythonRed HatSQLAlchemy is vulnerable to SQL Injection via group_by parameter7.8 HighCythonRed HatNumpy Deserialization of Untrusted Data9.8 CriticalCythonRed HatExposure of Sensitive Information to an Unauthorized Actor in urllib39.8 CriticalCythonRed HatInsufficiently Protected Credentials in Requests7.5 HighCythonRed HatDirectory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile...6.8 Medium