PyYAML vulnerabilities (Red Hat)
86 vulnerabilities.
PyYAMLRed HatPygments vulnerable to Regular Expression Denial of Service (ReDoS)7.5 HighPyYAMLRed HatInfinite Loop in Pygments7.5 HighPyYAMLRed HatWeb Cache Poisoning5.9 MediumPyYAMLRed HatImproper Input Validation in PyYAML9.8 CriticalPyYAMLRed HatRegular Expression Denial of Service (ReDoS)5.3 MediumPyYAMLRed HatPython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...9.8 CriticalPyYAMLRed Hatlxml vulnerable to Cross-site Scripting6.1 MediumPyYAMLRed HatIn Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on...9.8 CriticalPyYAMLRed HatCRLF injection in urllib36.5 MediumPyYAMLRed Hathttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...7.2 HighPyYAMLRed HatPath Traversal in pip7.5 HighPyYAMLRed HatIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...7.5 HighPyYAMLRed HatIncorrect Calculation and Use of Insufficiently Random Values in Python5.9 MediumPyYAMLRed HatImproper Input Validation in PyYAML9.8 CriticalPyYAMLRed HatDeserialization of Untrusted Data in PyYAML9.8 CriticalPyYAMLRed HatPython 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8...6.5 MediumPyYAMLRed HatDouble Free in psutil7.5 HighPyYAMLRed HatThe documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3...6.1 MediumPyYAMLRed HatAn issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7...7.5 HighPyYAMLRed Hathttp.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3...5.3 MediumPyYAMLRed HatImproper Certificate Validation in urllib37.5 HighPyYAMLRed HatImproper Neutralization of CRLF Sequences in urllib3 library for Python6.1 MediumPyYAMLRed Haturllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for...9.1 CriticalPyYAMLRed HatAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 MediumPyYAMLRed HatAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 MediumPyYAMLRed HatPython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...9.8 CriticalPyYAMLRed HatSQLAlchemy vulnerable to SQL Injection via order_by parameter9.8 CriticalPyYAMLRed HatSQLAlchemy is vulnerable to SQL Injection via group_by parameter7.8 HighPyYAMLRed HatNumpy Deserialization of Untrusted Data9.8 CriticalPyYAMLRed HatExposure of Sensitive Information to an Unauthorized Actor in urllib39.8 CriticalPyYAMLRed HatInsufficiently Protected Credentials in Requests7.5 HighPyYAMLRed HatCross-site scripting (XSS) vulnerability in Spacewalk and Red Hat Network (RHN) Satellite before...3.5 LowPyYAMLRed HatMultiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN)...3.5 LowPyYAMLRed HatThe SessionAdapter::ExchangeHandlerImpl::checkAlternate function in broker/SessionAdapter.cpp in...4.0 MediumPyYAMLRed HatThe Cluster::deliveredEvent function in cluster/Cluster.cpp in Apache Qpid, as used in Red Hat...5.0 MediumPyYAMLRed HatDirectory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile...6.8 Medium