pytest vulnerabilities (Red Hat)
77 vulnerabilities.
pytestRed HatInfinite Loop in Pygments7.5 HighpytestRed HatWeb Cache Poisoning5.9 MediumpytestRed HatImproper Input Validation in PyYAML9.8 CriticalpytestRed HatRegular Expression Denial of Service (ReDoS)5.3 MediumpytestRed HatPython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...9.8 CriticalpytestRed Hatlxml vulnerable to Cross-site Scripting6.1 MediumpytestRed HatIn Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on...9.8 CriticalpytestRed HatCRLF injection in urllib36.5 MediumpytestRed Hathttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...7.2 HighpytestRed HatPath Traversal in pip7.5 HighpytestRed HatIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...7.5 HighpytestRed HatDouble Free in psutil7.5 HighpytestRed HatThe documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3...6.1 MediumpytestRed HatAn issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7...7.5 HighpytestRed Hathttp.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3...5.3 MediumpytestRed HatImproper Certificate Validation in urllib37.5 HighpytestRed HatImproper Neutralization of CRLF Sequences in urllib3 library for Python6.1 MediumpytestRed Haturllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for...9.1 CriticalpytestRed HatAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 MediumpytestRed HatAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 MediumpytestRed HatPython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...9.8 CriticalpytestRed HatSQLAlchemy vulnerable to SQL Injection via order_by parameter9.8 CriticalpytestRed HatSQLAlchemy is vulnerable to SQL Injection via group_by parameter7.8 HighpytestRed HatNumpy Deserialization of Untrusted Data9.8 CriticalpytestRed HatExposure of Sensitive Information to an Unauthorized Actor in urllib39.8 CriticalpytestRed HatInsufficiently Protected Credentials in Requests7.5 HighpytestRed HatDirectory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile...6.8 Medium