python-aiohttp vulnerabilities (Red Hat)
170 vulnerabilities.
python-aiohttpRed HatHTTP Request/Response Smuggling in puma5.9 Mediumpython-aiohttpRed HatPyCryptodome and pycryptodomex side-channel leakage for OAEP decryption5.9 Mediumpython-aiohttpRed HatSatellite: arithmetic overflow in satellite7.6 Highpython-aiohttpRed HatDenial of service via chunk extensions in net/http5.3 Mediumpython-aiohttpRed Hatcryptography vulnerable to NULL-dereference when loading PKCS7 certificates5.9 Mediumpython-aiohttpRed Hataiohttp's ClientSession is vulnerable to CRLF injection via version7.2 Highpython-aiohttpRed Hataiohttp's ClientSession is vulnerable to CRLF injection via method5.3 Mediumpython-aiohttpRed HatAIOHTTP: HTTP request smuggling via WebSocket upgrade6.3 Mediumpython-aiohttpRed HatHub: insecure galaxy-importer tarfile extraction6.3 Mediumpython-aiohttpRed HatRequest smuggling in aiohttp5.3 Mediumpython-aiohttpRed HatAxios Cross-Site Request Forgery Vulnerability6.5 Mediumpython-aiohttpRed HatPillow Denial of Service vulnerability7.5 Highpython-aiohttpRed Hattwisted.web has disordered HTTP pipeline response5.3 Mediumpython-aiohttpRed HatMercurial configuration injectable in repo revision when installing via pip5.5 Mediumpython-aiohttpRed HatArbitrary Code Execution in Pillow8.1 Highpython-aiohttpRed HatDjango Denial-of-service in django.utils.text.Truncator7.5 Highpython-aiohttpRed HatDjango Denial of service vulnerability in django.utils.encoding.uri_to_iri7.5 Highpython-aiohttpRed HatGitPython blind local file inclusion4.0 Mediumpython-aiohttpRed HatActive Support Possibly Discloses Locally Encrypted Files5.5 Mediumpython-aiohttpRed Hataiohttp vulnerable to HTTP request smuggling5.3 Mediumpython-aiohttpRed HatPygments vulnerable to ReDoS5.5 Mediumpython-aiohttpRed HatJetty accepts "+" prefixed value in Content-Length5.3 Mediumpython-aiohttpRed HatJetty vulnerable to errant command quoting in CGI Servlet3.5 Lowpython-aiohttpRed HatDjango has regular expression denial of service vulnerability in EmailValidator/URLValidator7.5 Highpython-aiohttpRed HatAudited Log Integrity Errors Due to Race Condition3.1 Lowpython-aiohttpRed Hatjackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode7.5 Highpython-aiohttpRed HatResource exhaustion in Django7.5 Highpython-aiohttpRed HatDjango contains Uncontrolled Resource Consumption via cached header7.5 Highpython-aiohttpRed Hatrails-html-sanitizer contains an incomplete fix for an XSS vulnerability6.1 Mediumpython-aiohttpRed HatPossible XSS vulnerability with certain configurations of rails-html-sanitizer7.2 Highpython-aiohttpRed HatImproper neutralization of data URIs allows XSS in rails-html-sanitizer6.1 Mediumpython-aiohttpRed HatInefficient Regular Expression Complexity in rails-html-sanitizer7.5 Highpython-aiohttpRed HatUncontrolled Recursion in Loofah7.5 Highpython-aiohttpRed HatImproper neutralization of data URIs may allow XSS in Loofah6.1 Mediumpython-aiohttpRed HatInefficient Regular Expression Complexity in Loofah7.5 Highpython-aiohttpRed HatRemote Code execution in SnakeYAML8.3 Highpython-aiohttpRed HatTemporaryFolder on unix-like systems does not limit access to created files in pgjdbc4.7 Mediumpython-aiohttpRed HatApache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults9.8 Criticalpython-aiohttpRed HatDjango denial-of-service vulnerability in internationalized URLs7.5 Highpython-aiohttpRed HatUncontrolled Resource Consumption in FasterXML jackson-databind7.5 Highpython-aiohttpRed HatUncontrolled Resource Consumption in Jackson-databind7.5 Highpython-aiohttpRed HatDoS in SnakeYAML6.5 Mediumpython-aiohttpRed HatDoS in SnakeYAML6.5 Mediumpython-aiohttpRed HatDoS in SnakeYAML6.5 Mediumpython-aiohttpRed HatDoS in SnakeYAML6.5 Mediumpython-aiohttpRed HatDenial of Service (DoS)7.5 Highpython-aiohttpRed HatTZInfo relative path traversal vulnerability allows loading of arbitrary files7.5 Highpython-aiohttpRed HatActive Record RCE bug with Serialized Columns9.8 Criticalpython-aiohttpRed HatApache Commons Configuration insecure interpolation defaults9.8 Criticalpython-aiohttpRed HatXSS Vulnerability in Action View tag helpers6.1 Medium- Show moreLoading…