Skip to content

python-attrs vulnerabilities (Red Hat)

163 vulnerabilities.

python-attrs Red HatPython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...CVE-2019-9636Fix available9.8 CriticalMarch 8, 2019
python-attrs Red HatSQLAlchemy vulnerable to SQL Injection via order_by parameterCVE-2019-7164Fix available9.8 CriticalFebruary 20, 2019
python-attrs Red HatSQLAlchemy is vulnerable to SQL Injection via group_by parameterCVE-2019-7548Fix available7.8 HighFebruary 6, 2019
python-attrs Red HatNumpy Deserialization of Untrusted DataCVE-2019-6446Public exploitFix availableDisputedEPSS 27.3%9.8 CriticalJanuary 16, 2019
python-attrs Red HatExposure of Sensitive Information to an Unauthorized Actor in urllib3CVE-2018-20060Fix available9.8 CriticalDecember 11, 2018
python-attrs Red HatImproper Privilege Management in MySQL Connectors JavaCVE-2018-3258Fix available8.8 HighOctober 17, 2018
python-attrs Red HatInsufficiently Protected Credentials in RequestsCVE-2018-18074Public exploitFix available7.5 HighOctober 9, 2018
python-attrs Red Hatkatello Improper Privilege Management vulnerabilityCVE-2017-2662Fix available4.3 MediumAugust 22, 2018
python-attrs Red Hatrack-protection gem timing attack vulnerability when validating CSRF tokenCVE-2018-1000119Fix available5.9 MediumMarch 7, 2018
python-attrs Red Hatnet-ldap Improper Certificate Validation vulnerabilityCVE-2017-17718Fix available5.9 MediumDecember 17, 2017
python-attrs Red Hatrest-client Gem Vulnerable to Session FixationCVE-2015-1820Fix available9.8 CriticalMay 15, 2015
python-attrs Red Hatrest-client allows local users to obtain sensitive information by reading the logCVE-2015-3448Fix available2.1 LowApril 29, 2015
python-attrs Red HatDirectory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile...CVE-2007-4559Public exploitFix availableEPSS 27.1%6.8 MediumAugust 28, 2007