python-attrs vulnerabilities (Red Hat)
163 vulnerabilities.
python-attrsRed Hathttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...7.2 Highpython-attrsRed HatGeneration of Error Message Containing Sensitive Information in RESTEasy client5.3 Mediumpython-attrsRed HatXSS in Action View5.4 Mediumpython-attrsRed HatPath Traversal in pip7.5 Highpython-attrsRed HatA flaw was found in Red Hat Satellite 6 which allows privileged attacker to read cache files....8.8 Highpython-attrsRed HatIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...7.5 Highpython-attrsRed HatUntrusted users can run pending migrations in production in Rails6.5 Mediumpython-attrsRed HatCSRF Vulnerability in rails-ujs6.5 Mediumpython-attrsRed HatRack allows Percent-encoded cookies to overwrite existing prefixed cookie names7.5 Highpython-attrsRed HatDeserialization of untrusted data in Jackson Databind8.1 Highpython-attrsRed HatDeserialization of untrusted data in Jackson Databind8.1 Highpython-attrsRed HatDeserialization of untrusted data in Jackson Databind8.1 Highpython-attrsRed HatRegular Expression Denial of Service in websocket-extensions (RubyGem)7.5 Highpython-attrsRed HatAbility to forge per-form CSRF tokens in Rails4.3 Mediumpython-attrsRed HatCircumvention of file size limits in ActiveStorage7.5 Highpython-attrsRed HatPossible Strong Parameters Bypass in ActionPack7.5 Highpython-attrsRed HatActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore9.8 Criticalpython-attrsRed HatDirectory traversal in Rack::Directory app bundled with Rack8.6 Highpython-attrsRed HatImproper Input Validation in Hibernate Validator5.3 Mediumpython-attrsRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.1 Highpython-attrsRed HatDenial of Service in Netty7.5 Highpython-attrsRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 Highpython-attrsRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 Highpython-attrsRed HatPossible XSS vulnerability in ActionView4.0 Mediumpython-attrsRed HatPuppet Server and PuppetDB provide useful performance and debugging information via their metrics...7.5 Highpython-attrsRed HatSQL injection in Django8.8 Highpython-attrsRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticalpython-attrsRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticalpython-attrsRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticalpython-attrsRed HatImproper Certificate Validation in Puppet6.5 Mediumpython-attrsRed HatDeserialization of Untrusted Data in jackson-databind9.8 Criticalpython-attrsRed HatHTTP Request Smuggling in Netty7.5 Highpython-attrsRed HatLimited header injection when using dynamic overrides with user input in RubyGems secure_headers4.4 Mediumpython-attrsRed HatDirective injection when using dynamic overrides with user input in RubyGems secure_headers4.4 Mediumpython-attrsRed HatPossible Information Leak / Session Hijack Vulnerability in Rack6.3 Mediumpython-attrsRed HatPrevious versions of Puppet Agent didn't verify the peer in the SSL connection prior to...5.4 Mediumpython-attrsRed HatDouble Free in psutil7.5 Highpython-attrsRed HatThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks6.5 Mediumpython-attrsRed HatApache MINA SSLFilter security Issue7.5 Highpython-attrsRed HatThe documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3...6.1 Mediumpython-attrsRed HatAn issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7...7.5 Highpython-attrsRed HatInsecure Deserialization in Apache Commons Beanutils7.3 Highpython-attrsRed Hathttp.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3...5.3 Mediumpython-attrsRed HatDjango Incorrect HTTP detection with reverse-proxy connecting via HTTPS5.3 Mediumpython-attrsRed HatInformation exposure in FasterXML jackson-databind7.5 Highpython-attrsRed HatImproper Certificate Validation in urllib37.5 Highpython-attrsRed HatImproper Neutralization of CRLF Sequences in urllib3 library for Python6.1 Mediumpython-attrsRed Haturllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for...9.1 Criticalpython-attrsRed HatAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumpython-attrsRed HatAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Medium- Show moreLoading…