python-cffi vulnerabilities (Red Hat)
116 vulnerabilities.
python-cffiRed HatUncontrolled Recursion in Loofah7.5 Highpython-cffiRed HatImproper neutralization of data URIs may allow XSS in Loofah6.1 Mediumpython-cffiRed HatInefficient Regular Expression Complexity in Loofah7.5 Highpython-cffiRed HatRemote Code execution in SnakeYAML8.3 Highpython-cffiRed HatTemporaryFolder on unix-like systems does not limit access to created files in pgjdbc4.7 Mediumpython-cffiRed HatAn issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one...7.5 Highpython-cffiRed HatPython 3.9.x and 3.10.x through 3.10.8 on Linux allows local privilege escalation in a non...7.8 Highpython-cffiRed HatApache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults9.8 Criticalpython-cffiRed HatDjango denial-of-service vulnerability in internationalized URLs7.5 Highpython-cffiRed HatUncontrolled Resource Consumption in FasterXML jackson-databind7.5 Highpython-cffiRed HatUncontrolled Resource Consumption in Jackson-databind7.5 Highpython-cffiRed HatA flaw was found in python. In algorithms with quadratic time complexity using non-binary bases,...7.5 Highpython-cffiRed HatDoS in SnakeYAML6.5 Mediumpython-cffiRed HatDoS in SnakeYAML6.5 Mediumpython-cffiRed HatDoS in SnakeYAML6.5 Mediumpython-cffiRed HatDoS in SnakeYAML6.5 Mediumpython-cffiRed HatDenial of Service (DoS)7.5 Highpython-cffiRed HatPython 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no...7.4 Highpython-cffiRed HatIncorrect header handling in mod-wsgi7.5 Highpython-cffiRed HatTZInfo relative path traversal vulnerability allows loading of arbitrary files7.5 Highpython-cffiRed HatActive Record RCE bug with Serialized Columns9.8 Criticalpython-cffiRed HatApache Commons Configuration insecure interpolation defaults9.8 Criticalpython-cffiRed HatXSS Vulnerability in Action View tag helpers6.1 Mediumpython-cffiRed HatCross-site Scripting Vulnerability in Action Pack6.1 Mediumpython-cffiRed HatIn Python (aka CPython) through 3.10.4, the mailcap module does not add escape characters into...7.6 Highpython-cffiRed HatA flaw was found in Python, specifically within the urllib.parse module. This module helps break...7.5 Highpython-cffiRed HatHTML Cleaner allows crafted and SVG embedded scripts to pass through8.2 Highpython-cffiRed HatDirectory Traversal in Babel7.8 Highpython-cffiRed HatThere's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious...6.5 Mediumpython-cffiRed HatA flaw was found in python. An improperly handled HTTP response in the HTTP client code of python...7.5 Highpython-cffiRed HatImproper Input Validation in pip5.7 Mediumpython-cffiRed HatA flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets...5.5 Mediumpython-cffiRed HatCatastrophic backtracking in URL authority parser when passed URL containing many @ characters7.5 Highpython-cffiRed HatImproper input validation of octal strings in Python stdlib ipaddress 3.10 and below allows...9.8 Criticalpython-cffiRed HatRelative Path Traversal in Babel 2.9.0 allows an attacker to load arbitrary locale files on disk...7.8 Highpython-cffiRed HatThere's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to...5.7 Mediumpython-cffiRed Hatlxml vulnerable to Cross-Site Scripting6.1 Mediumpython-cffiRed HatWeb Cache Poisoning5.9 Mediumpython-cffiRed HatImproper Input Validation in PyYAML9.8 Criticalpython-cffiRed HatRegular Expression Denial of Service (ReDoS)5.3 Mediumpython-cffiRed HatPython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...9.8 Criticalpython-cffiRed Hatlxml vulnerable to Cross-site Scripting6.1 Mediumpython-cffiRed HatIn Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on...9.8 Criticalpython-cffiRed Hathttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...7.2 Highpython-cffiRed HatGeneration of Error Message Containing Sensitive Information in RESTEasy client5.3 Mediumpython-cffiRed HatXSS in Action View5.4 Mediumpython-cffiRed HatIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...7.5 Highpython-cffiRed HatUntrusted users can run pending migrations in production in Rails6.5 Mediumpython-cffiRed HatCSRF Vulnerability in rails-ujs6.5 Mediumpython-cffiRed HatIncorrect Calculation and Use of Insufficiently Random Values in Python5.9 Medium- Show moreLoading…