python-cryptography-debugsource vulnerabilities (Red Hat)
139 vulnerabilities.
python-cryptography-debugsourceRed HatBlack vulnerable to Regular Expression Denial of Service (ReDoS)5.3 Mediumpython-cryptography-debugsourceRed HatProxy-Authorization header kept across hosts in follow-redirects6.5 Mediumpython-cryptography-debugsourceRed HatAn issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.2,...7.8 Highpython-cryptography-debugsourceRed HatMemory exhaustion in multipart form parsing in net/textproto and net/http6.5 Mediumpython-cryptography-debugsourceRed HatVerify panics on certificates with an unknown public key algorithm in crypto/x5095.9 Mediumpython-cryptography-debugsourceRed HatRegular expression denial-of-service in Django5.3 Mediumpython-cryptography-debugsourceRed Hatcryptography NULL pointer deference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override7.5 Highpython-cryptography-debugsourceRed HatDjango denial-of-service attack in the intcomma template filter7.5 Highpython-cryptography-debugsourceRed Hataiohttp.web.static(follow_symlinks=True) is vulnerable to directory traversal5.9 Mediumpython-cryptography-debugsourceRed Hataiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separators6.5 Mediumpython-cryptography-debugsourceRed Hatpython-ecdsa vulnerable to Minerva attack on P-2567.4 Highpython-cryptography-debugsourceRed HatJinja vulnerable to Cross-Site Scripting (XSS)5.4 Mediumpython-cryptography-debugsourceRed Hatcryptography vulnerable to NULL-dereference when loading PKCS7 certificates5.9 Mediumpython-cryptography-debugsourceRed Hataiohttp's ClientSession is vulnerable to CRLF injection via version7.2 Highpython-cryptography-debugsourceRed Hataiohttp's ClientSession is vulnerable to CRLF injection via method5.3 Mediumpython-cryptography-debugsourceRed HatRequest smuggling in aiohttp5.3 Mediumpython-cryptography-debugsourceRed HatMercurial configuration injectable in repo revision when installing via pip5.5 Mediumpython-cryptography-debugsourceRed HatArbitrary Code Execution in Pillow8.1 Highpython-cryptography-debugsourceRed HatDjango Denial-of-service in django.utils.text.Truncator7.5 Highpython-cryptography-debugsourceRed HatPlatform: token exposed at importing project6.3 Mediumpython-cryptography-debugsourceRed Hat`Cookie` HTTP header isn't stripped on cross-origin redirects5.9 Mediumpython-cryptography-debugsourceRed HatDjango Denial of service vulnerability in django.utils.encoding.uri_to_iri7.5 Highpython-cryptography-debugsourceRed HatAn issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and...5.3 Mediumpython-cryptography-debugsourceRed Hataiohttp vulnerable to HTTP request smuggling5.3 Mediumpython-cryptography-debugsourceRed HatDjango has regular expression denial of service vulnerability in EmailValidator/URLValidator7.5 Highpython-cryptography-debugsourceRed HatUnintended leak of Proxy-Authorization header in requests6.1 Mediumpython-cryptography-debugsourceRed HatThe e-mail module of Python 0 - 2.7.18, 3.x - 3.11 incorrectly parses e-mail addresses which...5.3 Mediumpython-cryptography-debugsourceRed Hatjackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode7.5 Highpython-cryptography-debugsourceRed HatAn issue in the urllib.parse component of Python before v3.11 allows attackers to bypass...7.5 Highpython-cryptography-debugsourceRed HatResource exhaustion in Django7.5 Highpython-cryptography-debugsourceRed HatCipher.update_into can corrupt memory in pyca cryptography4.8 Mediumpython-cryptography-debugsourceRed HatDjango contains Uncontrolled Resource Consumption via cached header7.5 Highpython-cryptography-debugsourceRed Hatpypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)5.9 Mediumpython-cryptography-debugsourceRed Hatrails-html-sanitizer contains an incomplete fix for an XSS vulnerability6.1 Mediumpython-cryptography-debugsourceRed HatPossible XSS vulnerability with certain configurations of rails-html-sanitizer7.2 Highpython-cryptography-debugsourceRed HatImproper neutralization of data URIs allows XSS in rails-html-sanitizer6.1 Mediumpython-cryptography-debugsourceRed HatInefficient Regular Expression Complexity in rails-html-sanitizer7.5 Highpython-cryptography-debugsourceRed HatUncontrolled Recursion in Loofah7.5 Highpython-cryptography-debugsourceRed HatImproper neutralization of data URIs may allow XSS in Loofah6.1 Mediumpython-cryptography-debugsourceRed HatInefficient Regular Expression Complexity in Loofah7.5 Highpython-cryptography-debugsourceRed HatRemote Code execution in SnakeYAML8.3 Highpython-cryptography-debugsourceRed HatTemporaryFolder on unix-like systems does not limit access to created files in pgjdbc4.7 Mediumpython-cryptography-debugsourceRed HatAn issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one...7.5 Highpython-cryptography-debugsourceRed HatPython 3.9.x and 3.10.x through 3.10.8 on Linux allows local privilege escalation in a non...7.8 Highpython-cryptography-debugsourceRed HatApache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults9.8 Criticalpython-cryptography-debugsourceRed HatDjango denial-of-service vulnerability in internationalized URLs7.5 Highpython-cryptography-debugsourceRed HatUncontrolled Resource Consumption in FasterXML jackson-databind7.5 Highpython-cryptography-debugsourceRed HatUncontrolled Resource Consumption in Jackson-databind7.5 Highpython-cryptography-debugsourceRed HatA flaw was found in python. In algorithms with quadratic time complexity using non-binary bases,...7.5 Highpython-cryptography-debugsourceRed HatDoS in SnakeYAML6.5 Medium- Show moreLoading…