python-cryptography vulnerabilities (Red Hat)
183 vulnerabilities.
python-cryptographyRed Hatlxml vulnerable to Cross-Site Scripting6.1 Mediumpython-cryptographyRed HatWeb Cache Poisoning5.9 Mediumpython-cryptographyRed HatImproper Input Validation in PyYAML9.8 Criticalpython-cryptographyRed HatPyCA Cryptography symmetrically encrypting large values can lead to integer overflow9.1 Criticalpython-cryptographyRed HatRegular Expression Denial of Service (ReDoS)5.3 Mediumpython-cryptographyRed HatPython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...9.8 Criticalpython-cryptographyRed Hatlxml vulnerable to Cross-site Scripting6.1 Mediumpython-cryptographyRed HatRSA decryption vulnerable to Bleichenbacher timing vulnerability5.9 Mediumpython-cryptographyRed HatIn Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on...9.8 Criticalpython-cryptographyRed Hathttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...7.2 Highpython-cryptographyRed HatGeneration of Error Message Containing Sensitive Information in RESTEasy client5.3 Mediumpython-cryptographyRed HatXSS in Action View5.4 Mediumpython-cryptographyRed HatIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...7.5 Highpython-cryptographyRed HatUntrusted users can run pending migrations in production in Rails6.5 Mediumpython-cryptographyRed HatCSRF Vulnerability in rails-ujs6.5 Mediumpython-cryptographyRed HatIncorrect Calculation and Use of Insufficiently Random Values in Python5.9 Mediumpython-cryptographyRed HatAbility to forge per-form CSRF tokens in Rails4.3 Mediumpython-cryptographyRed HatCircumvention of file size limits in ActiveStorage7.5 Highpython-cryptographyRed HatPossible Strong Parameters Bypass in ActionPack7.5 Highpython-cryptographyRed HatActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore9.8 Criticalpython-cryptographyRed HatDenial of Service in Netty7.5 Highpython-cryptographyRed HatImproper Input Validation in PyYAML9.8 Criticalpython-cryptographyRed HatSQL injection in Django8.8 Highpython-cryptographyRed HatDeserialization of Untrusted Data in PyYAML9.8 Criticalpython-cryptographyRed HatPython 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8...6.5 Mediumpython-cryptographyRed HatPossible Information Leak / Session Hijack Vulnerability in Rack6.3 Mediumpython-cryptographyRed HatDouble Free in psutil7.5 Highpython-cryptographyRed Hatkatello Improper Privilege Management vulnerability4.3 Mediumpython-cryptographyRed HatPyCA Cryptography vulnerable to GCM tag forgery7.5 Highpython-cryptographyRed Hatrack-protection gem timing attack vulnerability when validating CSRF token5.9 Mediumpython-cryptographyRed Hatrest-client Gem Vulnerable to Session Fixation9.8 Criticalpython-cryptographyRed Hatrest-client allows local users to obtain sensitive information by reading the log2.1 Lowpython-cryptographyRed HatDirectory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile...6.8 Medium