python-cryptography vulnerabilities (Red Hat)
183 vulnerabilities.
python-cryptographyRed HatDjango memory consumption vulnerability7.5 Highpython-cryptographyRed HatHPACK table poisoning in gRPC C++, Python & Ruby6.3 Mediumpython-cryptographyRed HatEmail header injection due to unquoted newlines5.5 Mediumpython-cryptographyRed HatRemote Code Execution in pypa/setuptools8.8 Highpython-cryptographyRed HatDjango vulnerable to Denial of Service7.5 Highpython-cryptographyRed HatDjango Path Traversal vulnerability4.3 Mediumpython-cryptographyRed HatDjango vulnerable to user enumeration attack5.3 Mediumpython-cryptographyRed HatDjango vulnerable to Denial of Service7.5 Highpython-cryptographyRed HatDenial of Service via crafted zip file in jaraco/zipp6.2 Mediumpython-cryptographyRed HatBuffer overread when using an empty list with SSLContext.set_npn_protocols()6.5 Mediumpython-cryptographyRed HatProxy-Authorization request header isn't stripped during cross-origin redirects in urllib34.4 Mediumpython-cryptographyRed HatIncorrect IPv4 and IPv6 private ranges7.5 Highpython-cryptographyRed HatUnexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip9.8 Criticalpython-cryptographyRed HatRequests `Session` object does not verify requests after making first request with verify=False5.6 Mediumpython-cryptographyRed HatRegular Expression Denial of Service in micromatch5.3 Mediumpython-cryptographyRed HatJinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter5.4 Mediumpython-cryptographyRed HatDenial of service when trying to parse malformed POST requests in aiohttp7.5 Highpython-cryptographyRed Hatsocial-auth-app-django Improper Handling of Case Sensitivity vulnerability4.9 Mediumpython-cryptographyRed Hataiohttp vulnerable to XSS on index pages for static file handling6.1 Mediumpython-cryptographyRed HatHTTP Request Smuggling in benoitc/gunicorn7.5 Highpython-cryptographyRed HatPassing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError.7.5 Highpython-cryptographyRed HatRegular expression denial of service in Pydantic < 2.4.05.9 Mediumpython-cryptographyRed HatDenial of Service via Quadratic Complexity in kjd/idna6.2 Mediumpython-cryptographyRed HatPillow buffer overflow vulnerability6.7 Mediumpython-cryptographyRed HatHTTP/2 CONTINUATION flood in net/http7.5 Highpython-cryptographyRed Hatnode-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation6.5 Mediumpython-cryptographyRed HatQuoted zip-bomb protection for zipfile6.2 Mediumpython-cryptographyRed HatBlack vulnerable to Regular Expression Denial of Service (ReDoS)5.3 Mediumpython-cryptographyRed HatProxy-Authorization header kept across hosts in follow-redirects6.5 Mediumpython-cryptographyRed HatAn issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.2,...7.8 Highpython-cryptographyRed HatMemory exhaustion in multipart form parsing in net/textproto and net/http6.5 Mediumpython-cryptographyRed HatVerify panics on certificates with an unknown public key algorithm in crypto/x5095.9 Mediumpython-cryptographyRed HatRegular expression denial-of-service in Django5.3 Mediumpython-cryptographyRed Hatcryptography NULL pointer deference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override7.5 Highpython-cryptographyRed HatDjango denial-of-service attack in the intcomma template filter7.5 Highpython-cryptographyRed Hataiohttp.web.static(follow_symlinks=True) is vulnerable to directory traversal5.9 Mediumpython-cryptographyRed Hataiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separators6.5 Mediumpython-cryptographyRed Hatpython-ecdsa vulnerable to Minerva attack on P-2567.4 Highpython-cryptographyRed HatJinja vulnerable to Cross-Site Scripting (XSS)5.4 Mediumpython-cryptographyRed Hatcryptography vulnerable to NULL-dereference when loading PKCS7 certificates5.9 Mediumpython-cryptographyRed Hataiohttp's ClientSession is vulnerable to CRLF injection via version7.2 Highpython-cryptographyRed Hataiohttp's ClientSession is vulnerable to CRLF injection via method5.3 Mediumpython-cryptographyRed HatRequest smuggling in aiohttp5.3 Mediumpython-cryptographyRed HatMercurial configuration injectable in repo revision when installing via pip5.5 Mediumpython-cryptographyRed HatArbitrary Code Execution in Pillow8.1 Highpython-cryptographyRed HatDjango Denial-of-service in django.utils.text.Truncator7.5 Highpython-cryptographyRed HatPlatform: token exposed at importing project6.3 Mediumpython-cryptographyRed Hat`Cookie` HTTP header isn't stripped on cross-origin redirects5.9 Mediumpython-cryptographyRed HatDjango Denial of service vulnerability in django.utils.encoding.uri_to_iri7.5 Highpython-cryptographyRed HatAn issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and...5.3 Medium- Show moreLoading…