python-defusedxml vulnerabilities (Red Hat)
81 vulnerabilities.
python-defusedxmlRed HatImproper sanitization of Transfer-Encoding headers in net/http6.5 Mediumpython-defusedxmlRed HatActive Record RCE bug with Serialized Columns9.8 Criticalpython-defusedxmlRed HatApache Commons Configuration insecure interpolation defaults9.8 Criticalpython-defusedxmlRed HatXSS Vulnerability in Action View tag helpers6.1 Mediumpython-defusedxmlRed HatCross-site Scripting Vulnerability in Action Pack6.1 Mediumpython-defusedxmlRed HatA flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets...5.5 Mediumpython-defusedxmlRed HatDenial of service in gopkg.in/yaml.v25.5 Mediumpython-defusedxmlRed HatGeneration of Error Message Containing Sensitive Information in RESTEasy client5.3 Mediumpython-defusedxmlRed HatXSS in Action View5.4 Mediumpython-defusedxmlRed HatUntrusted users can run pending migrations in production in Rails6.5 Mediumpython-defusedxmlRed HatCSRF Vulnerability in rails-ujs6.5 Mediumpython-defusedxmlRed HatAbility to forge per-form CSRF tokens in Rails4.3 Mediumpython-defusedxmlRed HatCircumvention of file size limits in ActiveStorage7.5 Highpython-defusedxmlRed HatPossible Strong Parameters Bypass in ActionPack7.5 Highpython-defusedxmlRed HatActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore9.8 Criticalpython-defusedxmlRed HatDenial of Service in Netty7.5 Highpython-defusedxmlRed HatSQL injection in Django8.8 Highpython-defusedxmlRed HatPossible Information Leak / Session Hijack Vulnerability in Rack6.3 Mediumpython-defusedxmlRed HatDouble Free in psutil7.5 Highpython-defusedxmlRed Hatkatello Improper Privilege Management vulnerability4.3 Mediumpython-defusedxmlRed Hatrack-protection gem timing attack vulnerability when validating CSRF token5.9 Mediumpython-defusedxmlRed HatPysaml2 does not sanitize XML responses7.5 Highpython-defusedxmlRed Hatrest-client Gem Vulnerable to Session Fixation9.8 Criticalpython-defusedxmlRed Hatrest-client allows local users to obtain sensitive information by reading the log2.1 Low