python-django vulnerabilities (Red Hat)
316 vulnerabilities.
python-djangoRed HatForeman: stored cross-site scripting in host tab5.4 Mediumpython-djangoRed HatDjango Denial of service vulnerability in django.utils.encoding.uri_to_iri7.5 Highpython-djangoRed HatGitPython blind local file inclusion4.0 Mediumpython-djangoRed HatActive Support Possibly Discloses Locally Encrypted Files5.5 Mediumpython-djangoRed HatExcessive time spent checking DH q parameter value5.3 Mediumpython-djangoRed HatGitPython vulnerable to remote code execution due to insufficient sanitization of input arguments9.8 Criticalpython-djangoRed Hataiohttp vulnerable to HTTP request smuggling5.3 Mediumpython-djangoRed HatPygments vulnerable to ReDoS5.5 Mediumpython-djangoRed HatInsufficient sanitization of Host header in net/http6.5 Mediumpython-djangoRed HatEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 Highpython-djangoRed HatJetty accepts "+" prefixed value in Content-Length5.3 Mediumpython-djangoRed HatJetty vulnerable to errant command quoting in CGI Servlet3.5 Lowpython-djangoRed HatDjango has regular expression denial of service vulnerability in EmailValidator/URLValidator7.5 Highpython-djangoRed HatUnintended leak of Proxy-Authorization header in requests6.1 Mediumpython-djangoRed HatA Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2...5.3 Mediumpython-djangoRed HatDjango bypasses validation when using one form field to upload multiple files9.8 Criticalpython-djangoRed HatAudited Log Integrity Errors Due to Race Condition3.1 Lowpython-djangoRed HatParser contains an inefficient regular expression in sqlparse5.5 Mediumpython-djangoRed Hatjackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode7.5 Highpython-djangoRed HatPossible Denial of Service Vulnerability in Rack's header parsing5.3 Mediumpython-djangoRed HatRack has possible DoS Vulnerability in Multipart MIME parsing7.5 Highpython-djangoRed HatResource exhaustion in Django7.5 Highpython-djangoRed HatCipher.update_into can corrupt memory in pyca cryptography4.8 Mediumpython-djangoRed HatDjango contains Uncontrolled Resource Consumption via cached header7.5 Highpython-djangoRed HatDenial of Service Vulnerability in Rack Content-Disposition parsing7.5 Highpython-djangoRed HatReDoS based DoS vulnerability in Action Dispatch7.5 Highpython-djangoRed HatReDoS based DoS vulnerability in Active Support's underscore7.5 Highpython-djangoRed HatDenial of Service Vulnerability in ActiveRecord's PostgreSQL adapter7.5 Highpython-djangoRed HatReDoS based DoS vulnerability in Action Dispatch7.5 Highpython-djangoRed HatSQL Injection Vulnerability via ActiveRecord comments8.8 Highpython-djangoRed HatDenial of service via header parsing in Rack7.5 Highpython-djangoRed HatDenial of service via multipart parsing in Rack7.5 Highpython-djangoRed HatReDoS based DoS vulnerability in GlobalID7.5 Highpython-djangoRed HatCode injection in ruby git8.0 Highpython-djangoRed Hatruby-git has potential remote code execution vulnerability8.0 Highpython-djangoRed HatPython Charmers Future denial of service vulnerability7.5 Highpython-djangoRed HatA blind site-to-site request forgery vulnerability was found in Satellite server. It is possible...4.5 Mediumpython-djangoRed Hatrails-html-sanitizer contains an incomplete fix for an XSS vulnerability6.1 Mediumpython-djangoRed HatPossible XSS vulnerability with certain configurations of rails-html-sanitizer7.2 Highpython-djangoRed HatImproper neutralization of data URIs allows XSS in rails-html-sanitizer6.1 Mediumpython-djangoRed HatInefficient Regular Expression Complexity in rails-html-sanitizer7.5 Highpython-djangoRed HatUncontrolled Recursion in Loofah7.5 Highpython-djangoRed HatImproper neutralization of data URIs may allow XSS in Loofah6.1 Mediumpython-djangoRed HatInefficient Regular Expression Complexity in Loofah7.5 Highpython-djangoRed HatExcessive memory growth in net/http and golang.org/x/net/http25.3 Mediumpython-djangoRed HatRemote Code Execution (RCE)8.1 Highpython-djangoRed HatRemote Code execution in SnakeYAML8.3 Highpython-djangoRed HatTemporaryFolder on unix-like systems does not limit access to created files in pgjdbc4.7 Mediumpython-djangoRed HatPlaintext storage of tokens in pulp_ansible5.5 Mediumpython-djangoRed HatApache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults9.8 Critical- Show moreLoading…