python-django vulnerabilities (Red Hat)
316 vulnerabilities.
python-djangoRed HatDjango memory consumption vulnerability7.5 Highpython-djangoRed HatHPACK table poisoning in gRPC C++, Python & Ruby6.3 Mediumpython-djangoRed HatDjango vulnerable to Denial of Service7.5 Highpython-djangoRed HatDjango Path Traversal vulnerability4.3 Mediumpython-djangoRed HatDjango vulnerable to user enumeration attack5.3 Mediumpython-djangoRed HatDjango vulnerable to Denial of Service7.5 Highpython-djangoRed HatDenial of Service via crafted zip file in jaraco/zipp6.2 Mediumpython-djangoRed HatProxy-Authorization request header isn't stripped during cross-origin redirects in urllib34.4 Mediumpython-djangoRed HatUnexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip9.8 Criticalpython-djangoRed HatRequests `Session` object does not verify requests after making first request with verify=False5.6 Mediumpython-djangoRed HatRegular Expression Denial of Service in micromatch5.3 Mediumpython-djangoRed HatMalformed DNS message can cause infinite loop in net5.9 Mediumpython-djangoRed HatJinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter5.4 Mediumpython-djangoRed HatDenial of service when trying to parse malformed POST requests in aiohttp7.5 Highpython-djangoRed HatPlatform: insecure websocket used when interacting with eda server8.1 Highpython-djangoRed Hatpython-jose algorithm confusion with OpenSSH ECDSA keys6.5 Mediumpython-djangoRed Hatsocial-auth-app-django Improper Handling of Case Sensitivity vulnerability4.9 Mediumpython-djangoRed Hataiohttp vulnerable to XSS on index pages for static file handling6.1 Mediumpython-djangoRed HatHTTP Request Smuggling in benoitc/gunicorn7.5 Highpython-djangoRed HatPassing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError.7.5 Highpython-djangoRed HatPillow buffer overflow vulnerability6.7 Mediumpython-djangoRed Hatnode-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation6.5 Mediumpython-djangoRed HatGolang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads7.5 Highpython-djangoRed HatRegular expression denial-of-service in Django5.3 Mediumpython-djangoRed Hatcryptography NULL pointer deference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override7.5 Highpython-djangoRed HatDjango denial-of-service attack in the intcomma template filter7.5 Highpython-djangoRed Hataiohttp.web.static(follow_symlinks=True) is vulnerable to directory traversal5.9 Mediumpython-djangoRed Hataiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separators6.5 Mediumpython-djangoRed Hatpython-ecdsa vulnerable to Minerva attack on P-2567.4 Highpython-djangoRed HatJinja vulnerable to Cross-Site Scripting (XSS)5.4 Mediumpython-djangoRed HatHTTP Request/Response Smuggling in puma5.9 Mediumpython-djangoRed HatPyCryptodome and pycryptodomex side-channel leakage for OAEP decryption5.9 Mediumpython-djangoRed HatAnsible: malicious role archive can cause ansible-galaxy to overwrite arbitrary files6.3 Mediumpython-djangoRed HatSatellite: arithmetic overflow in satellite7.6 Highpython-djangoRed HatDenial of service via chunk extensions in net/http5.3 Mediumpython-djangoRed Hatcryptography vulnerable to NULL-dereference when loading PKCS7 certificates5.9 Mediumpython-djangoRed Hataiohttp's ClientSession is vulnerable to CRLF injection via version7.2 Highpython-djangoRed Hataiohttp's ClientSession is vulnerable to CRLF injection via method5.3 Mediumpython-djangoRed HatAIOHTTP: HTTP request smuggling via WebSocket upgrade6.3 Mediumpython-djangoRed HatHub: insecure galaxy-importer tarfile extraction6.3 Mediumpython-djangoRed HatRequest smuggling in aiohttp5.3 Mediumpython-djangoRed HatAxios Cross-Site Request Forgery Vulnerability6.5 Mediumpython-djangoRed HatPillow Denial of Service vulnerability7.5 Highpython-djangoRed Hattwisted.web has disordered HTTP pipeline response5.3 Mediumpython-djangoRed HatHTTP/2 rapid reset can cause excessive work in net/http7.5 Highpython-djangoRed HatDjango Denial-of-service in django.utils.text.Truncator7.5 Highpython-djangoRed HatPlatform: token exposed at importing project6.3 Mediumpython-djangoRed HatOs command injection via ct_command and fcct_command8.0 Highpython-djangoRed HatArbitrary code execution through yaml global parameters8.0 Highpython-djangoRed HatForeman: arbitrary code execution through templates9.1 Critical- Show moreLoading…