python-dynaconf vulnerabilities (Red Hat)
57 vulnerabilities.
python-dynaconfRed HatPossible XSS vulnerability with certain configurations of rails-html-sanitizer7.2 Highpython-dynaconfRed HatImproper neutralization of data URIs allows XSS in rails-html-sanitizer6.1 Mediumpython-dynaconfRed HatInefficient Regular Expression Complexity in rails-html-sanitizer7.5 Highpython-dynaconfRed HatUncontrolled Recursion in Loofah7.5 Highpython-dynaconfRed HatImproper neutralization of data URIs may allow XSS in Loofah6.1 Mediumpython-dynaconfRed HatInefficient Regular Expression Complexity in Loofah7.5 Highpython-dynaconfRed HatRemote Code execution in SnakeYAML8.3 Highpython-dynaconfRed HatTemporaryFolder on unix-like systems does not limit access to created files in pgjdbc4.7 Mediumpython-dynaconfRed HatApache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults9.8 Criticalpython-dynaconfRed HatDjango denial-of-service vulnerability in internationalized URLs7.5 Highpython-dynaconfRed HatUncontrolled Resource Consumption in FasterXML jackson-databind7.5 Highpython-dynaconfRed HatUncontrolled Resource Consumption in Jackson-databind7.5 Highpython-dynaconfRed HatDoS in SnakeYAML6.5 Mediumpython-dynaconfRed HatDoS in SnakeYAML6.5 Mediumpython-dynaconfRed HatDoS in SnakeYAML6.5 Mediumpython-dynaconfRed HatDoS in SnakeYAML6.5 Mediumpython-dynaconfRed HatDenial of Service (DoS)7.5 Highpython-dynaconfRed HatTZInfo relative path traversal vulnerability allows loading of arbitrary files7.5 Highpython-dynaconfRed HatActive Record RCE bug with Serialized Columns9.8 Criticalpython-dynaconfRed HatApache Commons Configuration insecure interpolation defaults9.8 Criticalpython-dynaconfRed HatXSS Vulnerability in Action View tag helpers6.1 Mediumpython-dynaconfRed HatCross-site Scripting Vulnerability in Action Pack6.1 Mediumpython-dynaconfRed HatA flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets...5.5 Mediumpython-dynaconfRed HatGeneration of Error Message Containing Sensitive Information in RESTEasy client5.3 Mediumpython-dynaconfRed HatXSS in Action View5.4 Mediumpython-dynaconfRed HatUntrusted users can run pending migrations in production in Rails6.5 Mediumpython-dynaconfRed HatCSRF Vulnerability in rails-ujs6.5 Mediumpython-dynaconfRed HatAbility to forge per-form CSRF tokens in Rails4.3 Mediumpython-dynaconfRed HatCircumvention of file size limits in ActiveStorage7.5 Highpython-dynaconfRed HatPossible Strong Parameters Bypass in ActionPack7.5 Highpython-dynaconfRed HatActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore9.8 Criticalpython-dynaconfRed HatDenial of Service in Netty7.5 Highpython-dynaconfRed HatSQL injection in Django8.8 Highpython-dynaconfRed HatPossible Information Leak / Session Hijack Vulnerability in Rack6.3 Mediumpython-dynaconfRed HatDouble Free in psutil7.5 Highpython-dynaconfRed Hatkatello Improper Privilege Management vulnerability4.3 Mediumpython-dynaconfRed Hatrack-protection gem timing attack vulnerability when validating CSRF token5.9 Mediumpython-dynaconfRed Hatrest-client Gem Vulnerable to Session Fixation9.8 Criticalpython-dynaconfRed Hatrest-client allows local users to obtain sensitive information by reading the log2.1 Low