python-gunicorn vulnerabilities (Red Hat)
104 vulnerabilities.
python-gunicornRed HatOpenshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the...7.4 Highpython-gunicornRed HatRemote Code execution in SnakeYAML8.3 Highpython-gunicornRed HatTemporaryFolder on unix-like systems does not limit access to created files in pgjdbc4.7 Mediumpython-gunicornRed HatKubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF)5.1 Mediumpython-gunicornRed HatApache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults9.8 Criticalpython-gunicornRed HatIncorrect sanitization of forwarded query parameters in net/http/httputil7.5 Highpython-gunicornRed HatMemory exhaustion when compiling regular expressions in regexp/syntax7.5 Highpython-gunicornRed HatUnbounded memory consumption when reading headers in archive/tar7.5 Highpython-gunicornRed HatDjango denial-of-service vulnerability in internationalized URLs7.5 Highpython-gunicornRed HatUncontrolled Resource Consumption in FasterXML jackson-databind7.5 Highpython-gunicornRed HatUncontrolled Resource Consumption in Jackson-databind7.5 Highpython-gunicornRed HatCRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure7.1 Highpython-gunicornRed HatFailure to strip relative path components in net/url7.5 Highpython-gunicornRed Hatgolang.org/x/net/http2 Denial of Service vulnerability7.5 Highpython-gunicornRed HatDoS in SnakeYAML6.5 Mediumpython-gunicornRed HatDoS in SnakeYAML6.5 Mediumpython-gunicornRed HatDoS in SnakeYAML6.5 Mediumpython-gunicornRed HatDoS in SnakeYAML6.5 Mediumpython-gunicornRed Hatpython-scciclient vulnerable to Man-in-the-middle (MITM) attacks7.4 Highpython-gunicornRed HatDenial of Service (DoS)7.5 Highpython-gunicornRed HatPanic when decoding Float and Rat types in math/big7.5 Highpython-gunicornRed HatTZInfo relative path traversal vulnerability allows loading of arbitrary files7.5 Highpython-gunicornRed HatExposure of client IP addresses in net/http6.5 Mediumpython-gunicornRed HatStack exhaustion when reading certain archives in compress/gzip7.5 Highpython-gunicornRed HatImproper sanitization of Transfer-Encoding headers in net/http6.5 Mediumpython-gunicornRed HatActive Record RCE bug with Serialized Columns9.8 Criticalpython-gunicornRed HatApache Commons Configuration insecure interpolation defaults9.8 Criticalpython-gunicornRed HatXSS Vulnerability in Action View tag helpers6.1 Mediumpython-gunicornRed HatCross-site Scripting Vulnerability in Action Pack6.1 Mediumpython-gunicornRed HatA flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets...5.5 Mediumpython-gunicornRed HatDenial of service in gopkg.in/yaml.v25.5 Mediumpython-gunicornRed HatGeneration of Error Message Containing Sensitive Information in RESTEasy client5.3 Mediumpython-gunicornRed HatXSS in Action View5.4 Mediumpython-gunicornRed HatUntrusted users can run pending migrations in production in Rails6.5 Mediumpython-gunicornRed HatCSRF Vulnerability in rails-ujs6.5 Mediumpython-gunicornRed HatAbility to forge per-form CSRF tokens in Rails4.3 Mediumpython-gunicornRed HatCircumvention of file size limits in ActiveStorage7.5 Highpython-gunicornRed HatPossible Strong Parameters Bypass in ActionPack7.5 Highpython-gunicornRed HatActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore9.8 Criticalpython-gunicornRed HatDenial of Service in Netty7.5 Highpython-gunicornRed HatSQL injection in Django8.8 Highpython-gunicornRed HatPossible Information Leak / Session Hijack Vulnerability in Rack6.3 Mediumpython-gunicornRed HatDouble Free in psutil7.5 Highpython-gunicornRed Hatkatello Improper Privilege Management vulnerability4.3 Mediumpython-gunicornRed Hatrack-protection gem timing attack vulnerability when validating CSRF token5.9 Mediumpython-gunicornRed Hatrest-client Gem Vulnerable to Session Fixation9.8 Criticalpython-gunicornRed Hatrest-client allows local users to obtain sensitive information by reading the log2.1 Low