python-idna vulnerabilities (Red Hat)
175 vulnerabilities.
python-idnaRed HatInfinite Loop in Pygments7.5 Highpython-idnaRed HatWeb Cache Poisoning5.9 Mediumpython-idnaRed HatImproper Input Validation in PyYAML9.8 Criticalpython-idnaRed HatRegular Expression Denial of Service (ReDoS)5.3 Mediumpython-idnaRed HatPython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...9.8 Criticalpython-idnaRed Hatlxml vulnerable to Cross-site Scripting6.1 Mediumpython-idnaRed HatIn Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on...9.8 Criticalpython-idnaRed HatCRLF injection in urllib36.5 Mediumpython-idnaRed Hathttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...7.2 Highpython-idnaRed HatGeneration of Error Message Containing Sensitive Information in RESTEasy client5.3 Mediumpython-idnaRed HatXSS in Action View5.4 Mediumpython-idnaRed HatPath Traversal in pip7.5 Highpython-idnaRed HatA flaw was found in Red Hat Satellite 6 which allows privileged attacker to read cache files....8.8 Highpython-idnaRed HatIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...7.5 Highpython-idnaRed HatUntrusted users can run pending migrations in production in Rails6.5 Mediumpython-idnaRed HatCSRF Vulnerability in rails-ujs6.5 Mediumpython-idnaRed HatRack allows Percent-encoded cookies to overwrite existing prefixed cookie names7.5 Highpython-idnaRed HatIncorrect Calculation and Use of Insufficiently Random Values in Python5.9 Mediumpython-idnaRed HatDeserialization of untrusted data in Jackson Databind8.1 Highpython-idnaRed HatDeserialization of untrusted data in Jackson Databind8.1 Highpython-idnaRed HatDeserialization of untrusted data in Jackson Databind8.1 Highpython-idnaRed HatRegular Expression Denial of Service in websocket-extensions (RubyGem)7.5 Highpython-idnaRed HatAbility to forge per-form CSRF tokens in Rails4.3 Mediumpython-idnaRed HatCircumvention of file size limits in ActiveStorage7.5 Highpython-idnaRed HatPossible Strong Parameters Bypass in ActionPack7.5 Highpython-idnaRed HatActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore9.8 Criticalpython-idnaRed HatDirectory traversal in Rack::Directory app bundled with Rack8.6 Highpython-idnaRed HatImproper Input Validation in Hibernate Validator5.3 Mediumpython-idnaRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.1 Highpython-idnaRed HatDenial of Service in Netty7.5 Highpython-idnaRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 Highpython-idnaRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 Highpython-idnaRed HatImproper Input Validation in PyYAML9.8 Criticalpython-idnaRed HatPossible XSS vulnerability in ActionView4.0 Mediumpython-idnaRed HatPuppet Server and PuppetDB provide useful performance and debugging information via their metrics...7.5 Highpython-idnaRed HatSQL injection in Django8.8 Highpython-idnaRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticalpython-idnaRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticalpython-idnaRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticalpython-idnaRed HatImproper Certificate Validation in Puppet6.5 Mediumpython-idnaRed HatDeserialization of Untrusted Data in PyYAML9.8 Criticalpython-idnaRed HatDeserialization of Untrusted Data in jackson-databind9.8 Criticalpython-idnaRed HatPython 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8...6.5 Mediumpython-idnaRed HatHTTP Request Smuggling in Netty7.5 Highpython-idnaRed HatLimited header injection when using dynamic overrides with user input in RubyGems secure_headers4.4 Mediumpython-idnaRed HatDirective injection when using dynamic overrides with user input in RubyGems secure_headers4.4 Mediumpython-idnaRed HatPossible Information Leak / Session Hijack Vulnerability in Rack6.3 Mediumpython-idnaRed HatPrevious versions of Puppet Agent didn't verify the peer in the SSL connection prior to...5.4 Mediumpython-idnaRed HatDouble Free in psutil7.5 Highpython-idnaRed HatThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks6.5 Medium- Show moreLoading…