python-jinja2 vulnerabilities (Red Hat)
274 vulnerabilities.
python-jinja2Red HatImproper Neutralization of CRLF Sequences in urllib3 library for Python6.1 Mediumpython-jinja2Red HatIn Foreman it was discovered that the delete compute resource operation, when executed from the...4.9 Mediumpython-jinja2Red HatJinja2 sandbox escape vulnerability8.6 Highpython-jinja2Red HatJinja2 sandbox escape via string formatting8.6 Highpython-jinja2Red Haturllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for...9.1 Criticalpython-jinja2Red HatAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumpython-jinja2Red HatAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumpython-jinja2Red HatPython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...9.8 Criticalpython-jinja2Red HatSQLAlchemy vulnerable to SQL Injection via order_by parameter9.8 Criticalpython-jinja2Red HatSQLAlchemy is vulnerable to SQL Injection via group_by parameter7.8 Highpython-jinja2Red HatNumpy Deserialization of Untrusted Data9.8 Criticalpython-jinja2Red HatExposure of Sensitive Information to an Unauthorized Actor in urllib39.8 Criticalpython-jinja2Red HatRack vulnerable to Denial of Service7.5 Highpython-jinja2Red HatImproper Privilege Management in MySQL Connectors Java8.8 Highpython-jinja2Red HatInsufficiently Protected Credentials in Requests7.5 Highpython-jinja2Red Hatkatello Improper Privilege Management vulnerability4.3 Mediumpython-jinja2Red HatDom4j contains a XML Injection vulnerability7.5 Highpython-jinja2Red HatRed Hat Satellite before 6.5 is vulnerable to a XSS in discovery rule when you are entering...3.5 Lowpython-jinja2Red HatIn Pulp before version 2.16.2, secrets are passed into override_config when triggering a task and...5.5 Mediumpython-jinja2Red HatIn Bouncy Castle JCE Provider the ECIES implementation allowed the use of ECB mode7.4 Highpython-jinja2Red HatIn Bouncy Castle JCE Provider the DHIES implementation allowed the use of ECB mode7.4 Highpython-jinja2Red HatThe Bouncy Castle JCE Provider carry a propagation bug7.5 Highpython-jinja2Red HatIn Bouncy Castle JCE Provider the other party DH public key is not fully validated3.7 Lowpython-jinja2Red HatModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.9 Mediumpython-jinja2Red HatIn Bouncy Castle JCE Provider the DSA key pair generator generates a weak private key if used with default values7.5 Highpython-jinja2Red HatIn Bouncy Castle JCE Provider ECDSA does not fully validate ASN.1 encoding of signature on verification7.5 Highpython-jinja2Red HatModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.9 Mediumpython-jinja2Red HatModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.3 Mediumpython-jinja2Red HatIn Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validate7.5 Highpython-jinja2Red HatDenial of Service in Google Guava5.9 Mediumpython-jinja2Red HatBouncy Castle BKS-V1 keystore files vulnerable to trivial hash collisions4.4 Mediumpython-jinja2Red HatAn input sanitization flaw was found in the id field in the dashboard controller of Foreman...6.5 Mediumpython-jinja2Red HatA flaw was found in foreman before 1.16.1. The issue allows users with limited permissions for...8.8 Highpython-jinja2Red Hatrack-protection gem timing attack vulnerability when validating CSRF token5.9 Mediumpython-jinja2Red HatDjango Denial-of-service possibility in truncatechars_html and truncatewords_html template filters5.3 Mediumpython-jinja2Red HatDjango denial-of-service possibility in urlize and urlizetrunc template filters5.3 Mediumpython-jinja2Red HatThe qpidd broker in Apache Qpid 0.30 and earlier allows remote authenticated users to cause a...6.5 Mediumpython-jinja2Red HatIn previous versions of Puppet Agent it was possible for the agent to retrieve facts from an...6.5 Mediumpython-jinja2Red HatDjango vulnerable to information leakage in AuthenticationForm7.5 Highpython-jinja2Red HatPrivilege Escalation in Hibernate Validator7.0 Highpython-jinja2Red HatTarball permission preservation in puppet5.5 Mediumpython-jinja2Red Hatnet-ldap Improper Certificate Validation vulnerability5.9 Mediumpython-jinja2Red HatAn attacker submitting facts to the Foreman server containing HTML can cause a stored XSS on...6.1 Mediumpython-jinja2Red Hatjackson-databind vulnerable to deserialization flaw leading to unauthenticated remote code execution9.8 Criticalpython-jinja2Red Hatqpidd in Apache Qpid 0.30 and earlier allows remote attackers to cause a denial of service ...7.5 Highpython-jinja2Red HatPallets Werkzeug cross-site scripting vulnerability6.1 Mediumpython-jinja2Red HatWithdrawn Advisory: Improper Restriction of XML External Entity Reference in Apache ActiveMQ9.8 Criticalpython-jinja2Red Hatrpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through...7.5 Highpython-jinja2Red HatDjango open redirect and possible XSS attack via user-supplied numeric redirect URLs6.1 Mediumpython-jinja2Red HatQOS.ch Logback vulnerable to Deserialization of Untrusted Data9.8 Critical- Show moreLoading…