python-jinja2 vulnerabilities (Red Hat)
274 vulnerabilities.
python-jinja2Red HatUncontrolled Resource Consumption in Jackson-databind7.5 Highpython-jinja2Red HatCRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure7.1 Highpython-jinja2Red HatFailure to strip relative path components in net/url7.5 Highpython-jinja2Red HatA flaw was found in python. In algorithms with quadratic time complexity using non-binary bases,...7.5 Highpython-jinja2Red Hatgolang.org/x/net/http2 Denial of Service vulnerability7.5 Highpython-jinja2Red HatDoS in SnakeYAML6.5 Mediumpython-jinja2Red HatDoS in SnakeYAML6.5 Mediumpython-jinja2Red HatDoS in SnakeYAML6.5 Mediumpython-jinja2Red HatDoS in SnakeYAML6.5 Mediumpython-jinja2Red Hatpython-scciclient vulnerable to Man-in-the-middle (MITM) attacks7.4 Highpython-jinja2Red HatDenial of Service (DoS)7.5 Highpython-jinja2Red HatPython 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no...7.4 Highpython-jinja2Red HatPanic when decoding Float and Rat types in math/big7.5 Highpython-jinja2Red HatTZInfo relative path traversal vulnerability allows loading of arbitrary files7.5 Highpython-jinja2Red HatExposure of client IP addresses in net/http6.5 Mediumpython-jinja2Red HatStack exhaustion when reading certain archives in compress/gzip7.5 Highpython-jinja2Red HatImproper sanitization of Transfer-Encoding headers in net/http6.5 Mediumpython-jinja2Red HatActive Record RCE bug with Serialized Columns9.8 Criticalpython-jinja2Red HatApache Commons Configuration insecure interpolation defaults9.8 Criticalpython-jinja2Red HatXSS Vulnerability in Action View tag helpers6.1 Mediumpython-jinja2Red HatCross-site Scripting Vulnerability in Action Pack6.1 Mediumpython-jinja2Red HatIn Python (aka CPython) through 3.10.4, the mailcap module does not add escape characters into...7.6 Highpython-jinja2Red HatA flaw was found in Python, specifically within the urllib.parse module. This module helps break...7.5 Highpython-jinja2Red HatA flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in...5.3 Mediumpython-jinja2Red HatHTML Cleaner allows crafted and SVG embedded scripts to pass through8.2 Highpython-jinja2Red HatDirectory Traversal in Babel7.8 Highpython-jinja2Red HatThere's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious...6.5 Mediumpython-jinja2Red HatA flaw was found in python. An improperly handled HTTP response in the HTTP client code of python...7.5 Highpython-jinja2Red HatImproper Input Validation in pip5.7 Mediumpython-jinja2Red HatAn account takeover flaw was found in Red Hat Satellite 6.7.2 onward. A potential attacker with...7.5 Highpython-jinja2Red HatA flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets...5.5 Mediumpython-jinja2Red HatCatastrophic backtracking in URL authority parser when passed URL containing many @ characters7.5 Highpython-jinja2Red HatA flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not...6.5 Mediumpython-jinja2Red HatImproper input validation of octal strings in Python stdlib ipaddress 3.10 and below allows...9.8 Criticalpython-jinja2Red HatRelative Path Traversal in Babel 2.9.0 allows an attacker to load arbitrary locale files on disk...7.8 Highpython-jinja2Red HatDenial of service in gopkg.in/yaml.v25.5 Mediumpython-jinja2Red HatThere's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to...5.7 Mediumpython-jinja2Red Hatlxml vulnerable to Cross-Site Scripting6.1 Mediumpython-jinja2Red HatPygments vulnerable to Regular Expression Denial of Service (ReDoS)7.5 Highpython-jinja2Red HatInfinite Loop in Pygments7.5 Highpython-jinja2Red HatWeb Cache Poisoning5.9 Mediumpython-jinja2Red HatImproper Input Validation in PyYAML9.8 Criticalpython-jinja2Red HatRegular Expression Denial of Service (ReDoS)5.3 Mediumpython-jinja2Red HatPython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...9.8 Criticalpython-jinja2Red Hatlxml vulnerable to Cross-site Scripting6.1 Mediumpython-jinja2Red HatIn Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on...9.8 Criticalpython-jinja2Red HatCRLF injection in urllib36.5 Mediumpython-jinja2Red Hathttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...7.2 Highpython-jinja2Red HatGeneration of Error Message Containing Sensitive Information in RESTEasy client5.3 Mediumpython-jinja2Red HatXSS in Action View5.4 Medium- Show moreLoading…