python-jinja2 vulnerabilities (Red Hat)
274 vulnerabilities.
python-jinja2Red HatHTTP Request/Response Smuggling in puma5.9 Mediumpython-jinja2Red HatPyCryptodome and pycryptodomex side-channel leakage for OAEP decryption5.9 Mediumpython-jinja2Red HatSatellite: arithmetic overflow in satellite7.6 Highpython-jinja2Red Hatcryptography vulnerable to NULL-dereference when loading PKCS7 certificates5.9 Mediumpython-jinja2Red Hataiohttp's ClientSession is vulnerable to CRLF injection via version7.2 Highpython-jinja2Red Hataiohttp's ClientSession is vulnerable to CRLF injection via method5.3 Mediumpython-jinja2Red HatHub: insecure galaxy-importer tarfile extraction6.3 Mediumpython-jinja2Red HatRequest smuggling in aiohttp5.3 Mediumpython-jinja2Red HatPillow Denial of Service vulnerability7.5 Highpython-jinja2Red HatMercurial configuration injectable in repo revision when installing via pip5.5 Mediumpython-jinja2Red HatArbitrary Code Execution in Pillow8.1 Highpython-jinja2Red HatDjango Denial-of-service in django.utils.text.Truncator7.5 Highpython-jinja2Red Hat`Cookie` HTTP header isn't stripped on cross-origin redirects5.9 Mediumpython-jinja2Red HatCri-o: security regression of cve-2022-276524.8 Mediumpython-jinja2Red HatDjango Denial of service vulnerability in django.utils.encoding.uri_to_iri7.5 Highpython-jinja2Red HatAn issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and...5.3 Mediumpython-jinja2Red HatActive Support Possibly Discloses Locally Encrypted Files5.5 Mediumpython-jinja2Red HatAn XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no...9.8 Criticalpython-jinja2Red HatA use-after-free exists in Python through 3.9 via heappushpop in heapq.7.5 Highpython-jinja2Red Hataiohttp vulnerable to HTTP request smuggling5.3 Mediumpython-jinja2Red HatPygments vulnerable to ReDoS5.5 Mediumpython-jinja2Red HatJetty accepts "+" prefixed value in Content-Length5.3 Mediumpython-jinja2Red HatJetty vulnerable to errant command quoting in CGI Servlet3.5 Lowpython-jinja2Red HatDjango has regular expression denial of service vulnerability in EmailValidator/URLValidator7.5 Highpython-jinja2Red HatUnintended leak of Proxy-Authorization header in requests6.1 Mediumpython-jinja2Red HatAudited Log Integrity Errors Due to Race Condition3.1 Lowpython-jinja2Red Hatjackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode7.5 Highpython-jinja2Red HatUnauthorized read of Custom Resources6.5 Mediumpython-jinja2Red HatAn issue in the urllib.parse component of Python before v3.11 allows attackers to bypass...7.5 Highpython-jinja2Red HatResource exhaustion in Django7.5 Highpython-jinja2Red HatDjango contains Uncontrolled Resource Consumption via cached header7.5 Highpython-jinja2Red Hatpypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)5.9 Mediumpython-jinja2Red Hatrails-html-sanitizer contains an incomplete fix for an XSS vulnerability6.1 Mediumpython-jinja2Red HatPossible XSS vulnerability with certain configurations of rails-html-sanitizer7.2 Highpython-jinja2Red HatImproper neutralization of data URIs allows XSS in rails-html-sanitizer6.1 Mediumpython-jinja2Red HatInefficient Regular Expression Complexity in rails-html-sanitizer7.5 Highpython-jinja2Red HatUncontrolled Recursion in Loofah7.5 Highpython-jinja2Red HatImproper neutralization of data URIs may allow XSS in Loofah6.1 Mediumpython-jinja2Red HatInefficient Regular Expression Complexity in Loofah7.5 Highpython-jinja2Red HatOpenshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the...7.4 Highpython-jinja2Red HatRemote Code execution in SnakeYAML8.3 Highpython-jinja2Red HatTemporaryFolder on unix-like systems does not limit access to created files in pgjdbc4.7 Mediumpython-jinja2Red HatAn issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one...7.5 Highpython-jinja2Red HatKubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF)5.1 Mediumpython-jinja2Red HatApache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults9.8 Criticalpython-jinja2Red HatIncorrect sanitization of forwarded query parameters in net/http/httputil7.5 Highpython-jinja2Red HatMemory exhaustion when compiling regular expressions in regexp/syntax7.5 Highpython-jinja2Red HatUnbounded memory consumption when reading headers in archive/tar7.5 Highpython-jinja2Red HatDjango denial-of-service vulnerability in internationalized URLs7.5 Highpython-jinja2Red HatUncontrolled Resource Consumption in FasterXML jackson-databind7.5 High- Show moreLoading…