python-lxml-debugsource vulnerabilities (Red Hat)
121 vulnerabilities.
python-lxml-debugsourceRed HatInfinite loop when iterating over zip archive entry names from zipfile.Path8.7 Highpython-lxml-debugsourceRed HatDjango SQL injection vulnerability7.3 Highpython-lxml-debugsourceRed HatHPACK table poisoning in gRPC C++, Python & Ruby6.3 Mediumpython-lxml-debugsourceRed HatEmail header injection due to unquoted newlines5.5 Mediumpython-lxml-debugsourceRed HatRemote Code Execution in pypa/setuptools8.8 Highpython-lxml-debugsourceRed HatDjango vulnerable to Denial of Service7.5 Highpython-lxml-debugsourceRed HatDjango Path Traversal vulnerability4.3 Mediumpython-lxml-debugsourceRed HatDjango vulnerable to user enumeration attack5.3 Mediumpython-lxml-debugsourceRed HatDjango vulnerable to Denial of Service7.5 Highpython-lxml-debugsourceRed HatDenial of Service via crafted zip file in jaraco/zipp6.2 Mediumpython-lxml-debugsourceRed HatBuffer overread when using an empty list with SSLContext.set_npn_protocols()6.5 Mediumpython-lxml-debugsourceRed HatProxy-Authorization request header isn't stripped during cross-origin redirects in urllib34.4 Mediumpython-lxml-debugsourceRed HatIncorrect IPv4 and IPv6 private ranges7.5 Highpython-lxml-debugsourceRed HatRegular Expression Denial of Service in micromatch5.3 Mediumpython-lxml-debugsourceRed HatDenial of Service via Quadratic Complexity in kjd/idna6.2 Mediumpython-lxml-debugsourceRed Hatnode-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation6.5 Mediumpython-lxml-debugsourceRed HatQuoted zip-bomb protection for zipfile6.2 Mediumpython-lxml-debugsourceRed HatAn issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.2,...7.8 Highpython-lxml-debugsourceRed HatJinja vulnerable to Cross-Site Scripting (XSS)5.4 Mediumpython-lxml-debugsourceRed Hat`Cookie` HTTP header isn't stripped on cross-origin redirects5.9 Mediumpython-lxml-debugsourceRed HatAn issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and...5.3 Mediumpython-lxml-debugsourceRed HatAn XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no...9.8 Criticalpython-lxml-debugsourceRed HatA use-after-free exists in Python through 3.9 via heappushpop in heapq.7.5 Highpython-lxml-debugsourceRed HatUnintended leak of Proxy-Authorization header in requests6.1 Mediumpython-lxml-debugsourceRed HatThe e-mail module of Python 0 - 2.7.18, 3.x - 3.11 incorrectly parses e-mail addresses which...5.3 Mediumpython-lxml-debugsourceRed Hatjackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode7.5 Highpython-lxml-debugsourceRed HatAn issue in the urllib.parse component of Python before v3.11 allows attackers to bypass...7.5 Highpython-lxml-debugsourceRed HatResource exhaustion in Django7.5 Highpython-lxml-debugsourceRed HatCipher.update_into can corrupt memory in pyca cryptography4.8 Mediumpython-lxml-debugsourceRed HatDjango contains Uncontrolled Resource Consumption via cached header7.5 Highpython-lxml-debugsourceRed Hatpypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)5.9 Mediumpython-lxml-debugsourceRed Hatrails-html-sanitizer contains an incomplete fix for an XSS vulnerability6.1 Mediumpython-lxml-debugsourceRed HatPossible XSS vulnerability with certain configurations of rails-html-sanitizer7.2 Highpython-lxml-debugsourceRed HatImproper neutralization of data URIs allows XSS in rails-html-sanitizer6.1 Mediumpython-lxml-debugsourceRed HatInefficient Regular Expression Complexity in rails-html-sanitizer7.5 Highpython-lxml-debugsourceRed HatUncontrolled Recursion in Loofah7.5 Highpython-lxml-debugsourceRed HatImproper neutralization of data URIs may allow XSS in Loofah6.1 Mediumpython-lxml-debugsourceRed HatInefficient Regular Expression Complexity in Loofah7.5 Highpython-lxml-debugsourceRed HatRemote Code execution in SnakeYAML8.3 Highpython-lxml-debugsourceRed HatTemporaryFolder on unix-like systems does not limit access to created files in pgjdbc4.7 Mediumpython-lxml-debugsourceRed HatAn issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one...7.5 Highpython-lxml-debugsourceRed HatPython 3.9.x and 3.10.x through 3.10.8 on Linux allows local privilege escalation in a non...7.8 Highpython-lxml-debugsourceRed HatApache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults9.8 Criticalpython-lxml-debugsourceRed HatDjango denial-of-service vulnerability in internationalized URLs7.5 Highpython-lxml-debugsourceRed HatUncontrolled Resource Consumption in FasterXML jackson-databind7.5 Highpython-lxml-debugsourceRed HatUncontrolled Resource Consumption in Jackson-databind7.5 Highpython-lxml-debugsourceRed HatA flaw was found in python. In algorithms with quadratic time complexity using non-binary bases,...7.5 Highpython-lxml-debugsourceRed HatDoS in SnakeYAML6.5 Mediumpython-lxml-debugsourceRed HatDoS in SnakeYAML6.5 Mediumpython-lxml-debugsourceRed HatDoS in SnakeYAML6.5 Medium- Show moreLoading…