python-markupsafe vulnerabilities (Red Hat)
175 vulnerabilities.
python-markupsafeRed HatRack allows Percent-encoded cookies to overwrite existing prefixed cookie names7.5 Highpython-markupsafeRed HatIncorrect Calculation and Use of Insufficiently Random Values in Python5.9 Mediumpython-markupsafeRed HatDeserialization of untrusted data in Jackson Databind8.1 Highpython-markupsafeRed HatDeserialization of untrusted data in Jackson Databind8.1 Highpython-markupsafeRed HatDeserialization of untrusted data in Jackson Databind8.1 Highpython-markupsafeRed HatRegular Expression Denial of Service in websocket-extensions (RubyGem)7.5 Highpython-markupsafeRed HatAbility to forge per-form CSRF tokens in Rails4.3 Mediumpython-markupsafeRed HatCircumvention of file size limits in ActiveStorage7.5 Highpython-markupsafeRed HatPossible Strong Parameters Bypass in ActionPack7.5 Highpython-markupsafeRed HatActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore9.8 Criticalpython-markupsafeRed HatDirectory traversal in Rack::Directory app bundled with Rack8.6 Highpython-markupsafeRed HatImproper Input Validation in Hibernate Validator5.3 Mediumpython-markupsafeRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.1 Highpython-markupsafeRed HatDenial of Service in Netty7.5 Highpython-markupsafeRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 Highpython-markupsafeRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 Highpython-markupsafeRed HatImproper Input Validation in PyYAML9.8 Criticalpython-markupsafeRed HatPossible XSS vulnerability in ActionView4.0 Mediumpython-markupsafeRed HatPuppet Server and PuppetDB provide useful performance and debugging information via their metrics...7.5 Highpython-markupsafeRed HatSQL injection in Django8.8 Highpython-markupsafeRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticalpython-markupsafeRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticalpython-markupsafeRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticalpython-markupsafeRed HatImproper Certificate Validation in Puppet6.5 Mediumpython-markupsafeRed HatDeserialization of Untrusted Data in PyYAML9.8 Criticalpython-markupsafeRed HatDeserialization of Untrusted Data in jackson-databind9.8 Criticalpython-markupsafeRed HatPython 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8...6.5 Mediumpython-markupsafeRed HatHTTP Request Smuggling in Netty7.5 Highpython-markupsafeRed HatLimited header injection when using dynamic overrides with user input in RubyGems secure_headers4.4 Mediumpython-markupsafeRed HatDirective injection when using dynamic overrides with user input in RubyGems secure_headers4.4 Mediumpython-markupsafeRed HatPossible Information Leak / Session Hijack Vulnerability in Rack6.3 Mediumpython-markupsafeRed HatPrevious versions of Puppet Agent didn't verify the peer in the SSL connection prior to...5.4 Mediumpython-markupsafeRed HatKatello cleartext password storage issue4.1 Mediumpython-markupsafeRed HatDouble Free in psutil7.5 Highpython-markupsafeRed HatThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks6.5 Mediumpython-markupsafeRed HatApache MINA SSLFilter security Issue7.5 Highpython-markupsafeRed HatThe documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3...6.1 Mediumpython-markupsafeRed HatAn issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7...7.5 Highpython-markupsafeRed HatInsecure Deserialization in Apache Commons Beanutils7.3 Highpython-markupsafeRed HatAn authentication bypass vulnerability was discovered in foreman-tasks before 0.15.7. Previously,...6.5 Mediumpython-markupsafeRed Hathttp.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3...5.3 Mediumpython-markupsafeRed HatDjango Incorrect HTTP detection with reverse-proxy connecting via HTTPS5.3 Mediumpython-markupsafeRed HatTwisted CRLF Injection6.1 Mediumpython-markupsafeRed HatInformation exposure in FasterXML jackson-databind7.5 Highpython-markupsafeRed HatImproper Certificate Validation in urllib37.5 Highpython-markupsafeRed HatImproper Neutralization of CRLF Sequences in urllib3 library for Python6.1 Mediumpython-markupsafeRed HatIn Foreman it was discovered that the delete compute resource operation, when executed from the...4.9 Mediumpython-markupsafeRed HatJinja2 sandbox escape vulnerability8.6 Highpython-markupsafeRed HatJinja2 sandbox escape via string formatting8.6 Highpython-markupsafeRed Haturllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for...9.1 Critical- Show moreLoading…