python-pulpcore vulnerabilities (Red Hat)
94 vulnerabilities.
python-pulpcoreRed HatProxy-Authorization request header isn't stripped during cross-origin redirects in urllib34.4 Mediumpython-pulpcoreRed HatUnexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip9.8 Criticalpython-pulpcoreRed HatRequests `Session` object does not verify requests after making first request with verify=False5.6 Mediumpython-pulpcoreRed HatForeman: host ssh key not being checked in remote execution6.8 Mediumpython-pulpcoreRed HatRegular Expression Denial of Service in micromatch5.3 Mediumpython-pulpcoreRed HatMalformed DNS message can cause infinite loop in net5.9 Mediumpython-pulpcoreRed Hatnode-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation6.5 Mediumpython-pulpcoreRed HatRequest body not stripped after redirect in urllib34.2 Mediumpython-pulpcoreRed HatForeman: world readable file containing secrets6.7 Mediumpython-pulpcoreRed Hat`Cookie` HTTP header isn't stripped on cross-origin redirects5.9 Mediumpython-pulpcoreRed HatGitPython blind local file inclusion4.0 Mediumpython-pulpcoreRed HatActionpack has possible cross-site scripting vulnerability via User Supplied Values to redirect_to4.0 Mediumpython-pulpcoreRed Hatjackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode7.5 Highpython-pulpcoreRed HatResource exhaustion in Django7.5 Highpython-pulpcoreRed HatDjango contains Uncontrolled Resource Consumption via cached header7.5 Highpython-pulpcoreRed Hatrails-html-sanitizer contains an incomplete fix for an XSS vulnerability6.1 Mediumpython-pulpcoreRed HatPossible XSS vulnerability with certain configurations of rails-html-sanitizer7.2 Highpython-pulpcoreRed HatImproper neutralization of data URIs allows XSS in rails-html-sanitizer6.1 Mediumpython-pulpcoreRed HatInefficient Regular Expression Complexity in rails-html-sanitizer7.5 Highpython-pulpcoreRed HatUncontrolled Recursion in Loofah7.5 Highpython-pulpcoreRed HatImproper neutralization of data URIs may allow XSS in Loofah6.1 Mediumpython-pulpcoreRed HatInefficient Regular Expression Complexity in Loofah7.5 Highpython-pulpcoreRed HatRemote Code execution in SnakeYAML8.3 Highpython-pulpcoreRed HatTemporaryFolder on unix-like systems does not limit access to created files in pgjdbc4.7 Mediumpython-pulpcoreRed HatApache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults9.8 Criticalpython-pulpcoreRed HatDjango denial-of-service vulnerability in internationalized URLs7.5 Highpython-pulpcoreRed HatUncontrolled Resource Consumption in FasterXML jackson-databind7.5 Highpython-pulpcoreRed HatUncontrolled Resource Consumption in Jackson-databind7.5 Highpython-pulpcoreRed HatDoS in SnakeYAML6.5 Mediumpython-pulpcoreRed HatDoS in SnakeYAML6.5 Mediumpython-pulpcoreRed HatDoS in SnakeYAML6.5 Mediumpython-pulpcoreRed HatDoS in SnakeYAML6.5 Mediumpython-pulpcoreRed HatDenial of Service (DoS)7.5 Highpython-pulpcoreRed HatTZInfo relative path traversal vulnerability allows loading of arbitrary files7.5 Highpython-pulpcoreRed HatActive Record RCE bug with Serialized Columns9.8 Criticalpython-pulpcoreRed HatApache Commons Configuration insecure interpolation defaults9.8 Criticalpython-pulpcoreRed HatXSS Vulnerability in Action View tag helpers6.1 Mediumpython-pulpcoreRed HatCross-site Scripting Vulnerability in Action Pack6.1 Mediumpython-pulpcoreRed HatSQL Injection in Django9.8 Criticalpython-pulpcoreRed HatSQL Injection in Django9.8 Criticalpython-pulpcoreRed HatA flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets...5.5 Mediumpython-pulpcoreRed HatA security issue in nginx resolver was identified, which might allow an attacker who is able to...7.7 Highpython-pulpcoreRed HatGeneration of Error Message Containing Sensitive Information in RESTEasy client5.3 Mediumpython-pulpcoreRed HatXSS in Action View5.4 Mediumpython-pulpcoreRed HatUntrusted users can run pending migrations in production in Rails6.5 Mediumpython-pulpcoreRed HatCSRF Vulnerability in rails-ujs6.5 Mediumpython-pulpcoreRed HatAbility to forge per-form CSRF tokens in Rails4.3 Mediumpython-pulpcoreRed HatCircumvention of file size limits in ActiveStorage7.5 Highpython-pulpcoreRed HatPossible Strong Parameters Bypass in ActionPack7.5 Highpython-pulpcoreRed HatActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore9.8 Critical- Show moreLoading…