python-py vulnerabilities (Red Hat)
79 vulnerabilities.
python-pyRed HatWeb Cache Poisoning5.9 Mediumpython-pyRed HatImproper Input Validation in PyYAML9.8 Criticalpython-pyRed HatRegular Expression Denial of Service (ReDoS)5.3 Mediumpython-pyRed HatPython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...9.8 Criticalpython-pyRed Hatlxml vulnerable to Cross-site Scripting6.1 Mediumpython-pyRed HatIn Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on...9.8 Criticalpython-pyRed HatCRLF injection in urllib36.5 Mediumpython-pyRed Hathttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...7.2 Highpython-pyRed HatPath Traversal in pip7.5 Highpython-pyRed HatIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...7.5 Highpython-pyRed HatDouble Free in psutil7.5 Highpython-pyRed HatThe documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3...6.1 Mediumpython-pyRed HatAn issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7...7.5 Highpython-pyRed Hathttp.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3...5.3 Mediumpython-pyRed HatImproper Certificate Validation in urllib37.5 Highpython-pyRed HatImproper Neutralization of CRLF Sequences in urllib3 library for Python6.1 Mediumpython-pyRed Haturllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for...9.1 Criticalpython-pyRed HatAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumpython-pyRed HatAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumpython-pyRed HatPython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...9.8 Criticalpython-pyRed HatSQLAlchemy vulnerable to SQL Injection via order_by parameter9.8 Criticalpython-pyRed HatSQLAlchemy is vulnerable to SQL Injection via group_by parameter7.8 Highpython-pyRed HatNumpy Deserialization of Untrusted Data9.8 Criticalpython-pyRed HatExposure of Sensitive Information to an Unauthorized Actor in urllib39.8 Criticalpython-pyRed HatInsufficiently Protected Credentials in Requests7.5 Highpython-pyRed HatThe OpenShift Enterprise cluster-read can access webhook tokens which would allow an attacker...5.0 Mediumpython-pyRed HatA flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin....6.5 Mediumpython-pyRed HatThe OpenShift image import whitelist failed to enforce restrictions correctly when running...4.3 Mediumpython-pyRed HatDirectory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile...6.8 Medium