python-pygments vulnerabilities (Red Hat)
106 vulnerabilities.
-
python-pygmentsRed Hat GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Python Driver 6.1 Medium -
python-pygmentsRed Hat virtualenv allows command injection through activation scripts for a virtual environment 7.8 High -
python-pygmentsRed Hat Foreman: read-only access to entire db from templates 6.3 Medium -
python-pygmentsRed Hat Memory leak 7.2 High -
python-pygmentsRed Hat Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcore 9.8 Critical -
python-pygmentsRed Hat Puppet-foreman: an authentication bypass vulnerability exists in foreman 9.8 Critical -
python-pygmentsRed Hat Django SQL injection vulnerability 7.3 High -
python-pygmentsRed Hat HPACK table poisoning in gRPC C++, Python & Ruby 6.3 Medium -
python-pygmentsRed Hat Django vulnerable to Denial of Service 7.5 High -
python-pygmentsRed Hat Django Path Traversal vulnerability 4.3 Medium -
python-pygmentsRed Hat Django vulnerable to user enumeration attack 5.3 Medium -
python-pygmentsRed Hat Django vulnerable to Denial of Service 7.5 High -
python-pygmentsRed Hat Denial of Service via crafted zip file in jaraco/zipp 6.2 Medium -
python-pygmentsRed Hat Proxy-Authorization request header isn't stripped during cross-origin redirects in urllib3 4.4 Medium -
python-pygmentsRed Hat Out-of-bounds read in bson module of PyMongo 4.7 Medium -
python-pygmentsRed Hat Regular Expression Denial of Service in micromatch 5.3 Medium -
python-pygmentsRed Hat Platform: insecure websocket used when interacting with eda server 8.1 High -
python-pygmentsRed Hat node-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation 6.5 Medium -
python-pygmentsRed Hat Django denial-of-service attack in the intcomma template filter 7.5 High -
python-pygmentsRed Hat aiohttp.web.static(follow_symlinks=True) is vulnerable to directory traversal 5.9 Medium -
python-pygmentsRed Hat aiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separators 6.5 Medium -
python-pygmentsRed Hat Jinja vulnerable to Cross-Site Scripting (XSS) 5.4 Medium -
python-pygmentsRed Hat HTTP Request/Response Smuggling in puma 5.9 Medium -
python-pygmentsRed Hat PyCryptodome and pycryptodomex side-channel leakage for OAEP decryption 5.9 Medium -
python-pygmentsRed Hat Satellite: arithmetic overflow in satellite 7.6 High -
python-pygmentsRed Hat aiohttp's ClientSession is vulnerable to CRLF injection via version 7.2 High -
python-pygmentsRed Hat aiohttp's ClientSession is vulnerable to CRLF injection via method 5.3 Medium -
python-pygmentsRed Hat Hub: insecure galaxy-importer tarfile extraction 6.3 Medium -
python-pygmentsRed Hat Request smuggling in aiohttp 5.3 Medium -
python-pygmentsRed Hat Pillow Denial of Service vulnerability 7.5 High -
python-pygmentsRed Hat Django Denial-of-service in django.utils.text.Truncator 7.5 High -
python-pygmentsRed Hat `Cookie` HTTP header isn't stripped on cross-origin redirects 5.9 Medium -
python-pygmentsRed Hat Django Denial of service vulnerability in django.utils.encoding.uri_to_iri 7.5 High -
python-pygmentsRed Hat An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and... 5.3 Medium -
python-pygmentsRed Hat Active Support Possibly Discloses Locally Encrypted Files 5.5 Medium -
python-pygmentsRed Hat An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no... 9.8 Critical -
python-pygmentsRed Hat A use-after-free exists in Python through 3.9 via heappushpop in heapq. 7.5 High -
python-pygmentsRed Hat aiohttp vulnerable to HTTP request smuggling 5.3 Medium -
python-pygmentsRed Hat Pygments vulnerable to ReDoS 5.5 Medium -
python-pygmentsRed Hat Jetty accepts "+" prefixed value in Content-Length 5.3 Medium -
python-pygmentsRed Hat Jetty vulnerable to errant command quoting in CGI Servlet 3.5 Low -
python-pygmentsRed Hat Unintended leak of Proxy-Authorization header in requests 6.1 Medium -
python-pygmentsRed Hat Audited Log Integrity Errors Due to Race Condition 3.1 Low -
python-pygmentsRed Hat jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode 7.5 High -
python-pygmentsRed Hat An issue in the urllib.parse component of Python before v3.11 allows attackers to bypass... 7.5 High -
python-pygmentsRed Hat Resource exhaustion in Django 7.5 High -
python-pygmentsRed Hat Django contains Uncontrolled Resource Consumption via cached header 7.5 High -
python-pygmentsRed Hat pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS) 5.9 Medium -
python-pygmentsRed Hat rails-html-sanitizer contains an incomplete fix for an XSS vulnerability 6.1 Medium -
python-pygmentsRed Hat Possible XSS vulnerability with certain configurations of rails-html-sanitizer 7.2 High - Show olderLoading…