python-requests vulnerabilities (Red Hat)
213 vulnerabilities.
python-requestsRed HatImproper Input Validation in PyYAML9.8 Criticalpython-requestsRed HatRegular Expression Denial of Service (ReDoS)5.3 Mediumpython-requestsRed HatPython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...9.8 Criticalpython-requestsRed Hatlxml vulnerable to Cross-site Scripting6.1 Mediumpython-requestsRed HatIn Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on...9.8 Criticalpython-requestsRed HatCRLF injection in urllib36.5 Mediumpython-requestsRed Hathttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...7.2 Highpython-requestsRed HatGeneration of Error Message Containing Sensitive Information in RESTEasy client5.3 Mediumpython-requestsRed HatXSS in Action View5.4 Mediumpython-requestsRed HatPath Traversal in pip7.5 Highpython-requestsRed HatIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...7.5 Highpython-requestsRed HatUntrusted users can run pending migrations in production in Rails6.5 Mediumpython-requestsRed HatCSRF Vulnerability in rails-ujs6.5 Mediumpython-requestsRed HatIncorrect Calculation and Use of Insufficiently Random Values in Python5.9 Mediumpython-requestsRed HatAbility to forge per-form CSRF tokens in Rails4.3 Mediumpython-requestsRed HatCircumvention of file size limits in ActiveStorage7.5 Highpython-requestsRed HatPossible Strong Parameters Bypass in ActionPack7.5 Highpython-requestsRed HatActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore9.8 Criticalpython-requestsRed HatDenial of Service in Netty7.5 Highpython-requestsRed HatImproper Input Validation in PyYAML9.8 Criticalpython-requestsRed HatSQL injection in Django8.8 Highpython-requestsRed HatDeserialization of Untrusted Data in PyYAML9.8 Criticalpython-requestsRed HatPython 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8...6.5 Mediumpython-requestsRed HatVersions of Foreman as shipped with Red Hat Satellite 6 does not check for a correct CSRF token...6.5 Mediumpython-requestsRed HatPossible Information Leak / Session Hijack Vulnerability in Rack6.3 Mediumpython-requestsRed HatDouble Free in psutil7.5 Highpython-requestsRed HatThe documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3...6.1 Mediumpython-requestsRed HatAn issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7...7.5 Highpython-requestsRed Hathttp.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3...5.3 Mediumpython-requestsRed HatImproper Certificate Validation in urllib37.5 Highpython-requestsRed HatImproper Neutralization of CRLF Sequences in urllib3 library for Python6.1 Mediumpython-requestsRed Haturllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for...9.1 Criticalpython-requestsRed HatAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumpython-requestsRed HatAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumpython-requestsRed HatPython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...9.8 Criticalpython-requestsRed HatSQLAlchemy vulnerable to SQL Injection via order_by parameter9.8 Criticalpython-requestsRed HatSQLAlchemy is vulnerable to SQL Injection via group_by parameter7.8 Highpython-requestsRed HatNumpy Deserialization of Untrusted Data9.8 Criticalpython-requestsRed HatExposure of Sensitive Information to an Unauthorized Actor in urllib39.8 Criticalpython-requestsRed HatInsufficiently Protected Credentials in Requests7.5 Highpython-requestsRed Hatkatello Improper Privilege Management vulnerability4.3 Mediumpython-requestsRed HatSinatra Cross-site Scripting vulnerability6.1 Mediumpython-requestsRed Hatrails-html-sanitizer Cross-site Scripting vulnerability6.1 Mediumpython-requestsRed HatCross-site Scripting in loofah6.1 Mediumpython-requestsRed Hatrack-protection gem timing attack vulnerability when validating CSRF token5.9 Mediumpython-requestsRed HatForeman before 1.9.0 allows remote authenticated users with the edit_users permission to edit...6.0 Mediumpython-requestsRed HatForeman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session,...5.0 Mediumpython-requestsRed HatForeman before 1.7.5 allows remote authenticated users to bypass organization and location...4.0 Mediumpython-requestsRed HatForman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in...5.0 Mediumpython-requestsRed HatCross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1...4.3 Medium- Show moreLoading…