python-requests vulnerabilities (Red Hat)
213 vulnerabilities.
python-requestsRed HatQuoted zip-bomb protection for zipfile6.2 Mediumpython-requestsRed HatBlack vulnerable to Regular Expression Denial of Service (ReDoS)5.3 Mediumpython-requestsRed HatProxy-Authorization header kept across hosts in follow-redirects6.5 Mediumpython-requestsRed HatAn issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.2,...7.8 Highpython-requestsRed HatMemory exhaustion in multipart form parsing in net/textproto and net/http6.5 Mediumpython-requestsRed HatVerify panics on certificates with an unknown public key algorithm in crypto/x5095.9 Mediumpython-requestsRed HatRegular expression denial-of-service in Django5.3 Mediumpython-requestsRed Hatcryptography NULL pointer deference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override7.5 Highpython-requestsRed HatJinja vulnerable to Cross-Site Scripting (XSS)5.4 Mediumpython-requestsRed Hatcryptography vulnerable to NULL-dereference when loading PKCS7 certificates5.9 Mediumpython-requestsRed HatMercurial configuration injectable in repo revision when installing via pip5.5 Mediumpython-requestsRed HatHTTP/2 rapid reset can cause excessive work in net/http7.5 Highpython-requestsRed HatArbitrary Code Execution in Pillow8.1 Highpython-requestsRed Hat`Cookie` HTTP header isn't stripped on cross-origin redirects5.9 Mediumpython-requestsRed HatOs command injection via ct_command and fcct_command8.0 Highpython-requestsRed HatForeman: arbitrary code execution through templates9.1 Criticalpython-requestsRed HatForeman: stored cross-site scripting in host tab5.4 Mediumpython-requestsRed HatAn issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and...5.3 Mediumpython-requestsRed HatAn XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no...9.8 Criticalpython-requestsRed HatA use-after-free exists in Python through 3.9 via heappushpop in heapq.7.5 Highpython-requestsRed HatGitPython vulnerable to remote code execution due to insufficient sanitization of input arguments9.8 Criticalpython-requestsRed HatInsufficient sanitization of Host header in net/http6.5 Mediumpython-requestsRed HatEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 Highpython-requestsRed HatDjango has regular expression denial of service vulnerability in EmailValidator/URLValidator7.5 Highpython-requestsRed HatUnintended leak of Proxy-Authorization header in requests6.1 Mediumpython-requestsRed HatA Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2...5.3 Mediumpython-requestsRed HatDjango bypasses validation when using one form field to upload multiple files9.8 Criticalpython-requestsRed HatParser contains an inefficient regular expression in sqlparse5.5 Mediumpython-requestsRed HatThe e-mail module of Python 0 - 2.7.18, 3.x - 3.11 incorrectly parses e-mail addresses which...5.3 Mediumpython-requestsRed Hatjackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode7.5 Highpython-requestsRed HatPossible Denial of Service Vulnerability in Rack's header parsing5.3 Mediumpython-requestsRed HatRack has possible DoS Vulnerability in Multipart MIME parsing7.5 Highpython-requestsRed HatAn issue in the urllib.parse component of Python before v3.11 allows attackers to bypass...7.5 Highpython-requestsRed HatResource exhaustion in Django7.5 Highpython-requestsRed HatCipher.update_into can corrupt memory in pyca cryptography4.8 Mediumpython-requestsRed HatDjango contains Uncontrolled Resource Consumption via cached header7.5 Highpython-requestsRed HatDenial of Service Vulnerability in Rack Content-Disposition parsing7.5 Highpython-requestsRed HatReDoS based DoS vulnerability in Action Dispatch7.5 Highpython-requestsRed HatReDoS based DoS vulnerability in Active Support's underscore7.5 Highpython-requestsRed HatDenial of Service Vulnerability in ActiveRecord's PostgreSQL adapter7.5 Highpython-requestsRed HatReDoS based DoS vulnerability in Action Dispatch7.5 Highpython-requestsRed HatSQL Injection Vulnerability via ActiveRecord comments8.8 Highpython-requestsRed HatDenial of service via header parsing in Rack7.5 Highpython-requestsRed HatDenial of service via multipart parsing in Rack7.5 Highpython-requestsRed HatReDoS based DoS vulnerability in GlobalID7.5 Highpython-requestsRed HatCode injection in ruby git8.0 Highpython-requestsRed Hatruby-git has potential remote code execution vulnerability8.0 Highpython-requestsRed HatPython Charmers Future denial of service vulnerability7.5 Highpython-requestsRed Hatpypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)5.9 Mediumpython-requestsRed HatA blind site-to-site request forgery vulnerability was found in Satellite server. It is possible...4.5 Medium- Show moreLoading…