python-six vulnerabilities (Red Hat)
124 vulnerabilities.
python-sixRed Hatcmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely...7.5 Highpython-sixRed HatRat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can...7.5 Highpython-sixRed HatCurve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly...9.1 Criticalpython-sixRed Hatx/crypto/ssh vulnerable to panic via malformed packets7.5 Highpython-sixRed HatAn account takeover flaw was found in Red Hat Satellite 6.7.2 onward. A potential attacker with...7.5 Highpython-sixRed HatA flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets...5.5 Mediumpython-sixRed HatA flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not...6.5 Mediumpython-sixRed HatGeneration of Error Message Containing Sensitive Information in RESTEasy client5.3 Mediumpython-sixRed HatXSS in Action View5.4 Mediumpython-sixRed HatPath Traversal in pip7.5 Highpython-sixRed HatA flaw was found in Red Hat Satellite 6 which allows privileged attacker to read cache files....8.8 Highpython-sixRed HatIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...7.5 Highpython-sixRed HatUntrusted users can run pending migrations in production in Rails6.5 Mediumpython-sixRed HatCSRF Vulnerability in rails-ujs6.5 Mediumpython-sixRed HatRack allows Percent-encoded cookies to overwrite existing prefixed cookie names7.5 Highpython-sixRed HatIncorrect Calculation and Use of Insufficiently Random Values in Python5.9 Mediumpython-sixRed HatDeserialization of untrusted data in Jackson Databind8.1 Highpython-sixRed HatDeserialization of untrusted data in Jackson Databind8.1 Highpython-sixRed HatDeserialization of untrusted data in Jackson Databind8.1 Highpython-sixRed HatRegular Expression Denial of Service in websocket-extensions (RubyGem)7.5 Highpython-sixRed HatAbility to forge per-form CSRF tokens in Rails4.3 Mediumpython-sixRed HatCircumvention of file size limits in ActiveStorage7.5 Highpython-sixRed HatPossible Strong Parameters Bypass in ActionPack7.5 Highpython-sixRed HatActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore9.8 Criticalpython-sixRed HatDirectory traversal in Rack::Directory app bundled with Rack8.6 Highpython-sixRed HatImproper Input Validation in Hibernate Validator5.3 Mediumpython-sixRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.1 Highpython-sixRed HatDenial of Service in Netty7.5 Highpython-sixRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 Highpython-sixRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 Highpython-sixRed HatImproper Input Validation in PyYAML9.8 Criticalpython-sixRed HatPossible XSS vulnerability in ActionView4.0 Mediumpython-sixRed HatPuppet Server and PuppetDB provide useful performance and debugging information via their metrics...7.5 Highpython-sixRed HatSQL injection in Django8.8 Highpython-sixRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticalpython-sixRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticalpython-sixRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticalpython-sixRed HatImproper Certificate Validation in Puppet6.5 Mediumpython-sixRed HatDeserialization of Untrusted Data in PyYAML9.8 Criticalpython-sixRed HatDeserialization of Untrusted Data in jackson-databind9.8 Criticalpython-sixRed HatPython 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8...6.5 Mediumpython-sixRed HatHTTP Request Smuggling in Netty7.5 Highpython-sixRed HatLimited header injection when using dynamic overrides with user input in RubyGems secure_headers4.4 Mediumpython-sixRed HatDirective injection when using dynamic overrides with user input in RubyGems secure_headers4.4 Mediumpython-sixRed HatPossible Information Leak / Session Hijack Vulnerability in Rack6.3 Mediumpython-sixRed HatPrevious versions of Puppet Agent didn't verify the peer in the SSL connection prior to...5.4 Mediumpython-sixRed HatDouble Free in psutil7.5 Highpython-sixRed HatThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks6.5 Mediumpython-sixRed HatApache MINA SSLFilter security Issue7.5 Highpython-sixRed HatThe documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3...6.1 Medium- Show moreLoading…