python-sqlparse vulnerabilities (Red Hat)
178 vulnerabilities.
python-sqlparseRed HatForeman: arbitrary code execution through templates9.1 Criticalpython-sqlparseRed HatCri-o: security regression of cve-2022-276524.8 Mediumpython-sqlparseRed HatForeman: stored cross-site scripting in host tab5.4 Mediumpython-sqlparseRed HatGitPython vulnerable to remote code execution due to insufficient sanitization of input arguments9.8 Criticalpython-sqlparseRed HatInsufficient sanitization of Host header in net/http6.5 Mediumpython-sqlparseRed HatEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 Highpython-sqlparseRed HatDjango has regular expression denial of service vulnerability in EmailValidator/URLValidator7.5 Highpython-sqlparseRed HatUnintended leak of Proxy-Authorization header in requests6.1 Mediumpython-sqlparseRed HatA Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2...5.3 Mediumpython-sqlparseRed HatDjango bypasses validation when using one form field to upload multiple files9.8 Criticalpython-sqlparseRed HatParser contains an inefficient regular expression in sqlparse5.5 Mediumpython-sqlparseRed Hatjackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode7.5 Highpython-sqlparseRed HatPossible Denial of Service Vulnerability in Rack's header parsing5.3 Mediumpython-sqlparseRed HatRack has possible DoS Vulnerability in Multipart MIME parsing7.5 Highpython-sqlparseRed HatUnauthorized read of Custom Resources6.5 Mediumpython-sqlparseRed HatResource exhaustion in Django7.5 Highpython-sqlparseRed HatDjango contains Uncontrolled Resource Consumption via cached header7.5 Highpython-sqlparseRed HatDenial of Service Vulnerability in Rack Content-Disposition parsing7.5 Highpython-sqlparseRed HatReDoS based DoS vulnerability in Action Dispatch7.5 Highpython-sqlparseRed HatReDoS based DoS vulnerability in Active Support's underscore7.5 Highpython-sqlparseRed HatDenial of Service Vulnerability in ActiveRecord's PostgreSQL adapter7.5 Highpython-sqlparseRed HatReDoS based DoS vulnerability in Action Dispatch7.5 Highpython-sqlparseRed HatSQL Injection Vulnerability via ActiveRecord comments8.8 Highpython-sqlparseRed HatDenial of service via header parsing in Rack7.5 Highpython-sqlparseRed HatDenial of service via multipart parsing in Rack7.5 Highpython-sqlparseRed HatReDoS based DoS vulnerability in GlobalID7.5 Highpython-sqlparseRed HatCode injection in ruby git8.0 Highpython-sqlparseRed Hatruby-git has potential remote code execution vulnerability8.0 Highpython-sqlparseRed HatPython Charmers Future denial of service vulnerability7.5 Highpython-sqlparseRed HatA blind site-to-site request forgery vulnerability was found in Satellite server. It is possible...4.5 Mediumpython-sqlparseRed Hatrails-html-sanitizer contains an incomplete fix for an XSS vulnerability6.1 Mediumpython-sqlparseRed HatPossible XSS vulnerability with certain configurations of rails-html-sanitizer7.2 Highpython-sqlparseRed HatImproper neutralization of data URIs allows XSS in rails-html-sanitizer6.1 Mediumpython-sqlparseRed HatInefficient Regular Expression Complexity in rails-html-sanitizer7.5 Highpython-sqlparseRed HatUncontrolled Recursion in Loofah7.5 Highpython-sqlparseRed HatImproper neutralization of data URIs may allow XSS in Loofah6.1 Mediumpython-sqlparseRed HatInefficient Regular Expression Complexity in Loofah7.5 Highpython-sqlparseRed HatOpenshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the...7.4 Highpython-sqlparseRed HatExcessive memory growth in net/http and golang.org/x/net/http25.3 Mediumpython-sqlparseRed HatRemote Code execution in SnakeYAML8.3 Highpython-sqlparseRed HatTemporaryFolder on unix-like systems does not limit access to created files in pgjdbc4.7 Mediumpython-sqlparseRed HatPlaintext storage of tokens in pulp_ansible5.5 Mediumpython-sqlparseRed HatKubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF)5.1 Mediumpython-sqlparseRed HatApache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults9.8 Criticalpython-sqlparseRed HatIncorrect sanitization of forwarded query parameters in net/http/httputil7.5 Highpython-sqlparseRed HatMemory exhaustion when compiling regular expressions in regexp/syntax7.5 Highpython-sqlparseRed HatUnbounded memory consumption when reading headers in archive/tar7.5 Highpython-sqlparseRed HatDjango denial-of-service vulnerability in internationalized URLs7.5 Highpython-sqlparseRed HatUncontrolled Resource Consumption in FasterXML jackson-databind7.5 Highpython-sqlparseRed HatUncontrolled Resource Consumption in Jackson-databind7.5 High- Show moreLoading…