python-typing-extensions vulnerabilities (Red Hat)
104 vulnerabilities.
python-typing-extensionsRed HatImproper sanitization of Transfer-Encoding headers in net/http6.5 Mediumpython-typing-extensionsRed HatActive Record RCE bug with Serialized Columns9.8 Criticalpython-typing-extensionsRed HatApache Commons Configuration insecure interpolation defaults9.8 Criticalpython-typing-extensionsRed HatXSS Vulnerability in Action View tag helpers6.1 Mediumpython-typing-extensionsRed HatCross-site Scripting Vulnerability in Action Pack6.1 Mediumpython-typing-extensionsRed HatAn account takeover flaw was found in Red Hat Satellite 6.7.2 onward. A potential attacker with...7.5 Highpython-typing-extensionsRed HatA flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets...5.5 Mediumpython-typing-extensionsRed HatA flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not...6.5 Mediumpython-typing-extensionsRed HatDenial of service in gopkg.in/yaml.v25.5 Mediumpython-typing-extensionsRed HatGeneration of Error Message Containing Sensitive Information in RESTEasy client5.3 Mediumpython-typing-extensionsRed HatXSS in Action View5.4 Mediumpython-typing-extensionsRed HatA flaw was found in Red Hat Satellite 6 which allows privileged attacker to read cache files....8.8 Highpython-typing-extensionsRed HatUntrusted users can run pending migrations in production in Rails6.5 Mediumpython-typing-extensionsRed HatCSRF Vulnerability in rails-ujs6.5 Mediumpython-typing-extensionsRed HatRack allows Percent-encoded cookies to overwrite existing prefixed cookie names7.5 Highpython-typing-extensionsRed HatDeserialization of untrusted data in Jackson Databind8.1 Highpython-typing-extensionsRed HatDeserialization of untrusted data in Jackson Databind8.1 Highpython-typing-extensionsRed HatDeserialization of untrusted data in Jackson Databind8.1 Highpython-typing-extensionsRed HatRegular Expression Denial of Service in websocket-extensions (RubyGem)7.5 Highpython-typing-extensionsRed HatAbility to forge per-form CSRF tokens in Rails4.3 Mediumpython-typing-extensionsRed HatCircumvention of file size limits in ActiveStorage7.5 Highpython-typing-extensionsRed HatPossible Strong Parameters Bypass in ActionPack7.5 Highpython-typing-extensionsRed HatActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore9.8 Criticalpython-typing-extensionsRed HatDirectory traversal in Rack::Directory app bundled with Rack8.6 Highpython-typing-extensionsRed HatImproper Input Validation in Hibernate Validator5.3 Mediumpython-typing-extensionsRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.1 Highpython-typing-extensionsRed HatDenial of Service in Netty7.5 Highpython-typing-extensionsRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 Highpython-typing-extensionsRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 Highpython-typing-extensionsRed HatPossible XSS vulnerability in ActionView4.0 Mediumpython-typing-extensionsRed HatPuppet Server and PuppetDB provide useful performance and debugging information via their metrics...7.5 Highpython-typing-extensionsRed HatSQL injection in Django8.8 Highpython-typing-extensionsRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticalpython-typing-extensionsRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticalpython-typing-extensionsRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticalpython-typing-extensionsRed HatImproper Certificate Validation in Puppet6.5 Mediumpython-typing-extensionsRed HatDeserialization of Untrusted Data in jackson-databind9.8 Criticalpython-typing-extensionsRed HatHTTP Request Smuggling in Netty7.5 Highpython-typing-extensionsRed HatLimited header injection when using dynamic overrides with user input in RubyGems secure_headers4.4 Mediumpython-typing-extensionsRed HatDirective injection when using dynamic overrides with user input in RubyGems secure_headers4.4 Mediumpython-typing-extensionsRed HatPossible Information Leak / Session Hijack Vulnerability in Rack6.3 Mediumpython-typing-extensionsRed HatPrevious versions of Puppet Agent didn't verify the peer in the SSL connection prior to...5.4 Mediumpython-typing-extensionsRed HatDouble Free in psutil7.5 Highpython-typing-extensionsRed HatThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks6.5 Mediumpython-typing-extensionsRed HatApache MINA SSLFilter security Issue7.5 Highpython-typing-extensionsRed HatInsecure Deserialization in Apache Commons Beanutils7.3 Highpython-typing-extensionsRed HatDjango Incorrect HTTP detection with reverse-proxy connecting via HTTPS5.3 Mediumpython-typing-extensionsRed HatInformation exposure in FasterXML jackson-databind7.5 Highpython-typing-extensionsRed HatImproper Privilege Management in MySQL Connectors Java8.8 Highpython-typing-extensionsRed Hatkatello Improper Privilege Management vulnerability4.3 Medium- Show moreLoading…