python-unversioned-command vulnerabilities (Red Hat)
78 vulnerabilities.
python-unversioned-commandRed HatExtraction filter bypass for linking outside extraction directory7.5 Highpython-unversioned-commandRed HatArbitrary writes via tarfile realpath overflow9.4 Criticalpython-unversioned-commandRed HatURL parser allowed square brackets in domain names6.3 Mediumpython-unversioned-commandRed HatUnbounded memory buffering in SelectorSocketTransport.writelines()8.7 Highpython-unversioned-commandRed HatImproper validation of IPv6 and IPvFuture addresses6.3 Mediumpython-unversioned-commandRed HatVirtual environment (venv) activation scripts don't quote paths5.3 Mediumpython-unversioned-commandRed HatRegular-expression DoS when parsing TarFile headers7.5 Highpython-unversioned-commandRed HatInfinite loop when iterating over zip archive entry names from zipfile.Path8.7 Highpython-unversioned-commandRed HatQuadratic complexity parsing cookies with backslashes7.5 Highpython-unversioned-commandRed HatEmail header injection due to unquoted newlines5.5 Mediumpython-unversioned-commandRed HatBuffer overread when using an empty list with SSLContext.set_npn_protocols()6.5 Mediumpython-unversioned-commandRed HatMemory race condition in ssl.SSLContext certificate store methods7.4 Highpython-unversioned-commandRed HatIncorrect IPv4 and IPv6 private ranges7.5 Highpython-unversioned-commandRed HatQuoted zip-bomb protection for zipfile6.2 Mediumpython-unversioned-commandRed HatAn issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.2,...7.8 Highpython-unversioned-commandRed HatAn issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and...5.3 Mediumpython-unversioned-commandRed HatThe e-mail module of Python 0 - 2.7.18, 3.x - 3.11 incorrectly parses e-mail addresses which...5.3 Mediumpython-unversioned-commandRed HatAn issue in the urllib.parse component of Python before v3.11 allows attackers to bypass...7.5 Highpython-unversioned-commandRed HatAn issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one...7.5 Highpython-unversioned-commandRed HatPython 3.9.x and 3.10.x through 3.10.8 on Linux allows local privilege escalation in a non...7.8 Highpython-unversioned-commandRed HatA flaw was found in python. In algorithms with quadratic time complexity using non-binary bases,...7.5 Highpython-unversioned-commandRed HatPython 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no...7.4 Highpython-unversioned-commandRed HatIn Python (aka CPython) through 3.10.4, the mailcap module does not add escape characters into...7.6 Highpython-unversioned-commandRed HatDirectory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile...6.8 Medium