python-urllib3 vulnerabilities (Red Hat)
194 vulnerabilities.
python-urllib3Red HatPossible Strong Parameters Bypass in ActionPack7.5 Highpython-urllib3Red HatActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore9.8 Criticalpython-urllib3Red HatImproper masking of some secrets in Jenkins Credentials Binding Plugin4.3 Mediumpython-urllib3Red HatSecrets are not masked by Jenkins Credentials Binding Plugin in builds without build steps6.5 Mediumpython-urllib3Red HatDenial of Service in Netty7.5 Highpython-urllib3Red HatImproper Input Validation in PyYAML9.8 Criticalpython-urllib3Red HatSQL injection in Django8.8 Highpython-urllib3Red HatOS Command Injection in Rake6.4 Mediumpython-urllib3Red HatDeserialization of Untrusted Data in PyYAML9.8 Criticalpython-urllib3Red HatPython 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8...6.5 Mediumpython-urllib3Red HatPossible Information Leak / Session Hijack Vulnerability in Rack6.3 Mediumpython-urllib3Red HatDouble Free in psutil7.5 Highpython-urllib3Red HatImproper Verification of Cryptographic Signature in Pure-Python ECDSA7.4 Highpython-urllib3Red HatDuplicate Advisory: possible DoS caused by malformed signature decoding in Pure-Python ECDSA3.7 Lowpython-urllib3Red HatThe documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3...6.1 Mediumpython-urllib3Red HatAn issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7...7.5 Highpython-urllib3Red Hathttp.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3...5.3 Mediumpython-urllib3Red Hatgolang.org/x/crypto/salsa20/salsa uses insufficiently random values5.9 Mediumpython-urllib3Red HatImproper Certificate Validation in urllib37.5 Highpython-urllib3Red HatImproper Neutralization of CRLF Sequences in urllib3 library for Python6.1 Mediumpython-urllib3Red Haturllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for...9.1 Criticalpython-urllib3Red HatAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumpython-urllib3Red HatAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumpython-urllib3Red HatPython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...9.8 Criticalpython-urllib3Red HatSQLAlchemy vulnerable to SQL Injection via order_by parameter9.8 Criticalpython-urllib3Red HatSQLAlchemy is vulnerable to SQL Injection via group_by parameter7.8 Highpython-urllib3Red HatNumpy Deserialization of Untrusted Data9.8 Criticalpython-urllib3Red HatExposure of Sensitive Information to an Unauthorized Actor in urllib39.8 Criticalpython-urllib3Red HatInsufficiently Protected Credentials in Requests7.5 Highpython-urllib3Red Hatkatello Improper Privilege Management vulnerability4.3 Mediumpython-urllib3Red HatThe OpenShift Enterprise cluster-read can access webhook tokens which would allow an attacker...5.0 Mediumpython-urllib3Red HatA flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin....6.5 Mediumpython-urllib3Red HatThe OpenShift image import whitelist failed to enforce restrictions correctly when running...4.3 Mediumpython-urllib3Red HatSinatra Cross-site Scripting vulnerability6.1 Mediumpython-urllib3Red HatExposure of Sensitive Information to an Unauthorized Actor in Jenkins5.3 Mediumpython-urllib3Red Hatrails-html-sanitizer Cross-site Scripting vulnerability6.1 Mediumpython-urllib3Red HatCross-site Scripting in loofah6.1 Mediumpython-urllib3Red Hatrack-protection gem timing attack vulnerability when validating CSRF token5.9 Mediumpython-urllib3Red HatNokogiri is vulnerable to XML External Entity (XXE) attack7.5 Highpython-urllib3Red Hatrest-client Gem Vulnerable to Session Fixation9.8 Criticalpython-urllib3Red Hatrest-client allows local users to obtain sensitive information by reading the log2.1 Lowpython-urllib3Red HatUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier allows remote authenticated...4.0 Mediumpython-urllib3Red HatUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier,...7.5 Highpython-urllib3Red HatUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows...4.3 Mediumpython-urllib3Red HatUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows...4.3 Mediumpython-urllib3Red HatUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows...3.5 Lowpython-urllib3Red HatUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier,...3.5 Lowpython-urllib3Red HatAlgorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x,...4.3 Mediumpython-urllib3Red HatDirectory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile...6.8 Medium