python-urllib3 vulnerabilities (Red Hat)
194 vulnerabilities.
python-urllib3Red HatImproper Input Validation in pip5.7 Mediumpython-urllib3Red HatRegular Expression Denial of Service in Addressable templates7.5 Highpython-urllib3Red HatA flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets...5.5 Mediumpython-urllib3Red HatDjango Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks7.5 Highpython-urllib3Red HatPath Traversal in Django4.9 Mediumpython-urllib3Red HatCatastrophic backtracking in URL authority parser when passed URL containing many @ characters7.5 Highpython-urllib3Red HatKeepalive Connections Causing Denial Of Service in puma7.5 Highpython-urllib3Red HatImproper input validation of octal strings in Python stdlib ipaddress 3.10 and below allows...9.8 Criticalpython-urllib3Red HatPossible DoS Vulnerability in Action Controller Token Authentication7.5 Highpython-urllib3Red HatAction Pack contains Information Disclosure / Unintended Method Execution vulnerability7.5 Highpython-urllib3Red HatDenial of Service in Action Dispatch7.5 Highpython-urllib3Red HatPath Traversal in Django7.5 Highpython-urllib3Red HatRelative Path Traversal in Babel 2.9.0 allows an attacker to load arbitrary locale files on disk...7.8 Highpython-urllib3Red HatA smart proxy that provides a restful API to various sub-systems of the Foreman is affected by...5.9 Mediumpython-urllib3Red HatA flaw was found in Red Hat Satellite in tfm-rubygem-foreman_azure_rm in versions before 2.2.0. A...6.3 Mediumpython-urllib3Red HatDirectory Traversal in Django5.3 Mediumpython-urllib3Red HatThere's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to...5.7 Mediumpython-urllib3Red Hatlxml vulnerable to Cross-Site Scripting6.1 Mediumpython-urllib3Red HatPygments vulnerable to Regular Expression Denial of Service (ReDoS)7.5 Highpython-urllib3Red HatUsing default SSLContext for HTTPS requests in an HTTPS proxy doesn't verify certificate hostname for proxy connection6.5 Mediumpython-urllib3Red HatInfinite Loop in Pygments7.5 Highpython-urllib3Red HatActiverecord-session_store Vulnerable to Timing Attack5.3 Mediumpython-urllib3Red HatOpen redirect vulnerability in aiohttp3.1 Lowpython-urllib3Red HatA flaw was found in Red Hat Satellite. The BMC interface exposes the password through the API to...5.3 Mediumpython-urllib3Red HatWeb Cache Poisoning5.9 Mediumpython-urllib3Red HatImproper Input Validation in PyYAML9.8 Criticalpython-urllib3Red HatRegular Expression Denial of Service (ReDoS)5.3 Mediumpython-urllib3Red HatKubernetes man in the middle using LoadBalancer or ExternalIPs6.3 Mediumpython-urllib3Red HatPython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...9.8 Criticalpython-urllib3Red HatXXE in Nokogiri2.6 Lowpython-urllib3Red HatTemp directory permission issue in Guava3.3 Lowpython-urllib3Red Hatlxml vulnerable to Cross-site Scripting6.1 Mediumpython-urllib3Red HatMissing authorization in Jenkins Kubernetes Plugin4.3 Mediumpython-urllib3Red HatMissing Authorization in Jenkins Kubernetes Plugin4.3 Mediumpython-urllib3Red HatExposure of Sensitive Information to an Unauthorized Actor in Jenkins Kubernetes Plugin4.3 Mediumpython-urllib3Red HatMissing Authorization in Jenkins Mercurial Plugin4.3 Mediumpython-urllib3Red HatXXE vulnerability in Jenkins Mercurial Plugin6.5 Mediumpython-urllib3Red HatXXE vulnerability in Jenkins Subversion Plugin6.5 Mediumpython-urllib3Red HatIn Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on...9.8 Criticalpython-urllib3Red HatCRLF injection in urllib36.5 Mediumpython-urllib3Red Hathttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...7.2 Highpython-urllib3Red HatGeneration of Error Message Containing Sensitive Information in RESTEasy client5.3 Mediumpython-urllib3Red HatXSS in Action View5.4 Mediumpython-urllib3Red HatPath Traversal in pip7.5 Highpython-urllib3Red HatIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...7.5 Highpython-urllib3Red HatUntrusted users can run pending migrations in production in Rails6.5 Mediumpython-urllib3Red HatCSRF Vulnerability in rails-ujs6.5 Mediumpython-urllib3Red HatIncorrect Calculation and Use of Insufficiently Random Values in Python5.9 Mediumpython-urllib3Red HatAbility to forge per-form CSRF tokens in Rails4.3 Mediumpython-urllib3Red HatCircumvention of file size limits in ActiveStorage7.5 High- Show moreLoading…