python-werkzeug vulnerabilities (Red Hat)
156 vulnerabilities.
-
python-werkzeugRed Hat Werkzeug's improper usage of a pathname and improper CSRF protection results in the remote command execution 7.5 High -
python-werkzeugRed Hat Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter 5.4 Medium -
python-werkzeugRed Hat Memory exhaustion in multipart form parsing in net/textproto and net/http 6.5 Medium -
python-werkzeugRed Hat Werkzeug vulnerable to high resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning 8.0 High -
python-werkzeugRed Hat HTTP/2 rapid reset can cause excessive work in net/http 7.5 High -
python-werkzeugRed Hat Cri-o: security regression of cve-2022-27652 4.8 Medium -
python-werkzeugRed Hat HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and... 7.2 High -
python-werkzeugRed Hat Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
python-werkzeugRed Hat Podman Time-of-check Time-of-use (TOCTOU) Race Condition 6.8 Medium -
python-werkzeugRed Hat Unauthorized read of Custom Resources 6.5 Medium -
python-werkzeugRed Hat Excessive resource consumption in mime/multipart 7.5 High -
python-werkzeugRed Hat Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net 7.5 High -
python-werkzeugRed Hat Panic on large handshake records in crypto/tls 7.5 High -
python-werkzeugRed Hat Path traversal on Windows in path/filepath 7.5 High -
python-werkzeugRed Hat Werkzeug may allow high resource usage when parsing multipart form data with many fields 7.5 High -
python-werkzeugRed Hat Wrkzeug's incorrect parsing of nameless cookies leads to __Host- cookies bypass 2.6 Low -
python-werkzeugRed Hat HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are... 9.1 Critical -
python-werkzeugRed Hat github.com/openshift/apiserver-library-go Improper Input Validation vulnerability 6.3 Medium -
python-werkzeugRed Hat An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash... 6.5 Medium -
python-werkzeugRed Hat Openshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the... 7.4 High -
python-werkzeugRed Hat Excessive memory growth in net/http and golang.org/x/net/http2 5.3 Medium -
python-werkzeugRed Hat Kubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF) 5.1 Medium -
python-werkzeugRed Hat Incorrect sanitization of forwarded query parameters in net/http/httputil 7.5 High -
python-werkzeugRed Hat Memory exhaustion when compiling regular expressions in regexp/syntax 7.5 High -
python-werkzeugRed Hat Unbounded memory consumption when reading headers in archive/tar 7.5 High -
python-werkzeugRed Hat CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure 7.1 High -
python-werkzeugRed Hat Buildah's incorrect handling of the supplementary groups may lead to data disclosure, modification 7.1 High -
python-werkzeugRed Hat Failure to strip relative path components in net/url 7.5 High -
python-werkzeugRed Hat golang.org/x/net/http2 Denial of Service vulnerability 7.5 High -
python-werkzeugRed Hat python-scciclient vulnerable to Man-in-the-middle (MITM) attacks 7.4 High -
python-werkzeugRed Hat Panic when decoding Float and Rat types in math/big 7.5 High -
python-werkzeugRed Hat Exposure of client IP addresses in net/http 6.5 Medium -
python-werkzeugRed Hat Stack exhaustion when reading certain archives in compress/gzip 7.5 High -
python-werkzeugRed Hat Improper sanitization of Transfer-Encoding headers in net/http 6.5 Medium -
python-werkzeugRed Hat Incorrect Default Permissions in runc 5.9 Medium -
python-werkzeugRed Hat Ignition config accessible to unprivileged software on VMware 6.5 Medium -
python-werkzeugRed Hat The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows... 7.5 High -
python-werkzeugRed Hat encoding/pem in Go before 1.17.9 and 1.8.x before 1.8.1 has a Decode stack overflow via a large... 7.5 High -
python-werkzeugRed Hat golang.org/x/crypto/ssh Denial of service via crafted Signer 7.5 High -
python-werkzeugRed Hat regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply... 7.5 High -
python-werkzeugRed Hat Uncontrolled Resource Consumption in promhttp 7.5 High -
python-werkzeugRed Hat cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely... 7.5 High -
python-werkzeugRed Hat Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can... 7.5 High -
python-werkzeugRed Hat Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly... 9.1 Critical -
python-werkzeugRed Hat x/crypto/ssh vulnerable to panic via malformed packets 7.5 High -
python-werkzeugRed Hat An account takeover flaw was found in Red Hat Satellite 6.7.2 onward. A potential attacker with... 7.5 High -
python-werkzeugRed Hat A flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets... 5.5 Medium -
python-werkzeugRed Hat A flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not... 6.5 Medium -
python-werkzeugRed Hat Denial of service in gopkg.in/yaml.v2 5.5 Medium -
python-werkzeugRed Hat Generation of Error Message Containing Sensitive Information in RESTEasy client 5.3 Medium - Show olderLoading…