python-wheel vulnerabilities (Red Hat)
87 vulnerabilities.
python-wheelRed HatCatastrophic backtracking in URL authority parser when passed URL containing many @ characters7.5 Highpython-wheelRed HatImproper input validation of octal strings in Python stdlib ipaddress 3.10 and below allows...9.8 Criticalpython-wheelRed HatRelative Path Traversal in Babel 2.9.0 allows an attacker to load arbitrary locale files on disk...7.8 Highpython-wheelRed HatThere's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to...5.7 Mediumpython-wheelRed Hatlxml vulnerable to Cross-Site Scripting6.1 Mediumpython-wheelRed HatPygments vulnerable to Regular Expression Denial of Service (ReDoS)7.5 Highpython-wheelRed HatInfinite Loop in Pygments7.5 Highpython-wheelRed HatWeb Cache Poisoning5.9 Mediumpython-wheelRed HatImproper Input Validation in PyYAML9.8 Criticalpython-wheelRed HatRegular Expression Denial of Service (ReDoS)5.3 Mediumpython-wheelRed HatPython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...9.8 Criticalpython-wheelRed Hatlxml vulnerable to Cross-site Scripting6.1 Mediumpython-wheelRed HatIn Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on...9.8 Criticalpython-wheelRed HatCRLF injection in urllib36.5 Mediumpython-wheelRed Hathttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...7.2 Highpython-wheelRed HatPath Traversal in pip7.5 Highpython-wheelRed HatIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...7.5 Highpython-wheelRed HatIncorrect Calculation and Use of Insufficiently Random Values in Python5.9 Mediumpython-wheelRed HatImproper Input Validation in PyYAML9.8 Criticalpython-wheelRed HatDeserialization of Untrusted Data in PyYAML9.8 Criticalpython-wheelRed HatPython 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8...6.5 Mediumpython-wheelRed HatDouble Free in psutil7.5 Highpython-wheelRed HatThe documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3...6.1 Mediumpython-wheelRed HatAn issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7...7.5 Highpython-wheelRed Hathttp.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3...5.3 Mediumpython-wheelRed HatImproper Certificate Validation in urllib37.5 Highpython-wheelRed HatImproper Neutralization of CRLF Sequences in urllib3 library for Python6.1 Mediumpython-wheelRed Haturllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for...9.1 Criticalpython-wheelRed HatAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumpython-wheelRed HatAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumpython-wheelRed HatPython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...9.8 Criticalpython-wheelRed HatSQLAlchemy vulnerable to SQL Injection via order_by parameter9.8 Criticalpython-wheelRed HatSQLAlchemy is vulnerable to SQL Injection via group_by parameter7.8 Highpython-wheelRed HatNumpy Deserialization of Untrusted Data9.8 Criticalpython-wheelRed HatExposure of Sensitive Information to an Unauthorized Actor in urllib39.8 Criticalpython-wheelRed HatInsufficiently Protected Credentials in Requests7.5 Highpython-wheelRed HatDirectory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile...6.8 Medium