python2-jinja2 vulnerabilities (Red Hat)
100 vulnerabilities.
python2-jinja2Red Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 Highpython2-jinja2Red Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 Highpython2-jinja2Red HatPossible XSS vulnerability in ActionView4.0 Mediumpython2-jinja2Red HatPuppet Server and PuppetDB provide useful performance and debugging information via their metrics...7.5 Highpython2-jinja2Red HatSQL injection in Django8.8 Highpython2-jinja2Red Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticalpython2-jinja2Red Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticalpython2-jinja2Red Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticalpython2-jinja2Red HatImproper Certificate Validation in Puppet6.5 Mediumpython2-jinja2Red HatDeserialization of Untrusted Data in jackson-databind9.8 Criticalpython2-jinja2Red HatHTTP Request Smuggling in Netty7.5 Highpython2-jinja2Red HatLimited header injection when using dynamic overrides with user input in RubyGems secure_headers4.4 Mediumpython2-jinja2Red HatDirective injection when using dynamic overrides with user input in RubyGems secure_headers4.4 Mediumpython2-jinja2Red HatPossible Information Leak / Session Hijack Vulnerability in Rack6.3 Mediumpython2-jinja2Red HatPrevious versions of Puppet Agent didn't verify the peer in the SSL connection prior to...5.4 Mediumpython2-jinja2Red HatKatello cleartext password storage issue4.1 Mediumpython2-jinja2Red HatDouble Free in psutil7.5 Highpython2-jinja2Red HatThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks6.5 Mediumpython2-jinja2Red HatApache MINA SSLFilter security Issue7.5 Highpython2-jinja2Red HatThe documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3...6.1 Mediumpython2-jinja2Red HatAn issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7...7.5 Highpython2-jinja2Red HatInsecure Deserialization in Apache Commons Beanutils7.3 Highpython2-jinja2Red HatAn authentication bypass vulnerability was discovered in foreman-tasks before 0.15.7. Previously,...6.5 Mediumpython2-jinja2Red Hathttp.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3...5.3 Mediumpython2-jinja2Red HatDjango Incorrect HTTP detection with reverse-proxy connecting via HTTPS5.3 Mediumpython2-jinja2Red HatTwisted CRLF Injection6.1 Mediumpython2-jinja2Red HatInformation exposure in FasterXML jackson-databind7.5 Highpython2-jinja2Red HatImproper Certificate Validation in urllib37.5 Highpython2-jinja2Red HatImproper Neutralization of CRLF Sequences in urllib3 library for Python6.1 Mediumpython2-jinja2Red HatIn Foreman it was discovered that the delete compute resource operation, when executed from the...4.9 Mediumpython2-jinja2Red HatJinja2 sandbox escape vulnerability8.6 Highpython2-jinja2Red HatJinja2 sandbox escape via string formatting8.6 Highpython2-jinja2Red Haturllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for...9.1 Criticalpython2-jinja2Red HatAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumpython2-jinja2Red HatAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumpython2-jinja2Red HatPython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...9.8 Criticalpython2-jinja2Red HatSQLAlchemy vulnerable to SQL Injection via order_by parameter9.8 Criticalpython2-jinja2Red HatSQLAlchemy is vulnerable to SQL Injection via group_by parameter7.8 Highpython2-jinja2Red HatNumpy Deserialization of Untrusted Data9.8 Criticalpython2-jinja2Red HatExposure of Sensitive Information to an Unauthorized Actor in urllib39.8 Criticalpython2-jinja2Red HatRack vulnerable to Denial of Service7.5 Highpython2-jinja2Red HatImproper Privilege Management in MySQL Connectors Java8.8 Highpython2-jinja2Red HatInsufficiently Protected Credentials in Requests7.5 Highpython2-jinja2Red Hatkatello Improper Privilege Management vulnerability4.3 Mediumpython2-jinja2Red HatDom4j contains a XML Injection vulnerability7.5 Highpython2-jinja2Red Hatrack-protection gem timing attack vulnerability when validating CSRF token5.9 Mediumpython2-jinja2Red Hatnet-ldap Improper Certificate Validation vulnerability5.9 Mediumpython2-jinja2Red HatPallets Werkzeug cross-site scripting vulnerability6.1 Mediumpython2-jinja2Red Hatrest-client Gem Vulnerable to Session Fixation9.8 Criticalpython2-jinja2Red Hatrest-client allows local users to obtain sensitive information by reading the log2.1 Low