python2-markupsafe vulnerabilities (Red Hat)
100 vulnerabilities.
python2-markupsafeRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 Highpython2-markupsafeRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 Highpython2-markupsafeRed HatPossible XSS vulnerability in ActionView4.0 Mediumpython2-markupsafeRed HatPuppet Server and PuppetDB provide useful performance and debugging information via their metrics...7.5 Highpython2-markupsafeRed HatSQL injection in Django8.8 Highpython2-markupsafeRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticalpython2-markupsafeRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticalpython2-markupsafeRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticalpython2-markupsafeRed HatImproper Certificate Validation in Puppet6.5 Mediumpython2-markupsafeRed HatDeserialization of Untrusted Data in jackson-databind9.8 Criticalpython2-markupsafeRed HatHTTP Request Smuggling in Netty7.5 Highpython2-markupsafeRed HatLimited header injection when using dynamic overrides with user input in RubyGems secure_headers4.4 Mediumpython2-markupsafeRed HatDirective injection when using dynamic overrides with user input in RubyGems secure_headers4.4 Mediumpython2-markupsafeRed HatPossible Information Leak / Session Hijack Vulnerability in Rack6.3 Mediumpython2-markupsafeRed HatPrevious versions of Puppet Agent didn't verify the peer in the SSL connection prior to...5.4 Mediumpython2-markupsafeRed HatKatello cleartext password storage issue4.1 Mediumpython2-markupsafeRed HatDouble Free in psutil7.5 Highpython2-markupsafeRed HatThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks6.5 Mediumpython2-markupsafeRed HatApache MINA SSLFilter security Issue7.5 Highpython2-markupsafeRed HatThe documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3...6.1 Mediumpython2-markupsafeRed HatAn issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7...7.5 Highpython2-markupsafeRed HatInsecure Deserialization in Apache Commons Beanutils7.3 Highpython2-markupsafeRed HatAn authentication bypass vulnerability was discovered in foreman-tasks before 0.15.7. Previously,...6.5 Mediumpython2-markupsafeRed Hathttp.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3...5.3 Mediumpython2-markupsafeRed HatDjango Incorrect HTTP detection with reverse-proxy connecting via HTTPS5.3 Mediumpython2-markupsafeRed HatTwisted CRLF Injection6.1 Mediumpython2-markupsafeRed HatInformation exposure in FasterXML jackson-databind7.5 Highpython2-markupsafeRed HatImproper Certificate Validation in urllib37.5 Highpython2-markupsafeRed HatImproper Neutralization of CRLF Sequences in urllib3 library for Python6.1 Mediumpython2-markupsafeRed HatIn Foreman it was discovered that the delete compute resource operation, when executed from the...4.9 Mediumpython2-markupsafeRed HatJinja2 sandbox escape vulnerability8.6 Highpython2-markupsafeRed HatJinja2 sandbox escape via string formatting8.6 Highpython2-markupsafeRed Haturllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for...9.1 Criticalpython2-markupsafeRed HatAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumpython2-markupsafeRed HatAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumpython2-markupsafeRed HatPython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...9.8 Criticalpython2-markupsafeRed HatSQLAlchemy vulnerable to SQL Injection via order_by parameter9.8 Criticalpython2-markupsafeRed HatSQLAlchemy is vulnerable to SQL Injection via group_by parameter7.8 Highpython2-markupsafeRed HatNumpy Deserialization of Untrusted Data9.8 Criticalpython2-markupsafeRed HatExposure of Sensitive Information to an Unauthorized Actor in urllib39.8 Criticalpython2-markupsafeRed HatRack vulnerable to Denial of Service7.5 Highpython2-markupsafeRed HatImproper Privilege Management in MySQL Connectors Java8.8 Highpython2-markupsafeRed HatInsufficiently Protected Credentials in Requests7.5 Highpython2-markupsafeRed Hatkatello Improper Privilege Management vulnerability4.3 Mediumpython2-markupsafeRed HatDom4j contains a XML Injection vulnerability7.5 Highpython2-markupsafeRed Hatrack-protection gem timing attack vulnerability when validating CSRF token5.9 Mediumpython2-markupsafeRed Hatnet-ldap Improper Certificate Validation vulnerability5.9 Mediumpython2-markupsafeRed HatPallets Werkzeug cross-site scripting vulnerability6.1 Mediumpython2-markupsafeRed Hatrest-client Gem Vulnerable to Session Fixation9.8 Criticalpython2-markupsafeRed Hatrest-client allows local users to obtain sensitive information by reading the log2.1 Low