python3-click vulnerabilities (Red Hat)
46 vulnerabilities.
-
python3-clickRed Hat [DISPUTED] Pallets Click contains a command injection via Unsanitized Filename "click.edit()" 7.2 High -
python3-clickRed Hat Pillow is vulnerable to a FITS GZIP decompression bomb 8.7 High -
python3-clickRed Hat Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain 4.8 Medium -
python3-clickRed Hat cryptography has a buffer overflow if non-contiguous buffers were passed to APIs 6.9 Medium -
python3-clickRed Hat Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls 7.5 High -
python3-clickRed Hat TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix 6.4 Medium -
python3-clickRed Hat Unexpected work during chain building in crypto/x509 7.5 High -
python3-clickRed Hat Vite Affected by Arbitrary File Read via Vite Dev Server WebSocket 8.2 High -
python3-clickRed Hat lodash vulnerable to Code Injection via `_.template` imports key names 8.1 High -
python3-clickRed Hat Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input 7.5 High -
python3-clickRed Hat path-to-regexp vulnerable to Denial of Service via sequential optional groups 7.5 High -
python3-clickRed Hat pyasn1 Vulnerable to Denial of Service via Unbounded Recursion 7.5 High -
python3-clickRed Hat Cri-o: security regression of cve-2022-27652 4.8 Medium -
python3-clickRed Hat Unauthorized read of Custom Resources 6.5 Medium -
python3-clickRed Hat Openshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the... 7.4 High -
python3-clickRed Hat Kubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF) 5.1 Medium -
python3-clickRed Hat Incorrect sanitization of forwarded query parameters in net/http/httputil 7.5 High -
python3-clickRed Hat Memory exhaustion when compiling regular expressions in regexp/syntax 7.5 High -
python3-clickRed Hat Unbounded memory consumption when reading headers in archive/tar 7.5 High -
python3-clickRed Hat CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure 7.1 High -
python3-clickRed Hat Failure to strip relative path components in net/url 7.5 High -
python3-clickRed Hat golang.org/x/net/http2 Denial of Service vulnerability 7.5 High -
python3-clickRed Hat python-scciclient vulnerable to Man-in-the-middle (MITM) attacks 7.4 High -
python3-clickRed Hat Panic when decoding Float and Rat types in math/big 7.5 High -
python3-clickRed Hat Exposure of client IP addresses in net/http 6.5 Medium -
python3-clickRed Hat Stack exhaustion when reading certain archives in compress/gzip 7.5 High -
python3-clickRed Hat Improper sanitization of Transfer-Encoding headers in net/http 6.5 Medium -
python3-clickRed Hat A flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets... 5.5 Medium -
python3-clickRed Hat Catastrophic backtracking in URL authority parser when passed URL containing many @ characters 7.5 High -
python3-clickRed Hat Denial of service in gopkg.in/yaml.v2 5.5 Medium -
python3-clickRed Hat Generation of Error Message Containing Sensitive Information in RESTEasy client 5.3 Medium -
python3-clickRed Hat XSS in Action View 5.4 Medium -
python3-clickRed Hat Untrusted users can run pending migrations in production in Rails 6.5 Medium -
python3-clickRed Hat CSRF Vulnerability in rails-ujs 6.5 Medium -
python3-clickRed Hat Ability to forge per-form CSRF tokens in Rails 4.3 Medium -
python3-clickRed Hat Circumvention of file size limits in ActiveStorage 7.5 High -
python3-clickRed Hat Possible Strong Parameters Bypass in ActionPack 7.5 High -
python3-clickRed Hat ActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore 9.8 Critical -
python3-clickRed Hat Denial of Service in Netty 7.5 High -
python3-clickRed Hat SQL injection in Django 8.8 High -
python3-clickRed Hat Possible Information Leak / Session Hijack Vulnerability in Rack 6.3 Medium -
python3-clickRed Hat Double Free in psutil 7.5 High -
python3-clickRed Hat katello Improper Privilege Management vulnerability 4.3 Medium -
python3-clickRed Hat rack-protection gem timing attack vulnerability when validating CSRF token 5.9 Medium -
python3-clickRed Hat rest-client Gem Vulnerable to Session Fixation 9.8 Critical -
python3-clickRed Hat rest-client allows local users to obtain sensitive information by reading the log 2.1 Low