python3-galaxy-ng vulnerabilities (Red Hat)

29 vulnerabilities.

• python3-galaxy-ng Red Hat Requests `Session` object does not verify requests after making first request with verify=False CVE-2024-35195 Fix available 5.6 MediumMay 20, 2024
• python3-galaxy-ng Red Hat Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter CVE-2024-34064 Public exploitFix available 5.4 MediumMay 6, 2024
• python3-galaxy-ng Red Hat Denial of service when trying to parse malformed POST requests in aiohttp CVE-2024-30251 Fix available 7.5 HighMay 2, 2024
• python3-galaxy-ng Red Hat social-auth-app-django Improper Handling of Case Sensitivity vulnerability CVE-2024-32879 Fix available 4.9 MediumApril 24, 2024
• python3-galaxy-ng Red Hat aiohttp vulnerable to XSS on index pages for static file handling CVE-2024-27306 Fix available 6.1 MediumApril 18, 2024
• python3-galaxy-ng Red Hat HTTP Request Smuggling in benoitc/gunicorn CVE-2024-1135 Fix available 7.5 HighApril 16, 2024
• python3-galaxy-ng Red Hat Passing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError. CVE-2024-4340 Fix available 7.5 HighApril 15, 2024
• python3-galaxy-ng Red Hat Regular expression denial of service in Pydantic < 2.4.0 CVE-2024-3772 Fix available 5.9 MediumApril 15, 2024
• python3-galaxy-ng Red Hat Denial of Service via Quadratic Complexity in kjd/idna CVE-2024-3651 Public exploitFix available 6.2 MediumApril 11, 2024
• python3-galaxy-ng Red Hat Pillow buffer overflow vulnerability CVE-2024-28219 Fix available 6.7 MediumApril 3, 2024
• python3-galaxy-ng Red Hat HTTP/2 CONTINUATION flood in net/http CVE-2023-45288 Public exploitFix available EPSS 89.5% 7.5 HighMarch 27, 2024
• python3-galaxy-ng Red Hat Black vulnerable to Regular Expression Denial of Service (ReDoS) CVE-2024-21503 Fix available 5.3 MediumMarch 19, 2024
• python3-galaxy-ng Red Hat Proxy-Authorization header kept across hosts in follow-redirects CVE-2024-28849 Fix available 6.5 MediumMarch 14, 2024
• python3-galaxy-ng Red Hat Memory exhaustion in multipart form parsing in net/textproto and net/http CVE-2023-45290 Fix available 6.5 MediumMarch 5, 2024
• python3-galaxy-ng Red Hat Verify panics on certificates with an unknown public key algorithm in crypto/x509 CVE-2024-24783 Fix available 5.9 MediumMarch 5, 2024
• python3-galaxy-ng Red Hat Regular expression denial-of-service in Django CVE-2024-27351 Fix available 5.3 MediumMarch 4, 2024
• python3-galaxy-ng Red Hat cryptography NULL pointer deference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override CVE-2024-26130 Fix available 7.5 HighFebruary 21, 2024
• python3-galaxy-ng Red Hat cryptography vulnerable to NULL-dereference when loading PKCS7 certificates CVE-2023-49083 Fix available 5.9 MediumNovember 28, 2023
• python3-galaxy-ng Red Hat Mercurial configuration injectable in repo revision when installing via pip CVE-2023-5752 Fix available 5.5 MediumOctober 24, 2023
• python3-galaxy-ng Red Hat Arbitrary Code Execution in Pillow CVE-2023-50447 Fix available 8.1 HighOctober 5, 2023
• python3-galaxy-ng Red Hat A privilege escalation flaw was found in the Ansible Automation Platform. This flaw allows a... CVE-2022-2568 Fix available 6.5 MediumAugust 18, 2022
• python3-galaxy-ng Red Hat Catastrophic backtracking in URL authority parser when passed URL containing many @ characters CVE-2021-33503 Fix available 7.5 HighJune 1, 2021
• python3-galaxy-ng Red Hat A security issue in nginx resolver was identified, which might allow an attacker who is able to... CVE-2021-23017 Public exploitFix available EPSS 53.5% 7.7 HighMay 25, 2021
• python3-galaxy-ng Red Hat Pygments vulnerable to Regular Expression Denial of Service (ReDoS) CVE-2021-27291 Fix available 7.5 HighMarch 17, 2021
• python3-galaxy-ng Red Hat Infinite Loop in Pygments CVE-2021-20270 Fix available 7.5 HighMarch 9, 2021
• python3-galaxy-ng Red Hat Cross-site scripting in Bleach CVE-2021-23980 Fix available 6.1 MediumFebruary 2, 2021
• python3-galaxy-ng Red Hat Django Directory Traversal via archive.extract CVE-2021-3281 Public exploitFix available 5.3 MediumFebruary 1, 2021
• python3-galaxy-ng Red Hat Command Injection CVE-2020-7789 Fix available 5.6 MediumDecember 11, 2020
• python3-galaxy-ng Red Hat Prototype Pollution in Ajv CVE-2020-15366 Fix available 5.6 MediumJuly 15, 2020