python3-idna vulnerabilities (Red Hat)
69 vulnerabilities.
-
python3-idnaRed Hat Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix 6.9 Medium -
python3-idnaRed Hat Requests `Session` object does not verify requests after making first request with verify=False 5.6 Medium -
python3-idnaRed Hat Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter 5.4 Medium -
python3-idnaRed Hat Denial of service when trying to parse malformed POST requests in aiohttp 7.5 High -
python3-idnaRed Hat social-auth-app-django Improper Handling of Case Sensitivity vulnerability 4.9 Medium -
python3-idnaRed Hat aiohttp vulnerable to XSS on index pages for static file handling 6.1 Medium -
python3-idnaRed Hat HTTP Request Smuggling in benoitc/gunicorn 7.5 High -
python3-idnaRed Hat Passing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError. 7.5 High -
python3-idnaRed Hat Regular expression denial of service in Pydantic < 2.4.0 5.9 Medium -
python3-idnaRed Hat Denial of Service via Quadratic Complexity in kjd/idna 6.2 Medium -
python3-idnaRed Hat Pillow buffer overflow vulnerability 6.7 Medium -
python3-idnaRed Hat HTTP/2 CONTINUATION flood in net/http 7.5 High -
python3-idnaRed Hat Black vulnerable to Regular Expression Denial of Service (ReDoS) 5.3 Medium -
python3-idnaRed Hat Proxy-Authorization header kept across hosts in follow-redirects 6.5 Medium -
python3-idnaRed Hat Memory exhaustion in multipart form parsing in net/textproto and net/http 6.5 Medium -
python3-idnaRed Hat Verify panics on certificates with an unknown public key algorithm in crypto/x509 5.9 Medium -
python3-idnaRed Hat Regular expression denial-of-service in Django 5.3 Medium -
python3-idnaRed Hat cryptography NULL pointer deference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override 7.5 High -
python3-idnaRed Hat cryptography vulnerable to NULL-dereference when loading PKCS7 certificates 5.9 Medium -
python3-idnaRed Hat Mercurial configuration injectable in repo revision when installing via pip 5.5 Medium -
python3-idnaRed Hat Arbitrary Code Execution in Pillow 8.1 High -
python3-idnaRed Hat An account takeover flaw was found in Red Hat Satellite 6.7.2 onward. A potential attacker with... 7.5 High -
python3-idnaRed Hat A flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets... 5.5 Medium -
python3-idnaRed Hat A flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not... 6.5 Medium -
python3-idnaRed Hat Generation of Error Message Containing Sensitive Information in RESTEasy client 5.3 Medium -
python3-idnaRed Hat XSS in Action View 5.4 Medium -
python3-idnaRed Hat A flaw was found in Red Hat Satellite 6 which allows privileged attacker to read cache files.... 8.8 High -
python3-idnaRed Hat Untrusted users can run pending migrations in production in Rails 6.5 Medium -
python3-idnaRed Hat CSRF Vulnerability in rails-ujs 6.5 Medium -
python3-idnaRed Hat Rack allows Percent-encoded cookies to overwrite existing prefixed cookie names 7.5 High -
python3-idnaRed Hat Deserialization of untrusted data in Jackson Databind 8.1 High -
python3-idnaRed Hat Deserialization of untrusted data in Jackson Databind 8.1 High -
python3-idnaRed Hat Deserialization of untrusted data in Jackson Databind 8.1 High -
python3-idnaRed Hat Regular Expression Denial of Service in websocket-extensions (RubyGem) 7.5 High -
python3-idnaRed Hat Ability to forge per-form CSRF tokens in Rails 4.3 Medium -
python3-idnaRed Hat Circumvention of file size limits in ActiveStorage 7.5 High -
python3-idnaRed Hat Possible Strong Parameters Bypass in ActionPack 7.5 High -
python3-idnaRed Hat ActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore 9.8 Critical -
python3-idnaRed Hat Directory traversal in Rack::Directory app bundled with Rack 8.6 High -
python3-idnaRed Hat Improper Input Validation in Hibernate Validator 5.3 Medium -
python3-idnaRed Hat jackson-databind mishandles the interaction between serialization gadgets and typing 8.1 High -
python3-idnaRed Hat Denial of Service in Netty 7.5 High -
python3-idnaRed Hat jackson-databind mishandles the interaction between serialization gadgets and typing 8.8 High -
python3-idnaRed Hat jackson-databind mishandles the interaction between serialization gadgets and typing 8.8 High -
python3-idnaRed Hat Possible XSS vulnerability in ActionView 4.0 Medium -
python3-idnaRed Hat Puppet Server and PuppetDB provide useful performance and debugging information via their metrics... 7.5 High -
python3-idnaRed Hat SQL injection in Django 8.8 High -
python3-idnaRed Hat jackson-databind mishandles the interaction between serialization gadgets and typing 9.8 Critical -
python3-idnaRed Hat jackson-databind mishandles the interaction between serialization gadgets and typing 9.8 Critical -
python3-idnaRed Hat jackson-databind mishandles the interaction between serialization gadgets and typing 9.8 Critical - Show olderLoading…