python3-sqlalchemy vulnerabilities (Red Hat)

23 vulnerabilities.

• python3-sqlalchemy Red Hat GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Python Driver CVE-2026-88029 Fix available 6.1 MediumSeptember 10, 2026
• python3-sqlalchemy Red Hat virtualenv allows command injection through activation scripts for a virtual environment CVE-2024-53899 Fix available 7.8 HighNovember 24, 2024
• python3-sqlalchemy Red Hat Out-of-bounds read in bson module of PyMongo CVE-2024-5629 Fix available 4.7 MediumJune 5, 2024
• python3-sqlalchemy Red Hat Cri-o: security regression of cve-2022-27652 CVE-2022-3466 Fix available 4.8 MediumSeptember 15, 2023
• python3-sqlalchemy Red Hat Unauthorized read of Custom Resources CVE-2022-3162 Fix available 6.5 MediumMarch 1, 2023
• python3-sqlalchemy Red Hat Openshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the... CVE-2022-3259 Fix available 7.4 HighDecember 9, 2022
• python3-sqlalchemy Red Hat Kubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF) CVE-2022-3172 Public exploitFix available 5.1 MediumOctober 14, 2022
• python3-sqlalchemy Red Hat Incorrect sanitization of forwarded query parameters in net/http/httputil CVE-2022-2880 Fix available 7.5 HighOctober 6, 2022
• python3-sqlalchemy Red Hat Memory exhaustion when compiling regular expressions in regexp/syntax CVE-2022-41715 Fix available 7.5 HighOctober 6, 2022
• python3-sqlalchemy Red Hat Unbounded memory consumption when reading headers in archive/tar CVE-2022-2879 Fix available 7.5 HighOctober 6, 2022
• python3-sqlalchemy Red Hat CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure CVE-2022-2995 Fix available 7.1 HighSeptember 19, 2022
• python3-sqlalchemy Red Hat Failure to strip relative path components in net/url CVE-2022-32190 Fix available 7.5 HighSeptember 12, 2022
• python3-sqlalchemy Red Hat golang.org/x/net/http2 Denial of Service vulnerability CVE-2022-27664 Fix available 7.5 HighSeptember 6, 2022
• python3-sqlalchemy Red Hat python-scciclient vulnerable to Man-in-the-middle (MITM) attacks CVE-2022-2996 Fix available 7.4 HighSeptember 1, 2022
• python3-sqlalchemy Red Hat Panic when decoding Float and Rat types in math/big CVE-2022-32189 Fix available 7.5 HighAugust 1, 2022
• python3-sqlalchemy Red Hat Exposure of client IP addresses in net/http CVE-2022-32148 Fix available 6.5 MediumJuly 16, 2022
• python3-sqlalchemy Red Hat Stack exhaustion when reading certain archives in compress/gzip CVE-2022-30631 Fix available 7.5 HighJuly 16, 2022
• python3-sqlalchemy Red Hat Improper sanitization of Transfer-Encoding headers in net/http CVE-2022-1705 Fix available 6.5 MediumJuly 16, 2022
• python3-sqlalchemy Red Hat Denial of service in gopkg.in/yaml.v2 CVE-2021-4235 Fix available 5.5 MediumApril 14, 2021
• python3-sqlalchemy Red Hat Pygments vulnerable to Regular Expression Denial of Service (ReDoS) CVE-2021-27291 Fix available 7.5 HighMarch 17, 2021
• python3-sqlalchemy Red Hat Infinite Loop in Pygments CVE-2021-20270 Fix available 7.5 HighMarch 9, 2021
• python3-sqlalchemy Red Hat SQLAlchemy vulnerable to SQL Injection via order_by parameter CVE-2019-7164 Fix available 9.8 CriticalFebruary 20, 2019
• python3-sqlalchemy Red Hat SQLAlchemy is vulnerable to SQL Injection via group_by parameter CVE-2019-7548 Fix available 7.8 HighFebruary 6, 2019