python3-sqlparse vulnerabilities (Red Hat)
71 vulnerabilities.
python3-sqlparseRed HatCri-o: cri-o path traversal in log handling functions allows arbitrary unmounting6.6 Mediumpython3-sqlparseRed HatPodman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile8.6 Highpython3-sqlparseRed HatJinja has a sandbox breakout through indirect reference to format method5.4 Mediumpython3-sqlparseRed HatJinja has a sandbox breakout through malicious filenames5.4 Mediumpython3-sqlparseRed HatPodman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)6.5 Mediumpython3-sqlparseRed HatBuildah: buildah allows arbitrary directory mount7.8 Highpython3-sqlparseRed HatPodman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library5.4 Mediumpython3-sqlparseRed HatRequests `Session` object does not verify requests after making first request with verify=False5.6 Mediumpython3-sqlparseRed HatJinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter5.4 Mediumpython3-sqlparseRed HatDenial of service when trying to parse malformed POST requests in aiohttp7.5 Highpython3-sqlparseRed Hatsocial-auth-app-django Improper Handling of Case Sensitivity vulnerability4.9 Mediumpython3-sqlparseRed Hataiohttp vulnerable to XSS on index pages for static file handling6.1 Mediumpython3-sqlparseRed HatHTTP Request Smuggling in benoitc/gunicorn7.5 Highpython3-sqlparseRed HatPassing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError.7.5 Highpython3-sqlparseRed HatRegular expression denial of service in Pydantic < 2.4.05.9 Mediumpython3-sqlparseRed HatDenial of Service via Quadratic Complexity in kjd/idna6.2 Mediumpython3-sqlparseRed HatPillow buffer overflow vulnerability6.7 Mediumpython3-sqlparseRed HatHTTP/2 CONTINUATION flood in net/http7.5 Highpython3-sqlparseRed HatBlack vulnerable to Regular Expression Denial of Service (ReDoS)5.3 Mediumpython3-sqlparseRed HatProxy-Authorization header kept across hosts in follow-redirects6.5 Mediumpython3-sqlparseRed HatMemory exhaustion in multipart form parsing in net/textproto and net/http6.5 Mediumpython3-sqlparseRed HatVerify panics on certificates with an unknown public key algorithm in crypto/x5095.9 Mediumpython3-sqlparseRed HatRegular expression denial-of-service in Django5.3 Mediumpython3-sqlparseRed Hatcryptography NULL pointer deference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override7.5 Highpython3-sqlparseRed Hatcryptography vulnerable to NULL-dereference when loading PKCS7 certificates5.9 Mediumpython3-sqlparseRed HatMercurial configuration injectable in repo revision when installing via pip5.5 Mediumpython3-sqlparseRed HatArbitrary Code Execution in Pillow8.1 Highpython3-sqlparseRed HatCri-o: security regression of cve-2022-276524.8 Mediumpython3-sqlparseRed HatUnauthorized read of Custom Resources6.5 Mediumpython3-sqlparseRed HatOpenshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the...7.4 Highpython3-sqlparseRed HatKubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF)5.1 Mediumpython3-sqlparseRed HatIncorrect sanitization of forwarded query parameters in net/http/httputil7.5 Highpython3-sqlparseRed HatMemory exhaustion when compiling regular expressions in regexp/syntax7.5 Highpython3-sqlparseRed HatUnbounded memory consumption when reading headers in archive/tar7.5 Highpython3-sqlparseRed HatCRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure7.1 Highpython3-sqlparseRed HatFailure to strip relative path components in net/url7.5 Highpython3-sqlparseRed Hatgolang.org/x/net/http2 Denial of Service vulnerability7.5 Highpython3-sqlparseRed Hatpython-scciclient vulnerable to Man-in-the-middle (MITM) attacks7.4 Highpython3-sqlparseRed HatPanic when decoding Float and Rat types in math/big7.5 Highpython3-sqlparseRed HatExposure of client IP addresses in net/http6.5 Mediumpython3-sqlparseRed HatStack exhaustion when reading certain archives in compress/gzip7.5 Highpython3-sqlparseRed HatImproper sanitization of Transfer-Encoding headers in net/http6.5 Mediumpython3-sqlparseRed HatIncorrect Default Permissions in runc5.9 Mediumpython3-sqlparseRed HatIgnition config accessible to unprivileged software on VMware6.5 Mediumpython3-sqlparseRed HatThe generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows...7.5 Highpython3-sqlparseRed Hatencoding/pem in Go before 1.17.9 and 1.8.x before 1.8.1 has a Decode stack overflow via a large...7.5 Highpython3-sqlparseRed Hatgolang.org/x/crypto/ssh Denial of service via crafted Signer7.5 Highpython3-sqlparseRed Hatregexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply...7.5 Highpython3-sqlparseRed HatUncontrolled Resource Consumption in promhttp7.5 Highpython3-sqlparseRed Hatcmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely...7.5 High- Show moreLoading…