python3-urllib3 vulnerabilities (Red Hat)
56 vulnerabilities.
-
python3-urllib3Red Hat urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory 8.9 High -
python3-urllib3Red Hat urllib3: Chunked Deflate streaming can enter an infinite loop 6.9 Medium -
python3-urllib3Red Hat urllib3: HTTPS proxy TLS configuration may be ignored or overridden 7.6 High -
python3-urllib3Red Hat urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API 8.9 High -
python3-urllib3Red Hat urllib3: Sensitive headers forwarded across origins in proxied low-level redirects 8.2 High -
python3-urllib3Red Hat urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) 8.9 High -
python3-urllib3Red Hat urllib3 Streaming API improperly handles highly compressed data 8.9 High -
python3-urllib3Red Hat urllib3 allows an unbounded number of links in the decompression chain 8.9 High -
python3-urllib3Red Hat Pulpcore: rbac permissions incorrectly assigned in tasks that create objects 6.7 Medium -
python3-urllib3Red Hat Proxy-Authorization request header isn't stripped during cross-origin redirects in urllib3 4.4 Medium -
python3-urllib3Red Hat Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip 9.8 Critical -
python3-urllib3Red Hat Malformed DNS message can cause infinite loop in net 5.9 Medium -
python3-urllib3Red Hat Request body not stripped after redirect in urllib3 4.2 Medium -
python3-urllib3Red Hat Django Denial-of-service in django.utils.text.Truncator 7.5 High -
python3-urllib3Red Hat `Cookie` HTTP header isn't stripped on cross-origin redirects 5.9 Medium -
python3-urllib3Red Hat Regular Expression Denial of Service in Addressable templates 7.5 High -
python3-urllib3Red Hat A flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets... 5.5 Medium -
python3-urllib3Red Hat Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks 7.5 High -
python3-urllib3Red Hat Path Traversal in Django 4.9 Medium -
python3-urllib3Red Hat Catastrophic backtracking in URL authority parser when passed URL containing many @ characters 7.5 High -
python3-urllib3Red Hat Keepalive Connections Causing Denial Of Service in puma 7.5 High -
python3-urllib3Red Hat Possible DoS Vulnerability in Action Controller Token Authentication 7.5 High -
python3-urllib3Red Hat Action Pack contains Information Disclosure / Unintended Method Execution vulnerability 7.5 High -
python3-urllib3Red Hat Denial of Service in Action Dispatch 7.5 High -
python3-urllib3Red Hat Path Traversal in Django 7.5 High -
python3-urllib3Red Hat A smart proxy that provides a restful API to various sub-systems of the Foreman is affected by... 5.9 Medium -
python3-urllib3Red Hat A flaw was found in Red Hat Satellite in tfm-rubygem-foreman_azure_rm in versions before 2.2.0. A... 6.3 Medium -
python3-urllib3Red Hat Directory Traversal in Django 5.3 Medium -
python3-urllib3Red Hat Activerecord-session_store Vulnerable to Timing Attack 5.3 Medium -
python3-urllib3Red Hat Open redirect vulnerability in aiohttp 3.1 Low -
python3-urllib3Red Hat A flaw was found in Red Hat Satellite. The BMC interface exposes the password through the API to... 5.3 Medium -
python3-urllib3Red Hat Improper Input Validation in PyYAML 9.8 Critical -
python3-urllib3Red Hat XXE in Nokogiri 2.6 Low -
python3-urllib3Red Hat Temp directory permission issue in Guava 3.3 Low -
python3-urllib3Red Hat CRLF injection in urllib3 6.5 Medium -
python3-urllib3Red Hat Generation of Error Message Containing Sensitive Information in RESTEasy client 5.3 Medium -
python3-urllib3Red Hat XSS in Action View 5.4 Medium -
python3-urllib3Red Hat Untrusted users can run pending migrations in production in Rails 6.5 Medium -
python3-urllib3Red Hat CSRF Vulnerability in rails-ujs 6.5 Medium -
python3-urllib3Red Hat Ability to forge per-form CSRF tokens in Rails 4.3 Medium -
python3-urllib3Red Hat Circumvention of file size limits in ActiveStorage 7.5 High -
python3-urllib3Red Hat Possible Strong Parameters Bypass in ActionPack 7.5 High -
python3-urllib3Red Hat ActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore 9.8 Critical -
python3-urllib3Red Hat Denial of Service in Netty 7.5 High -
python3-urllib3Red Hat SQL injection in Django 8.8 High -
python3-urllib3Red Hat OS Command Injection in Rake 6.4 Medium -
python3-urllib3Red Hat Possible Information Leak / Session Hijack Vulnerability in Rack 6.3 Medium -
python3-urllib3Red Hat Double Free in psutil 7.5 High -
python3-urllib3Red Hat Improper Verification of Cryptographic Signature in Pure-Python ECDSA 7.4 High -
python3-urllib3Red Hat Duplicate Advisory: possible DoS caused by malformed signature decoding in Pure-Python ECDSA 3.7 Low - Show olderLoading…