python3.11-django vulnerabilities (Red Hat)
89 vulnerabilities.
-
python3.11-djangoRed Hat Forman: foreman: remote code execution via command injection in websocket proxy 8.0 High -
python3.11-djangoRed Hat Rubygem-katello: katello: denial of service and potential information disclosure via sql injection 5.4 Medium -
python3.11-djangoRed Hat Rubyipmi: red hat satellite: remote code execution in rubyipmi via malicious bmc username 8.3 High -
python3.11-djangoRed Hat Potential SQL injection via QuerySet.order_by and FilteredRelation 5.4 Medium -
python3.11-djangoRed Hat Potential SQL injection in column aliases via control characters 5.4 Medium -
python3.11-djangoRed Hat Potential denial-of-service vulnerability in django.utils.text.Truncator HTML methods 7.5 High -
python3.11-djangoRed Hat Potential SQL injection via raster lookups on PostGIS 5.4 Medium -
python3.11-djangoRed Hat Potential denial-of-service vulnerability via repeated headers when using ASGI 7.5 High -
python3.11-djangoRed Hat Fog-kubevirt: fog-kubevirt: man-in-the-middle vulnerability due to disabled certificate validation 8.1 High -
python3.11-djangoRed Hat Foreman-kubevirt: foreman_kubevirt: man-in-the-middle due to insecure default ssl verification 8.1 High -
python3.11-djangoRed Hat Unexpected session resumption in crypto/tls 10.0 Critical -
python3.11-djangoRed Hat AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb 7.5 High -
python3.11-djangoRed Hat urllib3 Streaming API improperly handles highly compressed data 8.9 High -
python3.11-djangoRed Hat Excessive resource consumption when printing error string for host certificate validation in crypto/x509 7.5 High -
python3.11-djangoRed Hat Potential denial-of-service vulnerability in XML serializer text extraction 7.5 High -
python3.11-djangoRed Hat Aap-gateway: improper path validation in gateway allows credential exfiltration 6.7 Medium -
python3.11-djangoRed Hat Potential SQL injection via _connector keyword argument in QuerySet and Q objects 9.1 Critical -
python3.11-djangoRed Hat Brotli decompression bomb DoS in scrapy/scrapy 7.5 High -
python3.11-djangoRed Hat Event-driven-ansible: sensitive internal headers disclosure in aap eda event streams 6.7 Medium -
python3.11-djangoRed Hat Event-driven-ansible: event stream test mode exposes sensitive headers in aap eda 6.7 Medium -
python3.11-djangoRed Hat quic-go has Client Crash Due to Premature HANDSHAKE_DONE Frame 7.5 High -
python3.11-djangoRed Hat Django vulnerable to partial directory traversal via archives 3.1 Low -
python3.11-djangoRed Hat tar-fs has a symlink validation bypass if destination directory is predictable with a specific tarball 8.7 High -
python3.11-djangoRed Hat Axios is vulnerable to DoS attack through lack of data size check 7.5 High -
python3.11-djangoRed Hat cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer... 9.8 Critical -
python3.11-djangoRed Hat AIOHTTP is vulnerable to HTTP Request/Response Smuggling through incorrect parsing of chunked trailer sections 1.7 Low -
python3.11-djangoRed Hat Unbounded recursion in Python Protobuf 8.2 High -
python3.11-djangoRed Hat Django Improper Output Neutralization for Logs vulnerability 4.0 Medium -
python3.11-djangoRed Hat setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write 7.7 High -
python3.11-djangoRed Hat Remote code execution when loading a crafted GraphQL schema 9.1 Critical -
python3.11-djangoRed Hat Local File Inclusion in Rack::Static 7.5 High -
python3.11-djangoRed Hat Django is subject to SQL injection through its column aliases 7.1 High -
python3.11-djangoRed Hat Django Vulnerable to Allocation of Resources Without Limits or Throttling 5.0 Medium -
python3.11-djangoRed Hat Jinja sandbox breakout through attr filter selecting format method 5.4 Medium -
python3.11-djangoRed Hat Django has a potential denial-of-service vulnerability in IPv6 validation 5.8 Medium -
python3.11-djangoRed Hat Jinja has a sandbox breakout through indirect reference to format method 5.4 Medium -
python3.11-djangoRed Hat Jinja has a sandbox breakout through malicious filenames 5.4 Medium -
python3.11-djangoRed Hat Django denial-of-service in django.utils.html.strip_tags() 7.5 High -
python3.11-djangoRed Hat Foreman: read-only access to entire db from templates 6.3 Medium -
python3.11-djangoRed Hat Rexml: rexml: denial of service via inefficient regex parsing 7.5 High -
python3.11-djangoRed Hat REXML ReDoS vulnerability 6.6 Medium -
python3.11-djangoRed Hat Memory leak 7.2 High -
python3.11-djangoRed Hat Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcore 9.8 Critical -
python3.11-djangoRed Hat Puppet-foreman: an authentication bypass vulnerability exists in foreman 9.8 Critical -
python3.11-djangoRed Hat Django SQL injection vulnerability 7.3 High -
python3.11-djangoRed Hat Django vulnerable to denial-of-service attack 7.5 High -
python3.11-djangoRed Hat Django vulnerable to a denial-of-service attack 7.5 High -
python3.11-djangoRed Hat Django memory consumption vulnerability 7.5 High -
python3.11-djangoRed Hat HPACK table poisoning in gRPC C++, Python & Ruby 6.3 Medium -
python3.11-djangoRed Hat Django vulnerable to Denial of Service 7.5 High - Show olderLoading…