python3.11-django vulnerabilities (Red Hat)
89 vulnerabilities.
python3.11-djangoRed HatDjango Path Traversal vulnerability4.3 Mediumpython3.11-djangoRed HatDjango vulnerable to user enumeration attack5.3 Mediumpython3.11-djangoRed HatDjango vulnerable to Denial of Service7.5 Highpython3.11-djangoRed HatDenial of Service via crafted zip file in jaraco/zipp6.2 Mediumpython3.11-djangoRed HatProxy-Authorization request header isn't stripped during cross-origin redirects in urllib34.4 Mediumpython3.11-djangoRed HatUnexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip9.8 Criticalpython3.11-djangoRed HatRequests `Session` object does not verify requests after making first request with verify=False5.6 Mediumpython3.11-djangoRed HatRegular Expression Denial of Service in micromatch5.3 Mediumpython3.11-djangoRed HatJinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter5.4 Mediumpython3.11-djangoRed HatDenial of service when trying to parse malformed POST requests in aiohttp7.5 Highpython3.11-djangoRed Hataiohttp vulnerable to XSS on index pages for static file handling6.1 Mediumpython3.11-djangoRed HatHTTP Request Smuggling in benoitc/gunicorn7.5 Highpython3.11-djangoRed HatPassing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError.7.5 Highpython3.11-djangoRed HatPillow buffer overflow vulnerability6.7 Mediumpython3.11-djangoRed Hatnode-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation6.5 Mediumpython3.11-djangoRed HatRegular expression denial-of-service in Django5.3 Mediumpython3.11-djangoRed Hatcryptography NULL pointer deference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override7.5 Highpython3.11-djangoRed HatDjango denial-of-service attack in the intcomma template filter7.5 Highpython3.11-djangoRed Hataiohttp.web.static(follow_symlinks=True) is vulnerable to directory traversal5.9 Mediumpython3.11-djangoRed Hataiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separators6.5 Mediumpython3.11-djangoRed Hatpython-ecdsa vulnerable to Minerva attack on P-2567.4 Highpython3.11-djangoRed HatJinja vulnerable to Cross-Site Scripting (XSS)5.4 Mediumpython3.11-djangoRed HatHTTP Request/Response Smuggling in puma5.9 Mediumpython3.11-djangoRed HatPyCryptodome and pycryptodomex side-channel leakage for OAEP decryption5.9 Mediumpython3.11-djangoRed HatSatellite: arithmetic overflow in satellite7.6 Highpython3.11-djangoRed Hatcryptography vulnerable to NULL-dereference when loading PKCS7 certificates5.9 Mediumpython3.11-djangoRed Hataiohttp's ClientSession is vulnerable to CRLF injection via version7.2 Highpython3.11-djangoRed Hataiohttp's ClientSession is vulnerable to CRLF injection via method5.3 Mediumpython3.11-djangoRed HatHub: insecure galaxy-importer tarfile extraction6.3 Mediumpython3.11-djangoRed HatRequest smuggling in aiohttp5.3 Mediumpython3.11-djangoRed HatDjango Denial-of-service in django.utils.text.Truncator7.5 Highpython3.11-djangoRed HatDjango Denial of service vulnerability in django.utils.encoding.uri_to_iri7.5 Highpython3.11-djangoRed HatActive Support Possibly Discloses Locally Encrypted Files5.5 Mediumpython3.11-djangoRed Hataiohttp vulnerable to HTTP request smuggling5.3 Mediumpython3.11-djangoRed HatPygments vulnerable to ReDoS5.5 Mediumpython3.11-djangoRed HatJetty accepts "+" prefixed value in Content-Length5.3 Mediumpython3.11-djangoRed HatJetty vulnerable to errant command quoting in CGI Servlet3.5 Lowpython3.11-djangoRed HatDjango has regular expression denial of service vulnerability in EmailValidator/URLValidator7.5 Highpython3.11-djangoRed HatAudited Log Integrity Errors Due to Race Condition3.1 Low