python3.12-aiohttp vulnerabilities (Red Hat)
68 vulnerabilities.
python3.12-aiohttpRed HatGitPython: Unsafe option check validates multi_options before shlex.split transforms it8.1 Highpython3.12-aiohttpRed HatJWCrypto: JWE ZIP decompression bomb5.3 Mediumpython3.12-aiohttpRed HatPotential SQL injection via QuerySet.order_by and FilteredRelation5.4 Mediumpython3.12-aiohttpRed HatPotential SQL injection in column aliases via control characters5.4 Mediumpython3.12-aiohttpRed HatPotential denial-of-service vulnerability in django.utils.text.Truncator HTML methods7.5 Highpython3.12-aiohttpRed HatPotential SQL injection via raster lookups on PostGIS5.4 Mediumpython3.12-aiohttpRed HatPotential denial-of-service vulnerability via repeated headers when using ASGI7.5 Highpython3.12-aiohttpRed HatDenial of Service in Python Protobuf8.2 Highpython3.12-aiohttpRed Hatwheel Allows Arbitrary File Permission Modification via Path Traversal7.1 Highpython3.12-aiohttpRed HatPrototype Pollution Vulnerability in Lodash _.unset and _.omit functions6.9 Mediumpython3.12-aiohttpRed Hatpyasn1 has a DoS vulnerability in decoder7.5 Highpython3.12-aiohttpRed HatMemory exhaustion in query parameter parsing in net/url7.5 Highpython3.12-aiohttpRed HatReact Router vulnerable to XSS via Open Redirects8.0 Highpython3.12-aiohttpRed HatReact Router SSR XSS in ScrollRestoration8.2 Highpython3.12-aiohttpRed HatReact Router has XSS Vulnerability7.6 Highpython3.12-aiohttpRed HatAIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb7.5 Highpython3.12-aiohttpRed HatOut-of-bounds read & write in RFC 3211 KEK Unwrap9.8 Criticalpython3.12-aiohttpRed HatAIOHTTP: HTTP request smuggling via WebSocket upgrade6.3 Medium