python3.12-click vulnerabilities (Red Hat)
19 vulnerabilities.
-
python3.12-clickRed Hat [DISPUTED] Pallets Click contains a command injection via Unsanitized Filename "click.edit()" 7.2 High -
python3.12-clickRed Hat Pillow is vulnerable to a FITS GZIP decompression bomb 8.7 High -
python3.12-clickRed Hat Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain 4.8 Medium -
python3.12-clickRed Hat Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF 6.3 Medium -
python3.12-clickRed Hat cryptography has a buffer overflow if non-contiguous buffers were passed to APIs 6.9 Medium -
python3.12-clickRed Hat Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls 7.5 High -
python3.12-clickRed Hat TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix 6.4 Medium -
python3.12-clickRed Hat Unexpected work during chain building in crypto/x509 7.5 High -
python3.12-clickRed Hat Vite Affected by Arbitrary File Read via Vite Dev Server WebSocket 8.2 High -
python3.12-clickRed Hat lodash vulnerable to Code Injection via `_.template` imports key names 8.1 High -
python3.12-clickRed Hat Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation) 7.4 High -
python3.12-clickRed Hat Forge has signature forgery in Ed25519 due to missing S > L check 7.5 High -
python3.12-clickRed Hat Forge has signature forgery in RSA-PKCS due to ASN.1 extra field 7.5 High -
python3.12-clickRed Hat Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input 7.5 High -
python3.12-clickRed Hat path-to-regexp vulnerable to Denial of Service via sequential optional groups 7.5 High -
python3.12-clickRed Hat pyasn1 Vulnerable to Denial of Service via Unbounded Recursion 7.5 High -
python3.12-clickRed Hat minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions 7.5 High -
python3.12-clickRed Hat minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern 8.7 High -
python3.12-clickRed Hat Out-of-bounds read & write in RFC 3211 KEK Unwrap 7.5 High