python3.12-cryptography vulnerabilities (Red Hat)
21 vulnerabilities.
-
python3.12-cryptographyRed Hat [DISPUTED] Pallets Click contains a command injection via Unsanitized Filename "click.edit()" 7.2 High -
python3.12-cryptographyRed Hat Pillow is vulnerable to a FITS GZIP decompression bomb 8.7 High -
python3.12-cryptographyRed Hat Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain 4.8 Medium -
python3.12-cryptographyRed Hat Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF 6.3 Medium -
python3.12-cryptographyRed Hat cryptography has a buffer overflow if non-contiguous buffers were passed to APIs 6.9 Medium -
python3.12-cryptographyRed Hat Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls 7.5 High -
python3.12-cryptographyRed Hat TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix 6.4 Medium -
python3.12-cryptographyRed Hat Unexpected work during chain building in crypto/x509 7.5 High -
python3.12-cryptographyRed Hat Vite Affected by Arbitrary File Read via Vite Dev Server WebSocket 8.2 High -
python3.12-cryptographyRed Hat lodash vulnerable to Code Injection via `_.template` imports key names 8.1 High -
python3.12-cryptographyRed Hat Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation) 7.4 High -
python3.12-cryptographyRed Hat Forge has signature forgery in Ed25519 due to missing S > L check 7.5 High -
python3.12-cryptographyRed Hat Forge has signature forgery in RSA-PKCS due to ASN.1 extra field 7.5 High -
python3.12-cryptographyRed Hat Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input 7.5 High -
python3.12-cryptographyRed Hat path-to-regexp vulnerable to Denial of Service via sequential optional groups 7.5 High -
python3.12-cryptographyRed Hat pyasn1 Vulnerable to Denial of Service via Unbounded Recursion 7.5 High -
python3.12-cryptographyRed Hat minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions 7.5 High -
python3.12-cryptographyRed Hat minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern 8.7 High -
python3.12-cryptographyRed Hat Out-of-bounds read & write in RFC 3211 KEK Unwrap 7.5 High -
python3.12-cryptographyRed Hat rust openssl ssl::select_next_proto use after free 6.3 Medium -
python3.12-cryptographyRed Hat cryptography NULL pointer deference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override 7.5 High