python3.12-django vulnerabilities (Red Hat)
38 vulnerabilities.
-
python3.12-djangoRed Hat GitPython before 3.1.59 Arbitrary File Read via TagReference.create 7.1 High -
python3.12-djangoRed Hat GitPython before 3.1.59 Path Traversal via separate-git-dir 8.7 High -
python3.12-djangoRed Hat Awx: notification backends allow ssrf and credential leakage 7.7 High -
python3.12-djangoRed Hat Awx: project archive extraction allows path traversal file writes 7.2 High -
python3.12-djangoRed Hat Awx: webhook status callback ssrf leaks the git pat 7.7 High -
python3.12-djangoRed Hat Server-side file-write and request forgery via spatial lookups 8.7 High -
python3.12-djangoRed Hat AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response) 7.1 High -
python3.12-djangoRed Hat GitPython before 3.1.57 Arbitrary File Overwrite and Read 7.2 High -
python3.12-djangoRed Hat GitPython before 3.1.52 Environment Variable Exfiltration via clone_from 8.7 High -
python3.12-djangoRed Hat GitPython before 3.1.51 Command Injection via unguarded Git options 8.6 High -
python3.12-djangoRed Hat GitPython before 3.1.51 Command Injection via option prefix abbreviation 8.7 High -
python3.12-djangoRed Hat GitPython 3.1.50 Authentication Bypass via Joined Short Options 9.3 Critical -
python3.12-djangoRed Hat pyasn1: Uncontrolled resource consumption when converting decoded REAL values 7.5 High -
python3.12-djangoRed Hat form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection) 8.7 High -
python3.12-djangoRed Hat Awxkit: path traversal via yaml !include directive 4.7 Medium -
python3.12-djangoRed Hat Unbounded WebSocket message and frame sizes can cause unauthenticated remote denial of service 5.3 Medium -
python3.12-djangoRed Hat AIOHTTP Vulnerable to Deserialization of Untrusted Data 6.4 Medium -
python3.12-djangoRed Hat tmp: Path Traversal via unsanitized prefix/postfix enables directory escape 7.7 High -
python3.12-djangoRed Hat JWCrypto: JWE ZIP decompression bomb 5.3 Medium -
python3.12-djangoRed Hat Rails Active Support has a possible DoS vulnerability in its number helpers 6.6 Medium -
python3.12-djangoRed Hat pyOpenSSL DTLS cookie callback buffer overflow 7.2 High -
python3.12-djangoRed Hat Python-Markdown has an Uncaught Exception 7.5 High -
python3.12-djangoRed Hat Potential SQL injection via QuerySet.order_by and FilteredRelation 5.4 Medium -
python3.12-djangoRed Hat Potential SQL injection in column aliases via control characters 5.4 Medium -
python3.12-djangoRed Hat Potential denial-of-service vulnerability in django.utils.text.Truncator HTML methods 7.5 High -
python3.12-djangoRed Hat Potential SQL injection via raster lookups on PostGIS 5.4 Medium -
python3.12-djangoRed Hat Potential denial-of-service vulnerability via repeated headers when using ASGI 7.5 High -
python3.12-djangoRed Hat Denial of Service in Python Protobuf 8.2 High -
python3.12-djangoRed Hat wheel Allows Arbitrary File Permission Modification via Path Traversal 7.1 High -
python3.12-djangoRed Hat Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions 6.9 Medium -
python3.12-djangoRed Hat pyasn1 has a DoS vulnerability in decoder 7.5 High -
python3.12-djangoRed Hat Memory exhaustion in query parameter parsing in net/url 7.5 High -
python3.12-djangoRed Hat React Router vulnerable to XSS via Open Redirects 8.0 High -
python3.12-djangoRed Hat React Router SSR XSS in ScrollRestoration 8.2 High -
python3.12-djangoRed Hat React Router has XSS Vulnerability 7.6 High -
python3.12-djangoRed Hat AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb 7.5 High -
python3.12-djangoRed Hat Out-of-bounds read & write in RFC 3211 KEK Unwrap 9.8 Critical -
python3.12-djangoRed Hat AIOHTTP: HTTP request smuggling via WebSocket upgrade 6.3 Medium