python3.12-jwcrypto vulnerabilities (Red Hat)
15 vulnerabilities.
-
python3.12-jwcryptoRed Hat Aap-gateway: missing requestheaderstoremove allows mtls bypass via subject header spoofing 8.2 High -
python3.12-jwcryptoRed Hat Aap-controller: aap-gateway: account hijacking and unauthorized access via unverified email linking 8.3 High -
python3.12-jwcryptoRed Hat JWCrypto: JWE ZIP decompression bomb 5.3 Medium -
python3.12-jwcryptoRed Hat pyasn1 Vulnerable to Denial of Service via Unbounded Recursion 7.5 High -
python3.12-jwcryptoRed Hat pyOpenSSL DTLS cookie callback buffer overflow 7.2 High -
python3.12-jwcryptoRed Hat PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation) 7.5 High -
python3.12-jwcryptoRed Hat Incorrect parsing of IPv6 host literals in net/url 7.5 High -
python3.12-jwcryptoRed Hat Python-Markdown has an Uncaught Exception 7.5 High -
python3.12-jwcryptoRed Hat SVGO: DoS through entity expansion in DOCTYPE (Billion Laughs) 7.5 High -
python3.12-jwcryptoRed Hat Rollup 4 has Arbitrary File Write via Path Traversal 8.8 High -
python3.12-jwcryptoRed Hat minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern 8.7 High -
python3.12-jwcryptoRed Hat ajv has ReDoS when using `$data` option 2.9 Low -
python3.12-jwcryptoRed Hat cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves 8.2 High -
python3.12-jwcryptoRed Hat Potential denial-of-service vulnerability via repeated headers when using ASGI 7.5 High -
python3.12-jwcryptoRed Hat pyasn1 has a DoS vulnerability in decoder 7.5 High