python3.12-pyOpenSSL vulnerabilities (Red Hat)
21 vulnerabilities.
-
python3.12-pyOpenSSLRed Hat Aap-gateway: missing requestheaderstoremove allows mtls bypass via subject header spoofing 8.2 High -
python3.12-pyOpenSSLRed Hat Aap-controller: aap-gateway: account hijacking and unauthorized access via unverified email linking 8.3 High -
python3.12-pyOpenSSLRed Hat JWCrypto: JWE ZIP decompression bomb 5.3 Medium -
python3.12-pyOpenSSLRed Hat Rails Active Support has a possible DoS vulnerability in its number helpers 6.6 Medium -
python3.12-pyOpenSSLRed Hat pyasn1 Vulnerable to Denial of Service via Unbounded Recursion 7.5 High -
python3.12-pyOpenSSLRed Hat pyOpenSSL DTLS cookie callback buffer overflow 7.2 High -
python3.12-pyOpenSSLRed Hat PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation) 7.5 High -
python3.12-pyOpenSSLRed Hat Incorrect parsing of IPv6 host literals in net/url 7.5 High -
python3.12-pyOpenSSLRed Hat Python-Markdown has an Uncaught Exception 7.5 High -
python3.12-pyOpenSSLRed Hat SVGO: DoS through entity expansion in DOCTYPE (Billion Laughs) 7.5 High -
python3.12-pyOpenSSLRed Hat Rollup 4 has Arbitrary File Write via Path Traversal 8.8 High -
python3.12-pyOpenSSLRed Hat minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern 8.7 High -
python3.12-pyOpenSSLRed Hat ajv has ReDoS when using `$data` option 2.9 Low -
python3.12-pyOpenSSLRed Hat cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves 8.2 High -
python3.12-pyOpenSSLRed Hat Potential SQL injection via QuerySet.order_by and FilteredRelation 5.4 Medium -
python3.12-pyOpenSSLRed Hat Potential SQL injection in column aliases via control characters 5.4 Medium -
python3.12-pyOpenSSLRed Hat Potential denial-of-service vulnerability in django.utils.text.Truncator HTML methods 7.5 High -
python3.12-pyOpenSSLRed Hat Potential SQL injection via raster lookups on PostGIS 5.4 Medium -
python3.12-pyOpenSSLRed Hat Potential denial-of-service vulnerability via repeated headers when using ASGI 7.5 High -
python3.12-pyOpenSSLRed Hat pyasn1 has a DoS vulnerability in decoder 7.5 High -
python3.12-pyOpenSSLRed Hat Out-of-bounds read & write in RFC 3211 KEK Unwrap 7.5 High