python3.14-test vulnerabilities (Red Hat)
17 vulnerabilities.
-
python3.14-testRed Hat SSLContext.wrap_bio() missing validation of server_hostname parameter 7.6 High -
python3.14-testRed Hat Use-after-free of a server-side SSLContext when sni_callback switches contexts 9.2 Critical -
python3.14-testRed Hat Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations 8.7 High -
python3.14-testRed Hat tarfile opened in streaming mode mishandles EOF 8.2 High -
python3.14-testRed Hat tarfile extraction filter bypass allows escaping the destination directory 7.8 High -
python3.14-testRed Hat qs.stringify crashes on null/undefined entries in comma-format arrays under encodeValuesOnly 6.3 Medium -
python3.14-testRed Hat BaseCookie.js_output() does not neutralize embedded characters 2.1 Low -
python3.14-testRed Hat Out-of-bounds read/write during remote profiling and asyncio process introspection when connecting to malicious target 5.3 Medium -
python3.14-testRed Hat Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open() 7.0 High -
python3.14-testRed Hat Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure 9.1 Critical -
python3.14-testRed Hat HTTP client proxy tunnel headers not validated for CR/LF 5.7 Medium -
python3.14-testRed Hat webbrowser.open() allows leading dashes in URLs 7.0 High -
python3.14-testRed Hat Stack overflow parsing XML with deeply nested DTD content models 6.0 Medium -
python3.14-testRed Hat Incomplete control character validation in http.cookies 6.0 Medium -
python3.14-testRed Hat SourcelessFileLoader does not use io.open_code() 5.7 Medium -
python3.14-testRed Hat wsgiref.headers.Headers allows header newline injection 5.9 Medium -
python3.14-testRed Hat Extraction filter bypass for linking outside extraction directory 7.5 High