receptor vulnerabilities (Red Hat)
172 vulnerabilities.
receptorRed HatAap-gateway: aap-gateway: authentication bypass in event-driven ansible via forged http header8.2 HighreceptorRed HatEda-server: externaleventstreamviewset trusts subject header without validation and leaks expected dn7.5 HighreceptorRed Hatpyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service7.5 HighreceptorRed Hatpyasn1: Uncontrolled resource consumption when converting decoded REAL values7.5 HighreceptorRed HatPillow: Heap out-of-bounds write in Pillow `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`8.2 HighreceptorRed HatPillow BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading7.5 HighreceptorRed HatPillow GdImageFile decompression bomb protection bypass7.5 HighreceptorRed HatPillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`7.5 HighreceptorRed HatPillow: PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading7.5 HighreceptorRed Hatquic-go: HTTP/3 QPACK Trailer Expansion Memory Exhaustion5.3 MediumreceptorRed HatUnbounded WebSocket message and frame sizes can cause unauthenticated remote denial of service5.3 MediumreceptorRed HatQuadratic complexity in WordDecoder.DecodeHeader in mime7.5 HighreceptorRed HatInefficient candidate hostname parsing in crypto/x5096.5 MediumreceptorRed HatAIOHTTP Vulnerable to Deserialization of Untrusted Data6.4 MediumreceptorRed HatPyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed7.4 HighreceptorRed HatQuadratic string concatenation in consumePhrase in net/mail7.5 HighreceptorRed HatQuadratic string concatentation in consumeComment in net/mail7.5 HighreceptorRed HatCrash when handling long CNAME response in net7.5 HighreceptorRed HatAap-gateway: missing requestheaderstoremove allows mtls bypass via subject header spoofing8.2 HighreceptorRed HatAap-controller: aap-gateway: account hijacking and unauthorized access via unverified email linking8.3 HighreceptorRed Hat[DISPUTED] Pallets Click contains a command injection via Unsanitized Filename "click.edit()"7.2 HighreceptorRed HatPillow is vulnerable to a FITS GZIP decompression bomb8.7 HighreceptorRed HatAxios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain4.8 MediumreceptorRed HatAxios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF6.3 MediumreceptorRed Hatcryptography has a buffer overflow if non-contiguous buffers were passed to APIs6.9 MediumreceptorRed HatUnauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls7.5 HighreceptorRed HatTOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix6.4 MediumreceptorRed HatUnexpected work during chain building in crypto/x5097.5 HighreceptorRed HatJWCrypto: JWE ZIP decompression bomb5.3 MediumreceptorRed HatVite Affected by Arbitrary File Read via Vite Dev Server WebSocket8.2 HighreceptorRed Hatlodash vulnerable to Code Injection via `_.template` imports key names8.1 HighreceptorRed HatForge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)7.4 HighreceptorRed HatForge has signature forgery in Ed25519 due to missing S > L check7.5 HighreceptorRed HatForge has signature forgery in RSA-PKCS due to ASN.1 extra field7.5 HighreceptorRed HatForge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input7.5 HighreceptorRed Hatpath-to-regexp vulnerable to Denial of Service via sequential optional groups7.5 HighreceptorRed Hatpyasn1 Vulnerable to Denial of Service via Unbounded Recursion7.5 HighreceptorRed HatpyOpenSSL DTLS cookie callback buffer overflow7.2 HighreceptorRed HatPyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)7.5 HighreceptorRed HatIncorrect parsing of IPv6 host literals in net/url7.5 HighreceptorRed HatPython-Markdown has an Uncaught Exception7.5 HighreceptorRed HatSVGO: DoS through entity expansion in DOCTYPE (Billion Laughs)7.5 HighreceptorRed Hatminimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions7.5 HighreceptorRed HatRollup 4 has Arbitrary File Write via Path Traversal8.8 HighreceptorRed Hatminimatch has a ReDoS via repeated wildcards with non-matching literal in pattern8.7 HighreceptorRed Hatajv has ReDoS when using `$data` option2.9 LowreceptorRed Hatcryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves8.2 HighreceptorRed HatPotential SQL injection via QuerySet.order_by and FilteredRelation5.4 MediumreceptorRed HatPotential SQL injection in column aliases via control characters5.4 MediumreceptorRed HatPotential denial-of-service vulnerability in django.utils.text.Truncator HTML methods7.5 High- Show moreLoading…