receptorctl vulnerabilities (Red Hat)
105 vulnerabilities.
receptorctlRed Hatpath-to-regexp vulnerable to Denial of Service via sequential optional groups7.5 HighreceptorctlRed Hatpyasn1 Vulnerable to Denial of Service via Unbounded Recursion7.5 HighreceptorctlRed HatpyOpenSSL DTLS cookie callback buffer overflow7.2 HighreceptorctlRed HatPyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)7.5 HighreceptorctlRed HatIncorrect parsing of IPv6 host literals in net/url7.5 HighreceptorctlRed HatPython-Markdown has an Uncaught Exception7.5 HighreceptorctlRed HatRollup 4 has Arbitrary File Write via Path Traversal8.8 HighreceptorctlRed Hatminimatch has a ReDoS via repeated wildcards with non-matching literal in pattern8.7 HighreceptorctlRed HatPotential SQL injection via QuerySet.order_by and FilteredRelation5.4 MediumreceptorctlRed HatPotential SQL injection in column aliases via control characters5.4 MediumreceptorctlRed HatPotential denial-of-service vulnerability in django.utils.text.Truncator HTML methods7.5 HighreceptorctlRed HatPotential SQL injection via raster lookups on PostGIS5.4 MediumreceptorctlRed HatPotential denial-of-service vulnerability via repeated headers when using ASGI7.5 HighreceptorctlRed HatDenial of Service in Python Protobuf8.2 HighreceptorctlRed Hatwheel Allows Arbitrary File Permission Modification via Path Traversal7.1 HighreceptorctlRed HatPrototype Pollution Vulnerability in Lodash _.unset and _.omit functions6.9 MediumreceptorctlRed Hatpyasn1 has a DoS vulnerability in decoder7.5 HighreceptorctlRed HatMemory exhaustion in query parameter parsing in net/url7.5 HighreceptorctlRed HatReact Router vulnerable to XSS via Open Redirects8.0 HighreceptorctlRed HatReact Router SSR XSS in ScrollRestoration8.2 HighreceptorctlRed HatReact Router has XSS Vulnerability7.6 HighreceptorctlRed HatAIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb7.5 HighreceptorctlRed HatAap-gateway: improper path validation in gateway allows credential exfiltration6.7 MediumreceptorctlRed HatPotential SQL injection via _connector keyword argument in QuerySet and Q objects9.1 CriticalreceptorctlRed HatEvent-driven-ansible: sensitive internal headers disclosure in aap eda event streams6.7 MediumreceptorctlRed HatEvent-driven-ansible: event stream test mode exposes sensitive headers in aap eda6.7 MediumreceptorctlRed Hatquic-go has Client Crash Due to Premature HANDSHAKE_DONE Frame7.5 HighreceptorctlRed HatAxios is vulnerable to DoS attack through lack of data size check7.5 HighreceptorctlRed HatEvent-driven-ansible: authenticated argument injection in git url in eda project creation8.8 HighreceptorctlRed HatEvent-driven-ansible: template injection via git branch and refspec in eda projects8.8 HighreceptorctlRed HatRequest smuggling due to acceptance of invalid chunked data in net/http9.1 CriticalreceptorctlRed Hatquic-go affected by an ICMP Packet Too Large Injection Attack on Linux6.5 MediumreceptorctlRed Hataiohttp vulnerable to request smuggling due to incorrect parsing of chunk extensions6.3 MediumreceptorctlRed HatAap-gateway: xss on aap-gateway6.1 MediumreceptorctlRed HatDjango vulnerable to denial-of-service attack via the urlize() and urlizetrunc() template filters7.5 HighreceptorctlRed HatPulpcore: rbac permissions incorrectly assigned in tasks that create objects6.7 MediumreceptorctlRed HatDjango memory consumption vulnerability7.5 HighreceptorctlRed HatProxy-Authorization request header isn't stripped during cross-origin redirects in urllib34.4 MediumreceptorctlRed HatUnexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip9.8 CriticalreceptorctlRed HatRequests `Session` object does not verify requests after making first request with verify=False5.6 MediumreceptorctlRed HatMalformed DNS message can cause infinite loop in net5.9 MediumreceptorctlRed HatJinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter5.4 MediumreceptorctlRed HatDenial of service when trying to parse malformed POST requests in aiohttp7.5 HighreceptorctlRed Hatsocial-auth-app-django Improper Handling of Case Sensitivity vulnerability4.9 MediumreceptorctlRed Hataiohttp vulnerable to XSS on index pages for static file handling6.1 MediumreceptorctlRed HatHTTP Request Smuggling in benoitc/gunicorn7.5 HighreceptorctlRed HatPassing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError.7.5 HighreceptorctlRed HatRegular expression denial of service in Pydantic < 2.4.05.9 MediumreceptorctlRed HatDenial of Service via Quadratic Complexity in kjd/idna6.2 MediumreceptorctlRed HatPillow buffer overflow vulnerability6.7 Medium- Show moreLoading…