rh-python38-python-cryptography vulnerabilities (Red Hat)

25 vulnerabilities.

• rh-python38-python-cryptography Red Hat An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and... CVE-2023-40217 Fix available 5.3 MediumAugust 24, 2023
• rh-python38-python-cryptography Red Hat Unintended leak of Proxy-Authorization header in requests CVE-2023-32681 Public exploitFix available 6.1 MediumMay 22, 2023
• rh-python38-python-cryptography Red Hat An issue in the urllib.parse component of Python before v3.11 allows attackers to bypass... CVE-2023-24329 Public exploitFix available EPSS 20.5% 7.5 HighFebruary 17, 2023
• rh-python38-python-cryptography Red Hat Cipher.update_into can corrupt memory in pyca cryptography CVE-2023-23931 Fix available 4.8 MediumFebruary 7, 2023
• rh-python38-python-cryptography Red Hat pypa/wheel vulnerable to Regular Expression denial of service (ReDoS) CVE-2022-40898 Fix available 7.5 HighDecember 22, 2022
• rh-python38-python-cryptography Red Hat pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS) CVE-2022-40897 Fix available 5.9 MediumDecember 22, 2022
• rh-python38-python-cryptography Red Hat An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one... CVE-2022-45061 Fix available 7.5 HighNovember 9, 2022
• rh-python38-python-cryptography Red Hat A flaw was found in Python, specifically within the urllib.parse module. This module helps break... CVE-2022-0391 Fix available 7.5 HighFebruary 9, 2022
• rh-python38-python-cryptography Red Hat A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in... CVE-2021-4189 Fix available 5.3 MediumDecember 31, 2021
• rh-python38-python-cryptography Red Hat Directory Traversal in Babel CVE-2021-42771 Fix available 7.8 HighOctober 20, 2021
• rh-python38-python-cryptography Red Hat There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious... CVE-2021-3733 Fix available 6.5 MediumSeptember 2, 2021
• rh-python38-python-cryptography Red Hat Improper Input Validation in pip CVE-2021-3572 Public exploitFix available 5.7 MediumJuly 13, 2021
• rh-python38-python-cryptography Red Hat Catastrophic backtracking in URL authority parser when passed URL containing many @ characters CVE-2021-33503 Fix available 7.5 HighJune 1, 2021
• rh-python38-python-cryptography Red Hat Improper input validation of octal strings in Python stdlib ipaddress 3.10 and below allows... CVE-2021-29921 Fix available 9.8 CriticalMay 6, 2021
• rh-python38-python-cryptography Red Hat Relative Path Traversal in Babel 2.9.0 allows an attacker to load arbitrary locale files on disk... CVE-2021-20095 Fix availableRejected 7.8 HighApril 29, 2021
• rh-python38-python-cryptography Red Hat There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to... CVE-2021-3426 Fix available 5.7 MediumApril 5, 2021
• rh-python38-python-cryptography Red Hat lxml vulnerable to Cross-Site Scripting CVE-2021-28957 Fix available 6.1 MediumMarch 21, 2021
• rh-python38-python-cryptography Red Hat Web Cache Poisoning CVE-2021-23336 Fix available EPSS 40.7% 5.9 MediumFebruary 15, 2021
• rh-python38-python-cryptography Red Hat PyCA Cryptography symmetrically encrypting large values can lead to integer overflow CVE-2020-36242 Fix available 9.1 CriticalFebruary 7, 2021
• rh-python38-python-cryptography Red Hat Regular Expression Denial of Service (ReDoS) CVE-2020-28493 Fix available 5.3 MediumFebruary 1, 2021
• rh-python38-python-cryptography Red Hat Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may... CVE-2021-3177 Fix available EPSS 24.0% 9.8 CriticalJanuary 19, 2021
• rh-python38-python-cryptography Red Hat lxml vulnerable to Cross-site Scripting CVE-2020-27783 Fix available 6.1 MediumNovember 26, 2020
• rh-python38-python-cryptography Red Hat RSA decryption vulnerable to Bleichenbacher timing vulnerability CVE-2020-25659 Fix available 5.9 MediumOctober 27, 2020
• rh-python38-python-cryptography Red Hat In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on... CVE-2020-27619 Fix available 9.8 CriticalOctober 22, 2020
• rh-python38-python-cryptography Red Hat Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile... CVE-2007-4559 Public exploitFix available EPSS 27.1% 6.8 MediumAugust 28, 2007