scipy vulnerabilities (Red Hat)
85 vulnerabilities.
scipyRed HatRelative Path Traversal in Babel 2.9.0 allows an attacker to load arbitrary locale files on disk...7.8 HighscipyRed HatThere's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to...5.7 MediumscipyRed Hatlxml vulnerable to Cross-Site Scripting6.1 MediumscipyRed HatPygments vulnerable to Regular Expression Denial of Service (ReDoS)7.5 HighscipyRed HatInfinite Loop in Pygments7.5 HighscipyRed HatWeb Cache Poisoning5.9 MediumscipyRed HatImproper Input Validation in PyYAML9.8 CriticalscipyRed HatRegular Expression Denial of Service (ReDoS)5.3 MediumscipyRed HatPython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...9.8 CriticalscipyRed Hatlxml vulnerable to Cross-site Scripting6.1 MediumscipyRed HatIn Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on...9.8 CriticalscipyRed HatCRLF injection in urllib36.5 MediumscipyRed Hathttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...7.2 HighscipyRed HatPath Traversal in pip7.5 HighscipyRed HatIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...7.5 HighscipyRed HatIncorrect Calculation and Use of Insufficiently Random Values in Python5.9 MediumscipyRed HatImproper Input Validation in PyYAML9.8 CriticalscipyRed HatDeserialization of Untrusted Data in PyYAML9.8 CriticalscipyRed HatPython 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8...6.5 MediumscipyRed HatDouble Free in psutil7.5 HighscipyRed HatThe documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3...6.1 MediumscipyRed HatAn issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7...7.5 HighscipyRed Hathttp.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3...5.3 MediumscipyRed HatImproper Certificate Validation in urllib37.5 HighscipyRed HatImproper Neutralization of CRLF Sequences in urllib3 library for Python6.1 MediumscipyRed Haturllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for...9.1 CriticalscipyRed HatAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 MediumscipyRed HatAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 MediumscipyRed HatPython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...9.8 CriticalscipyRed HatSQLAlchemy vulnerable to SQL Injection via order_by parameter9.8 CriticalscipyRed HatSQLAlchemy is vulnerable to SQL Injection via group_by parameter7.8 HighscipyRed HatNumpy Deserialization of Untrusted Data9.8 CriticalscipyRed HatExposure of Sensitive Information to an Unauthorized Actor in urllib39.8 CriticalscipyRed HatInsufficiently Protected Credentials in Requests7.5 HighscipyRed HatDirectory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile...6.8 Medium