Cython vulnerabilities (Rocky Linux)
78 vulnerabilities.
CythonRocky LinuxRegular Expression Denial of Service (ReDoS)5.3 MediumCythonRocky LinuxPython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...9.8 CriticalCythonRocky Linuxlxml vulnerable to Cross-site Scripting6.1 MediumCythonRocky LinuxIn Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on...9.8 CriticalCythonRocky LinuxCRLF injection in urllib36.5 MediumCythonRocky Linuxhttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...7.2 HighCythonRocky LinuxPath Traversal in pip7.5 HighCythonRocky LinuxIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...7.5 HighCythonRocky LinuxIncorrect Calculation and Use of Insufficiently Random Values in Python5.9 MediumCythonRocky LinuxImproper Input Validation in PyYAML9.8 CriticalCythonRocky LinuxDeserialization of Untrusted Data in PyYAML9.8 CriticalCythonRocky LinuxPython 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8...6.5 MediumCythonRocky LinuxDouble Free in psutil7.5 HighCythonRocky LinuxThe documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3...6.1 MediumCythonRocky LinuxAn issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7...7.5 HighCythonRocky Linuxhttp.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3...5.3 MediumCythonRocky LinuxImproper Certificate Validation in urllib37.5 HighCythonRocky LinuxImproper Neutralization of CRLF Sequences in urllib3 library for Python6.1 MediumCythonRocky Linuxurllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for...9.1 CriticalCythonRocky LinuxAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 MediumCythonRocky LinuxAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 MediumCythonRocky LinuxPython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...9.8 CriticalCythonRocky LinuxSQLAlchemy vulnerable to SQL Injection via order_by parameter9.8 CriticalCythonRocky LinuxSQLAlchemy is vulnerable to SQL Injection via group_by parameter7.8 HighCythonRocky LinuxNumpy Deserialization of Untrusted Data9.8 CriticalCythonRocky LinuxExposure of Sensitive Information to an Unauthorized Actor in urllib39.8 CriticalCythonRocky LinuxInsufficiently Protected Credentials in Requests7.5 HighCythonRocky LinuxDirectory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile...6.8 Medium