PyYAML vulnerabilities (Rocky Linux)
80 vulnerabilities.
PyYAMLRocky LinuxWeb Cache Poisoning5.9 MediumPyYAMLRocky LinuxImproper Input Validation in PyYAML9.8 CriticalPyYAMLRocky LinuxRegular Expression Denial of Service (ReDoS)5.3 MediumPyYAMLRocky LinuxPython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...9.8 CriticalPyYAMLRocky Linuxlxml vulnerable to Cross-site Scripting6.1 MediumPyYAMLRocky LinuxIn Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on...9.8 CriticalPyYAMLRocky LinuxCRLF injection in urllib36.5 MediumPyYAMLRocky Linuxhttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...7.2 HighPyYAMLRocky LinuxPath Traversal in pip7.5 HighPyYAMLRocky LinuxIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...7.5 HighPyYAMLRocky LinuxIncorrect Calculation and Use of Insufficiently Random Values in Python5.9 MediumPyYAMLRocky LinuxImproper Input Validation in PyYAML9.8 CriticalPyYAMLRocky LinuxDeserialization of Untrusted Data in PyYAML9.8 CriticalPyYAMLRocky LinuxPython 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8...6.5 MediumPyYAMLRocky LinuxDouble Free in psutil7.5 HighPyYAMLRocky LinuxThe documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3...6.1 MediumPyYAMLRocky LinuxAn issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7...7.5 HighPyYAMLRocky Linuxhttp.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3...5.3 MediumPyYAMLRocky LinuxImproper Certificate Validation in urllib37.5 HighPyYAMLRocky LinuxImproper Neutralization of CRLF Sequences in urllib3 library for Python6.1 MediumPyYAMLRocky Linuxurllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for...9.1 CriticalPyYAMLRocky LinuxAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 MediumPyYAMLRocky LinuxAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 MediumPyYAMLRocky LinuxPython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...9.8 CriticalPyYAMLRocky LinuxSQLAlchemy vulnerable to SQL Injection via order_by parameter9.8 CriticalPyYAMLRocky LinuxSQLAlchemy is vulnerable to SQL Injection via group_by parameter7.8 HighPyYAMLRocky LinuxNumpy Deserialization of Untrusted Data9.8 CriticalPyYAMLRocky LinuxExposure of Sensitive Information to an Unauthorized Actor in urllib39.8 CriticalPyYAMLRocky LinuxInsufficiently Protected Credentials in Requests7.5 HighPyYAMLRocky LinuxDirectory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile...6.8 Medium