pytest vulnerabilities (Rocky Linux)
74 vulnerabilities.
pytestRocky LinuxRegular Expression Denial of Service (ReDoS)5.3 MediumpytestRocky LinuxPython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...9.8 CriticalpytestRocky Linuxlxml vulnerable to Cross-site Scripting6.1 MediumpytestRocky LinuxIn Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on...9.8 CriticalpytestRocky LinuxCRLF injection in urllib36.5 MediumpytestRocky Linuxhttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...7.2 HighpytestRocky LinuxPath Traversal in pip7.5 HighpytestRocky LinuxIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...7.5 HighpytestRocky LinuxDouble Free in psutil7.5 HighpytestRocky LinuxThe documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3...6.1 MediumpytestRocky LinuxAn issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7...7.5 HighpytestRocky Linuxhttp.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3...5.3 MediumpytestRocky LinuxImproper Certificate Validation in urllib37.5 HighpytestRocky LinuxImproper Neutralization of CRLF Sequences in urllib3 library for Python6.1 MediumpytestRocky Linuxurllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for...9.1 CriticalpytestRocky LinuxAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 MediumpytestRocky LinuxAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 MediumpytestRocky LinuxPython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...9.8 CriticalpytestRocky LinuxSQLAlchemy vulnerable to SQL Injection via order_by parameter9.8 CriticalpytestRocky LinuxSQLAlchemy is vulnerable to SQL Injection via group_by parameter7.8 HighpytestRocky LinuxNumpy Deserialization of Untrusted Data9.8 CriticalpytestRocky LinuxExposure of Sensitive Information to an Unauthorized Actor in urllib39.8 CriticalpytestRocky LinuxInsufficiently Protected Credentials in Requests7.5 HighpytestRocky LinuxDirectory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile...6.8 Medium