python2-pip vulnerabilities (Rocky Linux)

29 vulnerabilities.

• python2-pip Rocky Linux Jinja vulnerable to Cross-Site Scripting (XSS) CVE-2024-22195 Fix available 5.4 MediumJanuary 11, 2024
• python2-pip Rocky Linux `Cookie` HTTP header isn't stripped on cross-origin redirects CVE-2023-43804 Public exploitFix available 5.9 MediumOctober 2, 2023
• python2-pip Rocky Linux An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and... CVE-2023-40217 Fix available 5.3 MediumAugust 24, 2023
• python2-pip Rocky Linux An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no... CVE-2022-48565 Public exploitFix available 9.8 CriticalAugust 22, 2023
• python2-pip Rocky Linux A use-after-free exists in Python through 3.9 via heappushpop in heapq. CVE-2022-48560 Fix available 7.5 HighAugust 22, 2023
• python2-pip Rocky Linux Unintended leak of Proxy-Authorization header in requests CVE-2023-32681 Public exploitFix available 6.1 MediumMay 22, 2023
• python2-pip Rocky Linux An issue in the urllib.parse component of Python before v3.11 allows attackers to bypass... CVE-2023-24329 Public exploitFix available EPSS 20.5% 7.5 HighFebruary 17, 2023
• python2-pip Rocky Linux pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS) CVE-2022-40897 Fix available 5.9 MediumDecember 22, 2022
• python2-pip Rocky Linux An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one... CVE-2022-45061 Fix available 7.5 HighNovember 9, 2022
• python2-pip Rocky Linux In Python (aka CPython) through 3.10.4, the mailcap module does not add escape characters into... CVE-2015-20107 Public exploitFix available 7.6 HighApril 13, 2022
• python2-pip Rocky Linux A flaw was found in Python, specifically within the urllib.parse module. This module helps break... CVE-2022-0391 Fix available 7.5 HighFebruary 9, 2022
• python2-pip Rocky Linux A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in... CVE-2021-4189 Fix available 5.3 MediumDecember 31, 2021
• python2-pip Rocky Linux HTML Cleaner allows crafted and SVG embedded scripts to pass through CVE-2021-43818 Fix available 8.2 HighDecember 13, 2021
• python2-pip Rocky Linux Directory Traversal in Babel CVE-2021-42771 Fix available 7.8 HighOctober 20, 2021
• python2-pip Rocky Linux There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious... CVE-2021-3733 Fix available 6.5 MediumSeptember 2, 2021
• python2-pip Rocky Linux A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python... CVE-2021-3737 Fix available EPSS 13.2% 7.5 HighAugust 31, 2021
• python2-pip Rocky Linux Relative Path Traversal in Babel 2.9.0 allows an attacker to load arbitrary locale files on disk... CVE-2021-20095 Fix availableRejected 7.8 HighApril 29, 2021
• python2-pip Rocky Linux lxml vulnerable to Cross-Site Scripting CVE-2021-28957 Fix available 6.1 MediumMarch 21, 2021
• python2-pip Rocky Linux Pygments vulnerable to Regular Expression Denial of Service (ReDoS) CVE-2021-27291 Fix available 7.5 HighMarch 17, 2021
• python2-pip Rocky Linux Infinite Loop in Pygments CVE-2021-20270 Fix available 7.5 HighMarch 9, 2021
• python2-pip Rocky Linux Web Cache Poisoning CVE-2021-23336 Fix available EPSS 40.7% 5.9 MediumFebruary 15, 2021
• python2-pip Rocky Linux Regular Expression Denial of Service (ReDoS) CVE-2020-28493 Fix available 5.3 MediumFebruary 1, 2021
• python2-pip Rocky Linux Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may... CVE-2021-3177 Fix available EPSS 24.0% 9.8 CriticalJanuary 19, 2021
• python2-pip Rocky Linux lxml vulnerable to Cross-site Scripting CVE-2020-27783 Fix available 6.1 MediumNovember 26, 2020
• python2-pip Rocky Linux In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on... CVE-2020-27619 Fix available 9.8 CriticalOctober 22, 2020
• python2-pip Rocky Linux CRLF injection in urllib3 CVE-2020-26137 Fix available 6.5 MediumSeptember 29, 2020
• python2-pip Rocky Linux http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x... CVE-2020-26116 Fix available 7.2 HighSeptember 27, 2020
• python2-pip Rocky Linux Path Traversal in pip CVE-2019-20916 Fix available 7.5 HighSeptember 4, 2020
• python2-pip Rocky Linux In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to... CVE-2019-20907 Fix available 7.5 HighJuly 13, 2020