python3.11 vulnerabilities (Root)
17 vulnerabilities.
-
python3.11Root Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations 8.7 High -
python3.11Root Tarfile.extract() doesn't fully respect filter parameter 2.0 Low -
python3.11Root tarfile opened in streaming mode mishandles EOF 8.2 High -
python3.11Root Configuration Injection via Carriage Return (\r) in write() method 4.1 Medium -
python3.11Root tarfile extraction filter bypass allows escaping the destination directory 7.8 High -
python3.11Root bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow 8.2 High -
python3.11Root tarfile.data_filter path traversal bypass allows writing outside the extraction directory 6.9 Medium -
python3.11Root The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection 6.3 Medium -
python3.11Root Base64 decoding stops at first padded quad by default 6.0 Medium -
python3.11Root pkgutil.get_data() does not enforce documented restrictions 0.0 None -
python3.11Root Incomplete control character validation in http.cookies 6.0 Medium -
python3.11Root Python-Markdown has an Uncaught Exception 7.5 High -
python3.11Root base64.b64decode() always accepts "+/" characters, despite setting altchars 6.3 Medium -
python3.11Root POP3 command injection in user-controlled commands 5.9 Medium -
python3.11Root IMAP command injection in user-controlled commands 5.9 Medium -
python3.11Root Tarfile infinite loop during parsing with negative member offset 7.5 High -
python3.11Root Python 3.9.x and 3.10.x through 3.10.8 on Linux allows local privilege escalation in a non... 7.8 High