python3.9 vulnerabilities (Root)
16 vulnerabilities.
-
python3.9Root Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations 8.7 High -
python3.9Root tarfile opened in streaming mode mishandles EOF 8.2 High -
python3.9Root Configuration Injection via Carriage Return (\r) in write() method 4.1 Medium -
python3.9Root tarfile extraction filter bypass allows escaping the destination directory 7.8 High -
python3.9Root bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow 8.2 High -
python3.9Root Potential DoS via quadratic complexity in unicodedata.normalize() 6.3 Medium -
python3.9Root FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address 5.9 Medium -
python3.9Root The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection 6.3 Medium -
python3.9Root BaseCookie.js_output() does not neutralize embedded characters 2.1 Low -
python3.9Root Base64 decoding stops at first padded quad by default 6.0 Medium -
python3.9Root HTTP client proxy tunnel headers not validated for CR/LF 5.7 Medium -
python3.9Root webbrowser.open() allows leading dashes in URLs 7.0 High -
python3.9Root pkgutil.get_data() does not enforce documented restrictions 0.0 None -
python3.9Root Python-Markdown has an Uncaught Exception 7.5 High -
python3.9Root base64.b64decode() always accepts "+/" characters, despite setting altchars 6.3 Medium -
python3.9Root Buffer overread when using an empty list with SSLContext.set_npn_protocols() 6.5 Medium