rootio-python3 vulnerabilities (Root)
10 vulnerabilities.
-
rootio-python3Root Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations 8.7 High -
rootio-python3Root tarfile opened in streaming mode mishandles EOF 8.2 High -
rootio-python3Root tarfile extraction filter bypass allows escaping the destination directory 7.8 High -
rootio-python3Root bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow 8.2 High -
rootio-python3Root The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection 6.3 Medium -
rootio-python3Root Out-of-bounds write in Windows asyncio.ProacterEventLoop.sock_recvfrom_into() when using nbytes 8.8 High -
rootio-python3Root Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open() 7.0 High -
rootio-python3Root Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure 9.1 Critical -
rootio-python3Root Stack overflow parsing XML with deeply nested DTD content models 6.0 Medium -
rootio-python3Root Incomplete control character validation in http.cookies 6.0 Medium