python-Flask vulnerabilities (SUSE)
26 vulnerabilities.
-
python-FlaskSUSE Flask session does not add `Vary: Cookie` header when accessed in some ways 2.3 Low -
python-FlaskSUSE Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header 7.5 High -
python-FlaskSUSE It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in... 4.3 Medium -
python-FlaskSUSE Server Side Request Forgery in Grafana 8.2 High -
python-FlaskSUSE XSS in Django 6.1 Medium -
python-FlaskSUSE Data leakage via cache key collision in Django 5.9 Medium -
python-FlaskSUSE HTTP Smuggling via Transfer-Encoding Header in Puma 6.8 Medium -
python-FlaskSUSE HTTP Smuggling via Transfer-Encoding Header in Puma 7.5 High -
python-FlaskSUSE Information disclosure issue in Active Resource 7.5 High -
python-FlaskSUSE Grafana version < 6.7.3 is vulnerable for annotation popup XSS. 6.1 Medium -
python-FlaskSUSE Unsafe object creation in json RubyGem 7.5 High -
python-FlaskSUSE Improper Verification of Cryptographic Signature in PySAML2 7.5 High -
python-FlaskSUSE Uncontrolled Resource Consumption in Pillow 7.5 High -
python-FlaskSUSE PCX P mode buffer overflow in Pillow 9.8 Critical -
python-FlaskSUSE Out-of-bounds Read in Pillow 7.1 High -
python-FlaskSUSE HTTP Request Smuggling in Waitress: Invalid whitespace characters in headers 7.1 High -
python-FlaskSUSE HTTP Request Smuggling: Content-Length Sent Twice in Waitress 7.1 High -
python-FlaskSUSE HTTP Request Smuggling: LF vs CRLF handling in Waitress 7.1 High -
python-FlaskSUSE HTTP Request Smuggling: Invalid Transfer-Encoding in Waitress 7.1 High -
python-FlaskSUSE Double Free in psutil 7.5 High -
python-FlaskSUSE DOS attack in Pillow when processing specially crafted image files 7.5 High -
python-FlaskSUSE In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This... 7.5 High -
python-FlaskSUSE Pallets Project Flask is vulnerable to Denial of Service via Unexpected memory usage 7.5 High -
python-FlaskSUSE Ansible Path Traversal vulnerability 4.2 Medium -
python-FlaskSUSE Flask is vulnerable to Denial of Service via incorrect encoding of JSON data 7.5 High -
python-FlaskSUSE Pysaml2 improperly initializes encryption vector 5.3 Medium