python-boto3 vulnerabilities (SUSE)
11 vulnerabilities.
-
python-boto3SUSE On Node.js < 3, pbkdf2 silently disregards Uint8Array input, returning static keys 9.1 Critical -
python-boto3SUSE pbkdf2 silently returns predictable uninitialized/zero-filled memory for non-normalized or unimplemented algos supported by Node.js 9.1 Critical -
python-boto3SUSE juliangruber brace-expansion index.js expand redos 2.3 Low -
python-boto3SUSE Regular Expression Denial of Service (ReDoS) in cross-spawn 8.7 High -
python-boto3SUSE Valid ECDSA signatures erroneously rejected in Elliptic 4.8 Medium -
python-boto3SUSE Elliptic's verify function omits uniqueness validation 9.1 Critical -
python-boto3SUSE Catastrophic backtracking in URL authority parser when passed URL containing many @ characters 7.5 High -
python-boto3SUSE CRLF injection in urllib3 6.5 Medium -
python-boto3SUSE An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through... 6.1 Medium -
python-boto3SUSE Insufficiently Protected Credentials in Requests 7.5 High -
python-boto3SUSE Recommended update for aws-cli, python-boto3, python-botocore, python-s3transfer 5.3 Medium