python-botocore vulnerabilities (SUSE)
11 vulnerabilities.
-
python-botocoreSUSE On Node.js < 3, pbkdf2 silently disregards Uint8Array input, returning static keys 9.1 Critical -
python-botocoreSUSE pbkdf2 silently returns predictable uninitialized/zero-filled memory for non-normalized or unimplemented algos supported by Node.js 9.1 Critical -
python-botocoreSUSE juliangruber brace-expansion index.js expand redos 2.3 Low -
python-botocoreSUSE Regular Expression Denial of Service (ReDoS) in cross-spawn 8.7 High -
python-botocoreSUSE Valid ECDSA signatures erroneously rejected in Elliptic 4.8 Medium -
python-botocoreSUSE Elliptic's verify function omits uniqueness validation 9.1 Critical -
python-botocoreSUSE Catastrophic backtracking in URL authority parser when passed URL containing many @ characters 7.5 High -
python-botocoreSUSE CRLF injection in urllib3 6.5 Medium -
python-botocoreSUSE An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through... 6.1 Medium -
python-botocoreSUSE Insufficiently Protected Credentials in Requests 7.5 High -
python-botocoreSUSE Recommended update for aws-cli, python-boto3, python-botocore, python-s3transfer 5.3 Medium