python-defusedxml vulnerabilities (SUSE)
17 vulnerabilities.
-
python-defusedxmlSUSE Rollup 4 has Arbitrary File Write via Path Traversal 8.8 High -
python-defusedxmlSUSE Public Dashboards time range restriction on annotations can be bypassed 5.3 Medium -
python-defusedxmlSUSE jsonpath has Arbitrary Code Injection via Unsafe Evaluation of JSON Path Expressions 9.2 Critical -
python-defusedxmlSUSE Uncontrolled Resource Consumption in @isaacs/brace-expansion 9.2 Critical -
python-defusedxmlSUSE JSONPath vulnerable to Prototype Pollution due to insufficient input validation of object keys in lib/index.js 9.8 Critical -
python-defusedxmlSUSE Tornado is Vulnerable to Quadratic DoS via Crafted Multipart Parameters 7.5 High -
python-defusedxmlSUSE Tornado is Vulnerable to Quadratic DoS via Repeated Header Coalescing 7.5 High -
python-defusedxmlSUSE Tornado vulnerable to Header Injection and XSS via reason argument 5.4 Medium -
python-defusedxmlSUSE Salt Master authentication protocol downgrade may enable minion impersonation 7.5 High -
python-defusedxmlSUSE Salt junos module uses an unsafe YAML loader which may allow unintended code execution 7.3 High -
python-defusedxmlSUSE An open redirect vulnerability has been identified in Grafana OSS organization switching... 4.2 Medium -
python-defusedxmlSUSE Grafana is vulnerable to XSS attacks through open redirects and path traversal 7.6 High -
python-defusedxmlSUSE Grafana's insecure DingDing Alert integration exposes sensitive information 4.3 Medium -
python-defusedxmlSUSE Denial of service via malicious preflight requests in github.com/rs/cors 7.5 High -
python-defusedxmlSUSE Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal 7.7 High -
python-defusedxmlSUSE PySAML2 XML external entity attack 9.0 Critical -
python-defusedxmlSUSE Pysaml2 does not sanitize XML responses 7.5 High