python-defusedxml-sle15 vulnerabilities (SUSE)
22 vulnerabilities.
-
python-defusedxml-sle15SUSE Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html 6.1 Medium -
python-defusedxml-sle15SUSE Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html 6.1 Medium -
python-defusedxml-sle15SUSE Invoking duplicate attributes can cause XSS in golang.org/x/net/html 6.1 Medium -
python-defusedxml-sle15SUSE Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html 6.1 Medium -
python-defusedxml-sle15SUSE Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html 6.5 Medium -
python-defusedxml-sle15SUSE IDOR in Annotations API allows unprivileged users to DELETE annotation 4.3 Medium -
python-defusedxml-sle15SUSE Grafana Data Source Plugin: DoS (OOM) via Negative Interval Injection in $__timeGroup Macro 6.5 Medium -
python-defusedxml-sle15SUSE Grafana plugin resources can lead to unbounded memory allocation 6.5 Medium -
python-defusedxml-sle15SUSE Auth Proxy IPv6 whitelist bypass 7.4 High -
python-defusedxml-sle15SUSE SQL Expressions Read File From Disk 6.3 Medium -
python-defusedxml-sle15SUSE BAC in Snapshot API allows deletion of unauthorized dashboard snapshots 6.5 Medium -
python-defusedxml-sle15SUSE Users can generate Service Account tokens after permissions removal 5.9 Medium -
python-defusedxml-sle15SUSE Dashboard Import Overwrites ACL — Editor Privilege Escalation to Dashboard Admin 7.1 High -
python-defusedxml-sle15SUSE Grafana Live push endpoint allows unbounded memory allocation leading to OOM 6.5 Medium -
python-defusedxml-sle15SUSE Viewer-triggered race condition in Grafana Live leads to complete server crash 6.5 Medium -
python-defusedxml-sle15SUSE Prometheus: remote read endpoint allows denial of service via crafted snappy payload 7.5 High -
python-defusedxml-sle15SUSE Prometheus Azure AD remote write OAuth client secret exposed via config API 7.5 High -
python-defusedxml-sle15SUSE Apache Thrift: Go TFramedTransport uint32 overflow 7.5 High -
python-defusedxml-sle15SUSE Prometheus: Stored XSS via metric names and label values in web UI tooltips and metrics explorer 5.3 Medium -
python-defusedxml-sle15SUSE Go JOSE affect by a panic in JWE decryption 7.5 High -
python-defusedxml-sle15SUSE Uncontrolled Resource Consumption in promhttp 7.5 High -
python-defusedxml-sle15SUSE Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna 9.6 Critical