python-lxml vulnerabilities (SUSE)
19 vulnerabilities.
-
python-lxmlSUSE lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files 7.5 High -
python-lxmlSUSE NULL Pointer Dereference in lxml/lxml 5.3 Medium -
python-lxmlSUSE sinatra does not validate expanded path matches 7.5 High -
python-lxmlSUSE openstack-barbican Denial of Service vulnerability 4.9 Medium -
python-lxmlSUSE Barbican authorization flaw before v14.0.0 8.1 High -
python-lxmlSUSE Arbitrary expression injection in Pillow 9.8 Critical -
python-lxmlSUSE Out-of-bounds Read in Pillow 6.5 Medium -
python-lxmlSUSE Improper Initialization in Pillow 6.5 Medium -
python-lxmlSUSE golang.org/x/net/http2 allows uncontrolled memory consumption 7.5 High -
python-lxmlSUSE HTML Cleaner allows crafted and SVG embedded scripts to pass through 8.2 High -
python-lxmlSUSE Directory Traversal in Grafana 4.3 Medium -
python-lxmlSUSE XSS in the `of` option of the `.position()` util 6.5 Medium -
python-lxmlSUSE XSS in `*Text` options of the Datepicker widget 6.5 Medium -
python-lxmlSUSE XSS in the `altField` option of the Datepicker widget 6.5 Medium -
python-lxmlSUSE OpenStack Neutron vulnerable to authenticated attackers reconfiguring dnsmasq via crafted extra_dhcp_opts value 6.5 Medium -
python-lxmlSUSE OpenStack Keystone allows information disclosure during account locking 7.5 High -
python-lxmlSUSE lxml vulnerable to Cross-Site Scripting 6.1 Medium -
python-lxmlSUSE lxml vulnerable to Cross-site Scripting 6.1 Medium -
python-lxmlSUSE Improper Neutralization of Input During Web Page Generation in LXML 6.1 Medium