python-pluggy vulnerabilities (SUSE)
7 vulnerabilities.
-
python-pluggySUSE On Node.js < 3, pbkdf2 silently disregards Uint8Array input, returning static keys 9.1 Critical -
python-pluggySUSE pbkdf2 silently returns predictable uninitialized/zero-filled memory for non-normalized or unimplemented algos supported by Node.js 9.1 Critical -
python-pluggySUSE juliangruber brace-expansion index.js expand redos 2.3 Low -
python-pluggySUSE Regular Expression Denial of Service (ReDoS) in cross-spawn 8.7 High -
python-pluggySUSE Valid ECDSA signatures erroneously rejected in Elliptic 4.8 Medium -
python-pluggySUSE Elliptic's verify function omits uniqueness validation 9.1 Critical -
python-pluggySUSE Catastrophic backtracking in URL authority parser when passed URL containing many @ characters 7.5 High