python-urllib3 vulnerabilities (SUSE)
112 vulnerabilities.
-
python-urllib3SUSE urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory 8.9 High -
python-urllib3SUSE urllib3: Chunked Deflate streaming can enter an infinite loop 6.9 Medium -
python-urllib3SUSE urllib3: HTTPS proxy TLS configuration may be ignored or overridden 7.6 High -
python-urllib3SUSE urllib3 version 2.6.3 is vulnerable to a decompression bomb bypass in its streaming API (... 7.5 High -
python-urllib3SUSE urllib3: Sensitive headers forwarded across origins in proxied low-level redirects 8.2 High -
python-urllib3SUSE urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) 8.9 High -
python-urllib3SUSE urllib3 Streaming API improperly handles highly compressed data 8.9 High -
python-urllib3SUSE urllib3 allows an unbounded number of links in the decompression chain 8.9 High -
python-urllib3SUSE urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation 5.3 Medium -
python-urllib3SUSE Proxy-Authorization request header isn't stripped during cross-origin redirects in urllib3 4.4 Medium -
python-urllib3SUSE Request body not stripped after redirect in urllib3 4.2 Medium -
python-urllib3SUSE Authorization Header forwarded on redirect 6.1 Medium -
python-urllib3SUSE `Cookie` HTTP header isn't stripped on cross-origin redirects 5.9 Medium -
python-urllib3SUSE Parser contains an inefficient regular expression in sqlparse 5.5 Medium -
python-urllib3SUSE Catastrophic backtracking in URL authority parser when passed URL containing many @ characters 7.5 High -
python-urllib3SUSE Improper Authentication in InfluxDB 9.8 Critical -
python-urllib3SUSE Insufficiently random values in Ansible 5.5 Medium -
python-urllib3SUSE Grafana XSS via a query alias for the ElasticSearch datasource 6.1 Medium -
python-urllib3SUSE CRLF injection in urllib3 6.5 Medium -
python-urllib3SUSE http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x... 7.2 High -
python-urllib3SUSE Insertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible 5.5 Medium -
python-urllib3SUSE Improper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansible 5.0 Medium -
python-urllib3SUSE Improper Verification of Cryptographic Signature in ansible 7.1 High -
python-urllib3SUSE Flask-Cors Directory Traversal vulnerability 7.5 High -
python-urllib3SUSE OpenStack Nova Live migration fails to update persistent domain XML 8.3 High -
python-urllib3SUSE Grafana stored XSS 5.4 Medium -
python-urllib3SUSE It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in... 4.3 Medium -
python-urllib3SUSE Out-of-bounds reads in Pillow 5.5 Medium -
python-urllib3SUSE Out-of-bounds read in Pillow 8.1 High -
python-urllib3SUSE Out-of-bounds reads in Pillow 5.5 Medium -
python-urllib3SUSE Out-of-bounds read in Pillow 5.5 Medium -
python-urllib3SUSE Rack allows Percent-encoded cookies to overwrite existing prefixed cookie names 7.5 High -
python-urllib3SUSE Openstack cinder Improper handling of ScaleIO backend credentials 6.5 Medium -
python-urllib3SUSE Server Side Request Forgery in Grafana 8.2 High -
python-urllib3SUSE XSS in Django 6.1 Medium -
python-urllib3SUSE Data leakage via cache key collision in Django 5.9 Medium -
python-urllib3SUSE Grafana XSS via adding a link in General feature 6.1 Medium -
python-urllib3SUSE Grafana XSS via a column style 6.1 Medium -
python-urllib3SUSE Grafana XSS in Dashboard Text Panel 6.1 Medium -
python-urllib3SUSE Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible 5.0 Medium -
python-urllib3SUSE Exposure of Sensitive Information to an Unauthorized Actor in ansible 5.0 Medium -
python-urllib3SUSE Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible 5.0 Medium -
python-urllib3SUSE Path Traversal in Ansible 5.2 Medium -
python-urllib3SUSE Grafana version < 6.7.3 is vulnerable for annotation popup XSS. 6.1 Medium -
python-urllib3SUSE Code Injection, Race Condition, and Execution with Unnecessary Privileges in Ansible 7.9 High -
python-urllib3SUSE Argument Injection in Ansible 3.9 Low -
python-urllib3SUSE Exposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in Ansible 3.9 Low -
python-urllib3SUSE Path Traversal in Ansible 4.2 Medium -
python-urllib3SUSE Incorrect Permission Assignment for Critical Resource in Ansible 2.2 Low -
python-urllib3SUSE Insertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible 5.0 Medium - Show olderLoading…