python3-core vulnerabilities (SUSE)
83 vulnerabilities.
python3-coreSUSEQuadratic complexity parsing cookies with backslashes7.5 Highpython3-coreSUSEEmail header injection due to unquoted newlines5.5 Mediumpython3-coreSUSEBuffer overread when using an empty list with SSLContext.set_npn_protocols()6.5 Mediumpython3-coreSUSEMemory race condition in ssl.SSLContext certificate store methods7.4 Highpython3-coreSUSEIncorrect IPv4 and IPv6 private ranges7.5 Highpython3-coreSUSEQuoted zip-bomb protection for zipfile6.2 Mediumpython3-coreSUSEAn issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.2,...7.8 Highpython3-coreSUSElibexpat through 2.5.0 allows a denial of service (resource consumption) because many full...7.5 Highpython3-coreSUSEAn issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and...5.3 Mediumpython3-coreSUSEAn issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time...5.9 Mediumpython3-coreSUSEThe e-mail module of Python 0 - 2.7.18, 3.x - 3.11 incorrectly parses e-mail addresses which...5.3 Mediumpython3-coreSUSEAn issue in the urllib.parse component of Python before v3.11 allows attackers to bypass...7.5 Highpython3-coreSUSEAn issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one...7.5 Highpython3-coreSUSEBuffer overflow in sponge queue functions9.8 Criticalpython3-coreSUSEA flaw was found in python. In algorithms with quadratic time complexity using non-binary bases,...7.5 Highpython3-coreSUSEPython 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no...7.4 Highpython3-coreSUSEIn Python (aka CPython) through 3.10.4, the mailcap module does not add escape characters into...7.6 Highpython3-coreSUSEThere's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious...6.5 Mediumpython3-coreSUSEA flaw was found in python. An improperly handled HTTP response in the HTTP client code of python...7.5 Highpython3-coreSUSEImproper Input Validation in pip5.7 Mediumpython3-coreSUSEThere's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to...5.7 Mediumpython3-coreSUSEWeb Cache Poisoning5.9 Mediumpython3-coreSUSEPython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...9.8 Criticalpython3-coreSUSEIn Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on...9.8 Criticalpython3-coreSUSEhttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...7.2 Highpython3-coreSUSEPath Traversal in pip7.5 Highpython3-coreSUSEIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...7.5 Highpython3-coreSUSEIncorrect Calculation and Use of Insufficiently Random Values in Python5.9 Mediumpython3-coreSUSEPython 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8...6.5 Mediumpython3-coreSUSEAn issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through...6.1 Mediumpython3-coreSUSEThe documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3...6.1 Mediumpython3-coreSUSEAn exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python...5.9 Mediumpython3-coreSUSEDirectory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile...6.8 Medium