python311-core vulnerabilities (SUSE)
75 vulnerabilities.
python311-coreSUSEUse-after-free in "unicode_escape" decoder with error handler5.9 Mediumpython311-coreSUSEMishandling of comma during folding and unicode-encoding of email headers2.3 Lowpython311-coreSUSEURL parser allowed square brackets in domain names6.3 Mediumpython311-coreSUSEVirtual environment (venv) activation scripts don't quote paths5.3 Mediumpython311-coreSUSERegular-expression DoS when parsing TarFile headers7.5 Highpython311-coreSUSEInfinite loop when iterating over zip archive entry names from zipfile.Path8.7 Highpython311-coreSUSEQuadratic complexity parsing cookies with backslashes7.5 Highpython311-coreSUSEEmail header injection due to unquoted newlines5.5 Mediumpython311-coreSUSEMemory race condition in ssl.SSLContext certificate store methods7.4 Highpython311-coreSUSEIncorrect IPv4 and IPv6 private ranges7.5 Highpython311-coreSUSEtempfile.mkdtemp() may be readable and writeable by all users on Windows7.1 Highpython311-coreSUSEQuoted zip-bomb protection for zipfile6.2 Mediumpython311-coreSUSEAn issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.2,...7.8 Highpython311-coreSUSElibexpat through 2.5.0 allows a denial of service (resource consumption) because many full...7.5 Highpython311-coreSUSEAn issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and...5.3 Mediumpython311-coreSUSEAn issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed...7.5 Highpython311-coreSUSEThe e-mail module of Python 0 - 2.7.18, 3.x - 3.11 incorrectly parses e-mail addresses which...5.3 Mediumpython311-coreSUSEAn issue in the urllib.parse component of Python before v3.11 allows attackers to bypass...7.5 Highpython311-coreSUSExmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator...9.8 Criticalpython311-coreSUSEA flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in...5.3 Mediumpython311-coreSUSEIn Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing...9.8 Criticalpython311-coreSUSEIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...7.5 Highpython311-coreSUSEIn Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on...7.8 Highpython311-coreSUSEAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumpython311-coreSUSEDirectory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile...6.8 Medium