python311 vulnerabilities (SUSE)
75 vulnerabilities.
python311SUSEUse-after-free in "unicode_escape" decoder with error handler5.9 Mediumpython311SUSEMishandling of comma during folding and unicode-encoding of email headers2.3 Lowpython311SUSEURL parser allowed square brackets in domain names6.3 Mediumpython311SUSEVirtual environment (venv) activation scripts don't quote paths5.3 Mediumpython311SUSERegular-expression DoS when parsing TarFile headers7.5 Highpython311SUSEInfinite loop when iterating over zip archive entry names from zipfile.Path8.7 Highpython311SUSEQuadratic complexity parsing cookies with backslashes7.5 Highpython311SUSEEmail header injection due to unquoted newlines5.5 Mediumpython311SUSEMemory race condition in ssl.SSLContext certificate store methods7.4 Highpython311SUSEIncorrect IPv4 and IPv6 private ranges7.5 Highpython311SUSEtempfile.mkdtemp() may be readable and writeable by all users on Windows7.1 Highpython311SUSEQuoted zip-bomb protection for zipfile6.2 Mediumpython311SUSEAn issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.2,...7.8 Highpython311SUSElibexpat through 2.5.0 allows a denial of service (resource consumption) because many full...7.5 Highpython311SUSEAn issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and...5.3 Mediumpython311SUSEAn issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed...7.5 Highpython311SUSEThe e-mail module of Python 0 - 2.7.18, 3.x - 3.11 incorrectly parses e-mail addresses which...5.3 Mediumpython311SUSEAn issue in the urllib.parse component of Python before v3.11 allows attackers to bypass...7.5 Highpython311SUSExmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator...9.8 Criticalpython311SUSEA flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in...5.3 Mediumpython311SUSEIn Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing...9.8 Criticalpython311SUSEIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...7.5 Highpython311SUSEIn Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on...7.8 Highpython311SUSEAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumpython311SUSEDirectory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile...6.8 Medium