oci-cli vulnerabilities (openSUSE)
17 vulnerabilities.
-
oci-cliopenSUSE Vulnerability in the Oracle OCI CLI product of Oracle Open Source Projects. The supported... 6.1 Medium -
oci-cliopenSUSE cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves 8.2 High -
oci-cliopenSUSE urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) 8.9 High -
oci-cliopenSUSE urllib3 allows an unbounded number of links in the decompression chain 8.9 High -
oci-cliopenSUSE urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation 5.3 Medium -
oci-cliopenSUSE Requests vulnerable to .netrc credentials leak via malicious URLs 5.3 Medium -
oci-cliopenSUSE setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write 7.7 High -
oci-cliopenSUSE Jinja has a sandbox breakout through indirect reference to format method 5.4 Medium -
oci-cliopenSUSE Jinja has a sandbox breakout through malicious filenames 5.4 Medium -
oci-cliopenSUSE virtualenv allows command injection through activation scripts for a virtual environment 7.8 High -
oci-cliopenSUSE Certifi removes GLOBALTRUST root certificate 7.5 High -
oci-cliopenSUSE Proxy-Authorization request header isn't stripped during cross-origin redirects in urllib3 4.4 Medium -
oci-cliopenSUSE Unintended leak of Proxy-Authorization header in requests 6.1 Medium -
oci-cliopenSUSE X.400 address type confusion in X.509 GeneralName 7.4 High -
oci-cliopenSUSE Improper Input Validation in PyYAML 9.8 Critical -
oci-cliopenSUSE py vulnerable to Regular Expression Denial of Service 7.5 High -
oci-cliopenSUSE PyYAML insecurely deserializes YAML strings leading to arbitrary code execution 9.8 Critical