python-pytest-html vulnerabilities (openSUSE)
11 vulnerabilities.
-
python-pytest-htmlopenSUSE Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM 7.5 High -
python-pytest-htmlopenSUSE Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats) 7.5 High -
python-pytest-htmlopenSUSE brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups 7.7 High -
python-pytest-htmlopenSUSE shell-quote parse() is quadratic in token count, enabling denial of service 8.7 High -
python-pytest-htmlopenSUSE js-yaml: Quadratic-complexity DoS in merge key handling via repeated aliases 5.3 Medium -
python-pytest-htmlopenSUSE shell-quote `quote()` does not validate object-token shapes, allowing command injection via line terminators in `.op` 9.2 Critical -
python-pytest-htmlopenSUSE pbkdf2 silently returns predictable uninitialized/zero-filled memory for non-normalized or unimplemented algos supported by Node.js 9.1 Critical -
python-pytest-htmlopenSUSE juliangruber brace-expansion index.js expand redos 2.3 Low -
python-pytest-htmlopenSUSE Regular Expression Denial of Service (ReDoS) in cross-spawn 8.7 High -
python-pytest-htmlopenSUSE Valid ECDSA signatures erroneously rejected in Elliptic 4.8 Medium -
python-pytest-htmlopenSUSE Elliptic's verify function omits uniqueness validation 9.1 Critical