TI-2023-23495 CVE-2023-43804 · GHSA-v845-jxx5-vc9f
`Cookie` HTTP header isn't stripped on cross-origin redirects
Priority LOW 38
urllib3 is a user-friendly HTTP client library for Python.
RHSA-2023:6158
Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update
Released 2023-10-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Ansible Automation Platform 2.4 for RHEL 8 automation-controller-venv-tower-4.4.7-1.el8ap, python39-urllib3-1.26.18-1.el8ap, python3x-urllib3-1.26.18-1.el8ap
- Red Hat Ansible Automation Platform 2.4 for RHEL 9 automation-controller-venv-tower-4.4.7-1.el9ap, python-urllib3-1.26.18-1.el9ap, python3-urllib3-1.26.18-1.el9ap
Fixes 2 records
TI-2023-23390 CVE-2023-43665 · GHSA-h8gc-pgj2-vjm3
In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the…
Priority LOW 36
In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the django.utils.text.Truncator chars() and words() methods (when used with html=True) are subject to a potential DoS (denial of service) attack via c…