RHSA-2024:1640

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python.

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python.

An issue discovered in Axios 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing attackers to view sensiti…

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.

GitPython is a python library used to interact with Git repositories.

An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2.

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python.

A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs​.

Twisted is an event-based framework for internet applications.

Jinja is an extensible templating engine.

In Django 3.2 before 3.2.25, 4.2 before 4.2.11, and 5.0 before 5.0.3, the django.utils.text.Truncator.words() method (with html=True) and the truncatewords_html template filter are subject to a potential regular expressi…

A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body.