TI-2022-24108 CVE-2022-48565 · GHSA-crhm-wc96-7579
An XML External Entity (XXE) issue was discovered in Python through 3.9.1.
Priority HIGH 82
An XML External Entity (XXE) issue was discovered in Python through 3.9.1.
RHSA-2024:2987
python27:2.7 security update
Released 2024-05-22 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) Cython-0.28.1-7.module+el8.9.0+19487+7dc18407.src::python27:2.7, PyYAML-3.12-16.module+el8.9.0+19487+7dc18407.src::python27:2.7, babel-2.5.1-10.module+el8.9.0+19487+7dc18407.noarch::python27:2.7 +47
Fixes 5 records
TI-2023-23495 CVE-2023-43804 · GHSA-v845-jxx5-vc9f
`Cookie` HTTP header isn't stripped on cross-origin redirects
Priority LOW 38
urllib3 is a user-friendly HTTP client library for Python.
TI-2022-24106 CVE-2022-48560 · GHSA-pvw5-cvp6-cv92
A use-after-free exists in Python through 3.9 via heappushpop in heapq.
Priority LOW 37
A use-after-free exists in Python through 3.9 via heappushpop in heapq.
TI-2022-19471 CVE-2022-40897 · GHSA-r9hx-vwmv-q579
Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to…
Priority LOW 31
Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page.
TI-2024-14788 CVE-2024-22195 · GHSA-h5c8-rqwp-cp95
Jinja vulnerable to Cross-Site Scripting (XSS)
Priority LOW 29
Jinja is an extensible templating engine.