TI-2024-07037 CVE-2024-7592 · GHSA-7pwv-g7hj-39pr
Quadratic complexity parsing cookies with backslashes
Priority HIGH 72
There is a LOW severity vulnerability affecting CPython, specifically the 'http.cookies' standard library module.
RHSA-2025:3631
python3.12 security update
Released 2025-04-07 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 9) python3.12-3.12.5-2.el9_5.3, python3.12-debug-3.12.5-2.el9_5.3, python3.12-idle-3.12.5-2.el9_5.3 +2
- Red Hat Enterprise Linux AppStream (v. 9) python3.12-3.12.5-2.el9_5.3, python3.12-devel-3.12.5-2.el9_5.3, python3.12-libs-3.12.5-2.el9_5.3 +1