TI-2024-07037 CVE-2024-7592 · GHSA-7pwv-g7hj-39pr
Quadratic complexity parsing cookies with backslashes
Priority HIGH 72
There is a LOW severity vulnerability affecting CPython, specifically the 'http.cookies' standard library module.
RHSA-2025:3634
python3.11 security update
Released 2025-04-07 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 9) python3.11-3.11.9-7.el9_5.3, python3.11-debug-3.11.9-7.el9_5.3, python3.11-idle-3.11.9-7.el9_5.3 +2
- Red Hat Enterprise Linux AppStream (v. 9) python3.11-3.11.9-7.el9_5.3, python3.11-devel-3.11.9-7.el9_5.3, python3.11-libs-3.11.9-7.el9_5.3 +1