Security
فارسی
All products

Red Hat Enterprise Linux 7/python

Red Hat · Package
66 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
XML External Entity (XXE) in DjangoCVE-2013-1665 · GHSA-X64M-686F-FMM3Version ranges need review. djangoRed Hat Enterprise Linux 5/python PyPIRed Hat Medium Fix reported
XML Entity Expansion (XEE) in DjangoCVE-2013-1664 · GHSA-QRH7-X6FP-C2MPVersion ranges need review. djangoRed Hat Enterprise Linux 5/python PyPIRed Hat Medium Fix reported
Pillow has an integer overflow when processing fontsCVE-2026-42308 · GHSA-WJX4-4JCJ-G98JVersion ranges need review. pillowExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 PyPIRed Hat Medium Fix reported
python: python: Arbitrary file write via tarfile extraction filter bypassCVE-2026-114583 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 10/python3.14 Red Hat Medium No fix reported
python: Distrust compromised eMudhra intermediate certificates in Python ssl moduleCVE-2026-115557 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 10/python3.14 Red Hat Medium No fix reported
python: python: Misinterpretation of HTTP responses via invalid chunk parsingCVE-2026-103995 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 10/python3.14 Red Hat Medium No fix reported
python: python: Security bypass via null byte truncation in socket.getaddrinfo()CVE-2026-116566 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 10/python3.14 Red Hat Medium No fix reported
python: tarfile module directory traversalCVE-2007-4559 Red Hat Enterprise Linux 6/pythonRed Hat Enterprise Linux 7/python3 Red Hat Medium No fix reported
python: hash secret can be recovered remotelyCVE-2013-7040 Red Hat Enterprise Linux 5/pythonRed Hat Enterprise Linux 6/python Red Hat Medium No fix reported
python: Integer overflow in PyString_DecodeEscape results in heap-base buffer overflowCVE-2017-1000158 Red Hat Enterprise Linux 5/pythonRed Hat Enterprise Linux 6/python Red Hat Medium No fix reported
python: Heap-Buffer-Overflow and Heap-Use-After-Free in Objects/fileobject.cCVE-2018-1000030 Red Hat Enterprise Linux 5/pythonRed Hat Enterprise Linux 6/python Red Hat Low No fix reported
python: Nested zip file (Zip bomb) vulnerability in Lib/zipfile.pyCVE-2019-9674 Red Hat Enterprise Linux 5/pythonRed Hat Enterprise Linux 6/python Red Hat Low No fix reported
python: CRLF injection via the host part of the url passed to urlopen()CVE-2019-18348 Red Hat Enterprise Linux 5/pythonRed Hat Enterprise Linux 6/python Red Hat Medium No fix reported
python: wrong backtracking in urllib.request.AbstractBasicAuthHandler allows for a ReDoSCVE-2020-8492 Red Hat Enterprise Linux 5/pythonRed Hat Enterprise Linux 6/python Red Hat Medium No fix reported
python: Unsafe use of eval() on data retrieved via HTTP in the test suiteCVE-2020-27619 Red Hat Enterprise Linux 5/pythonRed Hat Enterprise Linux 6/python Red Hat Medium No fix reported
python: Web cache poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in query parametersCVE-2021-23336 Red Hat Ceph Storage 2/python-djangoRed Hat Ceph Storage 3/python-django Red Hat Medium No fix reported
python: urllib.parse does not sanitize URLs containing ASCII newline and tabsCVE-2022-0391 Red Hat Enterprise Linux 6/pythonRed Hat Enterprise Linux 7/python3 Red Hat Medium No fix reported
python: urllib: HTTP client possible infinite loop on a 100 Continue responseCVE-2021-3737 Red Hat Enterprise Linux 6/pythonRed Hat Enterprise Linux 7/python3 Red Hat Low No fix reported
python: urllib: Regular expression DoS in AbstractBasicAuthHandlerCVE-2021-3733 Red Hat Enterprise Linux 6/pythonRed Hat Enterprise Linux 7/python3 Red Hat Medium No fix reported
python: ftplib should not use the host from the PASV responseCVE-2021-4189 Red Hat Enterprise Linux 6/pythonRed Hat Enterprise Linux 7/python3 Red Hat Medium No fix reported