All products

Red Hat Enterprise Linux 8/python3.11

Red Hat · Package
24 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Pillow has an integer overflow when processing fontsCVE-2026-42308 · GHSA-WJX4-4JCJ-G98JVersion ranges need review. pillowExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 PyPIRed Hat Medium Fix reported
cpython: python: Memory race condition in ssl.SSLContext certificate store methodsCVE-2024-0397 Red Hat Enterprise Linux 6/pythonRed Hat Enterprise Linux 7/python3 Red Hat Low No fix reported
cpython: python: Uncontrolled CPU resource consumption when in http.cookies moduleCVE-2024-7592 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 6/python Red Hat Low No fix reported
python: cpython: URL parser allowed square brackets in domain namesCVE-2025-0938 Red Hat Enterprise Linux 6/pythonRed Hat Enterprise Linux 7/python3 Red Hat Medium No fix reported
python: Mishandling of comma during folding and unicode-encoding of email headersCVE-2025-1795 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 6/python Red Hat Low No fix reported
cpython: python: CPython DecodeError Handling VulnerabilityCVE-2025-4516 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 6/python Red Hat Medium No fix reported
cpython: Python HTMLParser quadratic complexityCVE-2025-6069 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 6/python Red Hat Medium No fix reported
cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checkedCVE-2025-8291 Red Hat Enterprise Linux 6/pythonRed Hat Enterprise Linux 7/python3 Red Hat Medium No fix reported
python: Quadratic complexity in os.path.expandvars() with user-controlled templateCVE-2025-6075 Red Hat Enterprise Linux 10/firefoxRed Hat Enterprise Linux 6/python Red Hat Low No fix reported
cpython: Out-of-memory when loading PlistCVE-2025-13837 Red Hat Enterprise Linux 10/firefoxRed Hat Enterprise Linux 6/python Red Hat Medium No fix reported
cpython: Missing character filtering in PythonCVE-2025-11468 Red Hat Enterprise Linux 10/firefoxRed Hat Enterprise Linux 10/python3.12 Red Hat Medium No fix reported
cpython: Header injection via newlines in data URL mediatype in PythonCVE-2025-15282 Red Hat Enterprise Linux 10/firefoxRed Hat Enterprise Linux 10/python3.14 Red Hat Medium No fix reported
cpython: Header injection in http.cookies.Morsel in PythonCVE-2026-0672 Red Hat Enterprise Linux 10/firefoxRed Hat Enterprise Linux 10/python3.14 Red Hat Medium No fix reported
cpython: base64.b64decode() always accepts "+/" characters, despite setting altcharsCVE-2025-12781 Red Hat Enterprise Linux 10/firefoxRed Hat Enterprise Linux 10/python3.12 Red Hat Medium No fix reported
cpython: CPython: Logging Bypass in Legacy .pyc File HandlingCVE-2026-2297 Red Hat Enterprise Linux 6/pythonRed Hat Enterprise Linux 7/python3 Red Hat Low No fix reported
cpython: Incomplete control character validation in http.cookiesCVE-2026-3644 Red Hat Enterprise Linux 6/pythonRed Hat Enterprise Linux 7/python3 Red Hat Medium No fix reported
cpython: Stack overflow parsing XML with deeply nested DTD content modelsCVE-2026-4224 Red Hat Enterprise Linux 6/pythonRed Hat Enterprise Linux 7/python3 Red Hat Medium No fix reported
python: Python pkgutil.get_data(): Path Traversal via improper resource argument validationCVE-2026-3479 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 10/python3.14 Red Hat Low No fix reported
python: Python: HTTP header injection via CR/LF in proxy tunnel headersCVE-2026-1502 Red Hat Enterprise Linux 6/pythonRed Hat Enterprise Linux 7/python3 Red Hat Medium No fix reported
python: Python: Information disclosure and arbitrary code execution via remote debugging with a malicious process.CVE-2026-5713 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 6/python Red Hat Medium No fix reported