Security
فارسی
All products

Red Hat Enterprise Linux 9/python3.9

Red Hat · Package
28 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Pillow has an integer overflow when processing fontsCVE-2026-42308 · GHSA-WJX4-4JCJ-G98JVersion ranges need review. pillowExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 PyPIRed Hat Medium Fix reported
python: python: Arbitrary file write via tarfile extraction filter bypassCVE-2026-114583 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 10/python3.14 Red Hat Medium No fix reported
python: Distrust compromised eMudhra intermediate certificates in Python ssl moduleCVE-2026-115557 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 10/python3.14 Red Hat Medium No fix reported
python: python: Misinterpretation of HTTP responses via invalid chunk parsingCVE-2026-103995 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 10/python3.14 Red Hat Medium No fix reported
python: python: Security bypass via null byte truncation in socket.getaddrinfo()CVE-2026-116566 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 10/python3.14 Red Hat Medium No fix reported
python: Mishandling of comma during folding and unicode-encoding of email headersCVE-2025-1795 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 6/python Red Hat Low No fix reported
cpython: python: CPython DecodeError Handling VulnerabilityCVE-2025-4516 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 6/python Red Hat Medium No fix reported
cpython: Out-of-memory when loading PlistCVE-2025-13837 Red Hat Enterprise Linux 10/firefoxRed Hat Enterprise Linux 6/python Red Hat Medium No fix reported
cpython: Missing character filtering in PythonCVE-2025-11468 Red Hat Enterprise Linux 10/firefoxRed Hat Enterprise Linux 10/python3.12 Red Hat Medium No fix reported
cpython: Header injection via newlines in data URL mediatype in PythonCVE-2025-15282 Red Hat Enterprise Linux 10/firefoxRed Hat Enterprise Linux 10/python3.14 Red Hat Medium No fix reported
cpython: Header injection in http.cookies.Morsel in PythonCVE-2026-0672 Red Hat Enterprise Linux 10/firefoxRed Hat Enterprise Linux 10/python3.14 Red Hat Medium No fix reported
cpython: base64.b64decode() always accepts "+/" characters, despite setting altcharsCVE-2025-12781 Red Hat Enterprise Linux 10/firefoxRed Hat Enterprise Linux 10/python3.12 Red Hat Medium No fix reported
cpython: CPython: Logging Bypass in Legacy .pyc File HandlingCVE-2026-2297 Red Hat Enterprise Linux 6/pythonRed Hat Enterprise Linux 7/python3 Red Hat Low No fix reported
cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issuesCVE-2025-13462 Exploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9Red Hat Enterprise Linux 10/python3.12 Red Hat Low No fix reported
cpython: Incomplete control character validation in http.cookiesCVE-2026-3644 Red Hat Enterprise Linux 6/pythonRed Hat Enterprise Linux 7/python3 Red Hat Medium No fix reported
cpython: Stack overflow parsing XML with deeply nested DTD content modelsCVE-2026-4224 Red Hat Enterprise Linux 6/pythonRed Hat Enterprise Linux 7/python3 Red Hat Medium No fix reported
python: Python pkgutil.get_data(): Path Traversal via improper resource argument validationCVE-2026-3479 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 10/python3.14 Red Hat Low No fix reported
python: Python: HTTP header injection via CR/LF in proxy tunnel headersCVE-2026-1502 Red Hat Enterprise Linux 6/pythonRed Hat Enterprise Linux 7/python3 Red Hat Medium No fix reported
python: Python: Information disclosure and arbitrary code execution via remote debugging with a malicious process.CVE-2026-5713 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 6/python Red Hat Medium No fix reported
python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies moduleCVE-2026-6019 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 6/python Red Hat Medium No fix reported