| Potential DoS with NumberFilter conversion to integer values.CVE-2020-15225 · GHSA-X7GM-RFGV-W973Version ranges need review. |
django-filterRed Hat Ansible Automation Platform 1.2/python-django-filter |
PyPIRed Hat |
High
|
Fix reported |
|
| SQLAlchemy vulnerable to SQL Injection via order_by parameterCVE-2019-7164 · GHSA-887W-45RQ-VXGFVersion ranges need review. |
sqlalchemyRed Hat Ceph Storage 2/calamari-server |
PyPIRed Hat |
Critical
|
Fix reported |
|
| Improper Certificate Validation in TwistedCVE-2019-12855 · GHSA-65RM-H285-5CC5Version ranges need review. |
twistedRed Hat Ceph Storage 2/calamari-server |
PyPIRed Hat |
Critical
|
Fix reported |
|
| Improper Input Validation in TwistedCVE-2020-10108 · GHSA-H96W-MMRF-2H6VVersion ranges need review. |
twistedRed Hat Ceph Storage 2/calamari-server |
PyPIRed Hat |
Critical
|
Fix reported |
|
| HTTP Request Smuggling in TwistedCVE-2020-10109 · GHSA-P5XH-VX83-MXCJVersion ranges need review. |
twistedRed Hat Ceph Storage 2/calamari-server |
PyPIRed Hat |
Critical
|
Fix reported |
|
| Twisted CRLF InjectionCVE-2019-12387 · GHSA-6CC5-2VG4-CC7MVersion ranges need review. |
twistedRed Hat Ceph Storage 2/calamari-server |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Potential bypass of an upstream access control based on URL paths in DjangoCVE-2021-44420 · GHSA-V6RH-HP5X-86RVVersion ranges need review. |
djangoRed Hat Ansible Automation Platform 1.2/python-django |
PyPIRed Hat |
Medium
|
Fix reported |
|
| SQLAlchemy is vulnerable to SQL Injection via group_by parameter CVE-2019-7548 · GHSA-38FC-9XQV-7F7QVersion ranges need review. |
sqlalchemyRed Hat Ceph Storage 2/calamari-server |
PyPIRed Hat |
Critical
|
Fix reported |
|
| Denial-of-service in DjangoCVE-2021-45115 · GHSA-53QW-Q765-4FWWVersion ranges need review. |
djangoRed Hat Ansible Automation Platform 1.2/python-django |
PyPIRed Hat |
High
|
Fix reported |
|
| Directory Traversal in DjangoCVE-2021-28658 · GHSA-XGXC-V2QG-CHMHVersion ranges need review. |
djangoRed Hat Ansible Automation Platform 1.2/django |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks CVE-2021-33571 · GHSA-P99V-5W3C-JQQ9Version ranges need review. |
djangoRed Hat Ansible Automation Platform 1.2/django |
PyPIRed Hat |
High
|
Fix reported |
|
| Cross-site Scripting in DjangoCVE-2022-22818 · GHSA-95RW-FX8R-36V6Version ranges need review. |
djangoRed Hat Ansible Automation Platform 1.2/python-django |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Infinite Loop in DjangoCVE-2022-23833 · GHSA-6CW3-G6WV-C2XVVersion ranges need review. |
djangoRed Hat Ansible Automation Platform 1.2/python-django |
PyPIRed Hat |
High
|
Fix reported |
|
| Path Traversal in DjangoCVE-2021-33203 · GHSA-68W8-QJQ3-2GFMVersion ranges need review. |
djangoRed Hat Ansible Automation Platform 1.2/django |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Path Traversal in DjangoCVE-2021-31542 · GHSA-RXJP-MFM9-W4WRVersion ranges need review. |
djangoRed Hat Ansible Automation Platform 1.2/django |
PyPIRed Hat |
High
|
Fix reported |
|
| Header injection possible in DjangoCVE-2021-32052 · GHSA-QM57-VHQ3-3FWFVersion ranges need review. |
djangoRed Hat Ansible Automation Platform 1.2/python-django |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Django Potential account hijack via password reset formCVE-2019-19844 · GHSA-VFQ6-HQ5R-27R6Version ranges need review. |
djangoRed Hat Ceph Storage 2/calamari-server |
PyPIRed Hat |
Critical
|
Fix reported |
|
| Cross-site Scripting (XSS) in Django REST FrameworkCVE-2020-25626 · GHSA-FX83-3PH3-9J2QVersion ranges need review. |
djangorestframeworkRed Hat Ceph Storage 2/calamari-server |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Information disclosure in DjangoCVE-2021-45116 · GHSA-8C5J-9R9F-C6W8Version ranges need review. |
djangoRed Hat Ansible Automation Platform 1.2/python-django |
PyPIRed Hat |
High
|
Fix reported |
|
| Directory-traversal in DjangoCVE-2021-45452 · GHSA-JRH2-HC4R-7JWXVersion ranges need review. |
djangoRed Hat Ansible Automation Platform 1.2/python-django |
PyPIRed Hat |
Medium
|
Fix reported |
|
