Search for packages
| purl | pkg:rpm/redhat/rh-python36-python@3.6.12-1?arch=el6 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-57c6-hx7f-efc6
Aliases: CVE-2019-18348 |
python: CRLF injection via the host part of the url passed to urlopen() | There are no reported fixed by versions. |
|
VCID-efdj-sb7s-p3fk
Aliases: CVE-2020-14422 |
Multiple vulnerabilities have been found in Python, the worst of which could result in a Denial of Service condition. | There are no reported fixed by versions. |
|
VCID-gkfp-ga1r-jkag
Aliases: CVE-2020-8492 |
A vulnerability in Python could lead to a Denial of Service condition. | There are no reported fixed by versions. |
|
VCID-gvgx-eq9r-d3d2
Aliases: CVE-2020-26116 |
Multiple vulnerabilities have been found in Python, the worst of which could result in the arbitrary execution of code. | There are no reported fixed by versions. |
|
VCID-tyk4-kazt-kydj
Aliases: CVE-2019-20907 |
Multiple vulnerabilities have been found in Python, the worst of which could result in a Denial of Service condition. | There are no reported fixed by versions. |
|
VCID-v84j-ugn9-w3c8
Aliases: CVE-2019-16935 |
python: XSS vulnerability in the documentation XML-RPC server in server_title field | There are no reported fixed by versions. |
|
VCID-vrnn-n6vw-gygb
Aliases: CVE-2019-20916 GHSA-gpvv-69j7-gwj8 PYSEC-2020-173 |
The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||