Search for packages
| purl | pkg:rpm/redhat/rh-python38-python-cryptography@2.8-5?arch=el7 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.4 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-33sg-whge-jkdw
Aliases: CVE-2021-3572 GHSA-5xp3-jfq3-5q8x PYSEC-2021-437 |
silent downgrade | There are no reported fixed by versions. |
|
VCID-3hek-9yg6-wff1
Aliases: CVE-2022-0391 |
There are no reported fixed by versions. | |
|
VCID-3wbe-pfau-9uhb
Aliases: CVE-2021-23336 |
multiple issues | There are no reported fixed by versions. |
|
VCID-4yhp-yntd-jugg
Aliases: CVE-2020-25659 GHSA-hggm-jpg3-v476 PYSEC-2021-62 |
python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext. | There are no reported fixed by versions. |
|
VCID-5jcj-gssa-3bfb
Aliases: CVE-2021-42771 GHSA-h4m5-qpfp-3mpv PYSEC-2021-421 |
Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading to code execution. | There are no reported fixed by versions. |
|
VCID-7qgw-6a6c-uug2
Aliases: CVE-2021-4189 |
There are no reported fixed by versions. | |
|
VCID-9bm8-y84q-k7ee
Aliases: CVE-2021-3426 |
information disclosure | There are no reported fixed by versions. |
|
VCID-e8ue-4up6-1qbr
Aliases: CVE-2020-28493 GHSA-g3rq-g295-4j3m PYSEC-2021-66 SNYK-PYTHON-JINJA2-1012994 |
denial of service | There are no reported fixed by versions. |
|
VCID-ecjs-cgct-4yh2
Aliases: CVE-2020-36242 GHSA-rhm9-p9w5-fwm7 PYSEC-2021-63 |
incorrect calculation | There are no reported fixed by versions. |
|
VCID-f9wn-v6su-xbbh
Aliases: CVE-2020-27619 |
There are no reported fixed by versions. | |
|
VCID-hqya-8m8q-8kbg
Aliases: CVE-2021-33503 GHSA-q2q7-5pp4-w6pg PYSEC-2021-108 |
denial of service | There are no reported fixed by versions. |
|
VCID-kmj5-s5fm-6bbp
Aliases: CVE-2021-3733 |
There are no reported fixed by versions. | |
|
VCID-nxjr-jqsz-cqa2
Aliases: CVE-2021-28957 GHSA-jq4v-f5q6-mjqq PYSEC-2021-19 |
insufficient validation | There are no reported fixed by versions. |
|
VCID-qsxd-57f4-mqhm
Aliases: CVE-2021-3177 |
multiple issues | There are no reported fixed by versions. |
|
VCID-ssrp-quf4-6ugm
Aliases: CVE-2021-20095 |
arbitrary code execution | There are no reported fixed by versions. |
|
VCID-tt4b-pqru-zuee
Aliases: CVE-2021-29921 |
insufficient validation | There are no reported fixed by versions. |
|
VCID-udxg-cq9p-z7cf
Aliases: CVE-2020-27783 GHSA-pgww-xf46-h92r PYSEC-2020-62 |
cross-site scripting | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||