Search for packages
| purl | pkg:deb/debian/pypy3@7.3.11%2Bdfsg-2%2Bdeb12u2 |
| Tags | Ghost |
| Next non-vulnerable version | 7.3.19+dfsg-2 |
| Latest non-vulnerable version | 7.3.19+dfsg-2 |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-ve93-p9d1-aaak
Aliases: CVE-2020-29651 GHSA-hj5v-574p-mj7c PYSEC-2020-92 |
A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality. |
Affected by 2 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-zx7c-pz97-aaar
Aliases: CVE-2023-27043 |
The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is granted only after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be used for signup). This occurs in email/_parseaddr.py in recent versions of Python. |
Affected by 2 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||