Python vulnerabilities, page 2
275 vulnerabilities
Known vulnerabilities in Python products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 32 products.
CVE-2013-7440debianpython2.7+10
EPSS score1.88%
The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.CVE-2021-42576debiangolang-github-microcosm-cc-bluemonday+5EPSS score1.56%
The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python (in pybluemonday), does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.CVE-2021-4189debianpypy3+12EPSS score3.41%
A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The issue is how the FTP client trusts the host from the PASV response by default. This flaw allows an attacker to set up a malicious FTP server that can trick FTP clients into connecting back to a given IP address and port. This vulnerability could lead to FTP client scanning ports, which otherwise would not have been possible.CVE-2021-25291alpinepy3-pillow+5EPSS score1.40%
An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is an out-of-bounds read in TiffreadRGBATile via invalid tile boundaries.CVE-2021-25290alpinepy3-pillow+6EPSS score2.37%
An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offset memcpy with an invalid size.CVE-2021-25292alpinepy3-pillow+5EPSS score1.64%
An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expression DoS (ReDoS) attack via a crafted PDF file because of a catastrophic backtracking regex.CVE-2021-25287alpinepy3-pillow+6EPSS score2.93%
An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDecode, in j2ku_graya_la.CVE-2021-25289alpinepy3-pillow+5EPSS score2.34%
An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. NOTE: this issue exists because of an incomplete fix for CVE-2020-35654.CVE-2021-25288alpinepy3-pillow+6EPSS score2.39%
An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDecode, in j2ku_gray_i.CVE-2021-25293alpinepy3-pillow+5EPSS score1.60%
An issue was discovered in Pillow before 8.1.1. There is an out-of-bounds read in SGIRleDecode.c.CVE-2021-29921alpinepython3+15EPSS score6.88%
In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This (in some situations) allows attackers to bypass access control that is based on IP addresses.CVE-2021-27921alpinepy3-pillow+6EPSS score3.17%
Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for a BLP container, and thus an attempted memory allocation can be very large.CVE-2021-27923alpinepy3-pillow+6EPSS score3.04%
Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICO container, and thus an attempted memory allocation can be very large.CVE-2021-27922alpinepy3-pillow+6EPSS score4.85%
Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICNS container, and thus an attempted memory allocation can be very large.CVE-2021-28363alpinepy3-urllib3+7EPSS score2.17%
The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies. The initial connection to the HTTPS proxy (if an SSLContext isn't given via proxy_config) doesn't verify the hostname of the certificate. This means certificates for different servers that still validate properly with the default urllib3 SSLContext will be silently accepted.CVE-2021-28678alpinepy3-pillow+6EPSS score0.73%
An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads (after jumping to file offsets) returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data.CVE-2021-28861debianpypy3+167EPSS score2.71%
Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at the beginning of URI path which may leads to information disclosure. NOTE: this is disputed by a third party because the http.server.html documentation page states "Warning: http.server is not recommended for production. It only implements basic security checks."CVE-2021-28676alpinepy3-pillow+6EPSS score2.50%
An issue was discovered in Pillow before 8.2.0. For FLI data, FliDecode did not properly check that the block advance was non-zero, potentially leading to an infinite loop on load.CVE-2021-28675alpinepy3-pillow+6EPSS score0.96%
An issue was discovered in Pillow before 8.2.0. PSDImagePlugin.PsdImageFile lacked a sanity check on the number of input layers relative to the size of the data block. This could lead to a DoS on Image.open prior to Image.load.CVE-2021-28677alpinepy3-pillow+6EPSS score2.34%
An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation used in EPSImageFile has to deal with any combination of \r and \n as line endings. It used an accidentally quadratic method of accumulating lines while looking for a line ending. A malicious EPS file could use this to perform a DoS of Pillow in the open phase, before an image was accepted for opening.