RHSA-2021:4151 — Red Hat Security Advisory: python27:2.7 security update

Fixed packages 120

Release	Package	Fixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream	babel	0:2.5.1-10.module+el8.5.0+11014+88fc0d0b
Red Hat · RHEL 8 enterprise_linux:8::appstream	Cython	0:0.28.1-7.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	Cython-debugsource	0:0.28.1-7.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	numpy	1:1.14.2-16.module+el8.4.0+9406+221a4565
Red Hat · RHEL 8 enterprise_linux:8::appstream	numpy-debugsource	1:1.14.2-16.module+el8.4.0+9406+221a4565
Red Hat · RHEL 8 enterprise_linux:8::appstream	pytest	0:3.4.2-13.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-attrs	0:17.4.0-10.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-backports	0:1.0-16.module+el8.4.0+9193+f3daf6ef
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-backports-ssl_match_hostname	0:3.5.0.1-12.module+el8.4.0+9193+f3daf6ef
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-chardet	0:3.0.4-10.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-coverage	0:4.5.1-4.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-coverage-debugsource	0:4.5.1-4.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-dns	0:1.15.0-10.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-docs	0:2.7.16-2.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-docutils	0:0.14-12.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-funcsigs	0:1.0.2-13.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-idna	0:2.5-7.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-ipaddress	0:1.0.18-6.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-jinja2	0:2.10-9.module+el8.5.0+10541+706bb066
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-lxml	0:4.2.3-5.module+el8.5.0+10534+22332931
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-lxml-debugsource	0:4.2.3-5.module+el8.5.0+10534+22332931
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-markupsafe	0:0.23-19.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-mock	0:2.0.0-13.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-nose	0:1.3.7-31.module+el8.5.0+12203+77770ab7
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-nose-docs	0:1.3.7-31.module+el8.5.0+12203+77770ab7
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-pluggy	0:0.6.0-8.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-psycopg2	0:2.7.5-7.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-psycopg2-debuginfo	0:2.7.5-7.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-psycopg2-debugsource	0:2.7.5-7.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-psycopg2-doc	0:2.7.5-7.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-py	0:1.5.3-6.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-pygments	0:2.2.0-22.module+el8.5.0+10788+a4cea9e0
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-pymongo	0:3.7.0-1.module+el8.5.0+10264+e5753a40
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-pymongo-debuginfo	0:3.7.0-1.module+el8.5.0+10264+e5753a40
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-pymongo-debugsource	0:3.7.0-1.module+el8.5.0+10264+e5753a40
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-PyMySQL	0:0.8.0-10.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-pysocks	0:1.6.8-6.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-pytest-mock	0:1.9.0-4.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-requests	0:2.20.0-3.module+el8.2.0+4577+feefd9b8
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-setuptools_scm	0:1.15.7-6.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-sqlalchemy	0:1.3.2-2.module+el8.3.0+6647+8d010749
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-sqlalchemy-doc	0:1.3.2-2.module+el8.3.0+6647+8d010749
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-urllib3	0:1.24.2-3.module+el8.4.0+9193+f3daf6ef
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-virtualenv	0:15.1.0-21.module+el8.5.0+12203+77770ab7
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-wheel	1:0.31.1-3.module+el8.5.0+12203+77770ab7
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2	0:2.7.18-7.module+el8.5.0+12203+77770ab7
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-attrs	0:17.4.0-10.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-babel	0:2.5.1-10.module+el8.5.0+11014+88fc0d0b
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-backports	0:1.0-16.module+el8.4.0+9193+f3daf6ef
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-backports-ssl_match_hostname	0:3.5.0.1-12.module+el8.4.0+9193+f3daf6ef
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-bson	0:3.7.0-1.module+el8.5.0+10264+e5753a40
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-bson-debuginfo	0:3.7.0-1.module+el8.5.0+10264+e5753a40
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-chardet	0:3.0.4-10.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-coverage	0:4.5.1-4.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-coverage-debuginfo	0:4.5.1-4.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-Cython	0:0.28.1-7.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-Cython-debuginfo	0:0.28.1-7.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-debug	0:2.7.18-7.module+el8.5.0+12203+77770ab7
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-debuginfo	0:2.7.18-7.module+el8.5.0+12203+77770ab7
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-debugsource	0:2.7.18-7.module+el8.5.0+12203+77770ab7
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-devel	0:2.7.18-7.module+el8.5.0+12203+77770ab7
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-dns	0:1.15.0-10.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-docs	0:2.7.16-2.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-docs-info	0:2.7.16-2.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-docutils	0:0.14-12.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-funcsigs	0:1.0.2-13.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-idna	0:2.5-7.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-ipaddress	0:1.0.18-6.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-jinja2	0:2.10-9.module+el8.5.0+10541+706bb066
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-libs	0:2.7.18-7.module+el8.5.0+12203+77770ab7
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-lxml	0:4.2.3-5.module+el8.5.0+10534+22332931
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-lxml-debuginfo	0:4.2.3-5.module+el8.5.0+10534+22332931
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-markupsafe	0:0.23-19.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-mock	0:2.0.0-13.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-nose	0:1.3.7-31.module+el8.5.0+12203+77770ab7
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-numpy	1:1.14.2-16.module+el8.4.0+9406+221a4565
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-numpy-debuginfo	1:1.14.2-16.module+el8.4.0+9406+221a4565
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-numpy-doc	1:1.14.2-16.module+el8.4.0+9406+221a4565
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-numpy-f2py	1:1.14.2-16.module+el8.4.0+9406+221a4565
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-pip	0:9.0.3-18.module+el8.3.0+7707+eb4bba01
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-pip-wheel	0:9.0.3-18.module+el8.3.0+7707+eb4bba01
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-pluggy	0:0.6.0-8.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-psycopg2	0:2.7.5-7.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-psycopg2-debug	0:2.7.5-7.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-psycopg2-debug-debuginfo	0:2.7.5-7.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-psycopg2-debuginfo	0:2.7.5-7.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-psycopg2-tests	0:2.7.5-7.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-py	0:1.5.3-6.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-pygments	0:2.2.0-22.module+el8.5.0+10788+a4cea9e0
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-pymongo	0:3.7.0-1.module+el8.5.0+10264+e5753a40
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-pymongo-debuginfo	0:3.7.0-1.module+el8.5.0+10264+e5753a40
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-pymongo-gridfs	0:3.7.0-1.module+el8.5.0+10264+e5753a40
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-PyMySQL	0:0.8.0-10.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-pysocks	0:1.6.8-6.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-pytest	0:3.4.2-13.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-pytest-mock	0:1.9.0-4.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-pytz	0:2017.2-12.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-pyyaml	0:3.12-16.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-pyyaml-debuginfo	0:3.12-16.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-requests	0:2.20.0-3.module+el8.2.0+4577+feefd9b8
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-rpm-macros	0:3-38.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-scipy	0:1.0.0-21.module+el8.5.0+10858+05337455
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-scipy-debuginfo	0:1.0.0-21.module+el8.5.0+10858+05337455
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-setuptools	0:39.0.1-13.module+el8.4.0+9442+27d0e81c
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-setuptools_scm	0:1.15.7-6.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-setuptools-wheel	0:39.0.1-13.module+el8.4.0+9442+27d0e81c
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-six	0:1.11.0-6.module+el8.4.0+9287+299307c7
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-sqlalchemy	0:1.3.2-2.module+el8.3.0+6647+8d010749
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-test	0:2.7.18-7.module+el8.5.0+12203+77770ab7
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-tkinter	0:2.7.18-7.module+el8.5.0+12203+77770ab7
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-tools	0:2.7.18-7.module+el8.5.0+12203+77770ab7
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-urllib3	0:1.24.2-3.module+el8.4.0+9193+f3daf6ef
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-virtualenv	0:15.1.0-21.module+el8.5.0+12203+77770ab7
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-wheel	1:0.31.1-3.module+el8.5.0+12203+77770ab7
Red Hat · RHEL 8 enterprise_linux:8::appstream	python2-wheel-wheel	1:0.31.1-3.module+el8.5.0+12203+77770ab7
Red Hat · RHEL 8 enterprise_linux:8::appstream	pytz	0:2017.2-12.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	PyYAML	0:3.12-16.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	PyYAML-debugsource	0:3.12-16.module+el8.1.0+3111+de3f2d8e
Red Hat · RHEL 8 enterprise_linux:8::appstream	scipy	0:1.0.0-21.module+el8.5.0+10858+05337455
Red Hat · RHEL 8 enterprise_linux:8::appstream	scipy-debugsource	0:1.0.0-21.module+el8.5.0+10858+05337455

Vulnerabilities 8

High 7.8

CVE-2021-42771

Directory Traversal in Babel

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading to code execution.

babel babel py3-babel python-babel Debian Azure Linux Alpine PyPI

Oct 20, 2021
High 7.5

CVE-2021-20270

Infinite Loop in Pygments

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.

mediawiki pygments pygments pygments Debian Ubuntu Azure Linux Alpine PyPI

Mar 23, 2021
High 7.5

CVE-2021-27291

Pygments vulnerable to Regular Expression Denial of Service (ReDoS)

In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an …

mediawiki pygments pygments pygments Debian Ubuntu Azure Linux Alpine PyPI

Mar 17, 2021
Medium 6.1

CVE-2021-28957

lxml vulnerable to Cross-Site Scripting

An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. When disabling the safe_attrs_only and forms arguments, the Cleaner class does not remove the formaction attribute allowing for JS to bypass the sanitizer. A remote attac…

lxml lxml python-lxml lxml Debian Ubuntu Azure Linux Alpine PyPI

Mar 21, 2021
Medium 5.9

CVE-2021-23336 EPSS 41%

Web Cache Poisoning

The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before 3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a vector called par…

python-django python-django python3.4 python3.5 Debian Ubuntu Azure Linux Alpine

Feb 15, 2021
Medium 5.3

CVE-2020-28493

Regular Expression Denial of Service (ReDoS)

This affects the package jinja2 from 0.0.0 and before 2.11.3. The ReDoS vulnerability is mainly due to the `_punctuation_re regex` operator and its use of multiple wildcards. The last wildcard is the most exploitable as it searches for trailing punctuation. T…

nodejs nodejs24 jinja2 jinja2 Debian Ubuntu Azure Linux Alpine PyPI

Feb 1, 2021
Unscored —

CVE-2020-27619

In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via …

python3.4 python3.5 python3.6 python3.8 Debian Ubuntu

Oct 22, 2020
Unscored —

CVE-2021-20095 Rejected

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

python-babel Ubuntu

Apr 29, 2021

References

article
https://access.redhat.com/security/updates/classification/#moderate
article
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/
report
https://bugzilla.redhat.com/show_bug.cgi?id=1889886
report
https://bugzilla.redhat.com/show_bug.cgi?id=1922136
report
https://bugzilla.redhat.com/show_bug.cgi?id=1928707
report
https://bugzilla.redhat.com/show_bug.cgi?id=1928904
report
https://bugzilla.redhat.com/show_bug.cgi?id=1940603
report
https://bugzilla.redhat.com/show_bug.cgi?id=1941534
report
https://bugzilla.redhat.com/show_bug.cgi?id=1945483
report
https://bugzilla.redhat.com/show_bug.cgi?id=1955615
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4151.json
report
https://access.redhat.com/security/cve/CVE-2020-27619
advisory
https://www.cve.org/CVERecord?id=CVE-2020-27619
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-27619
report
https://access.redhat.com/security/cve/CVE-2020-28493
advisory
https://www.cve.org/CVERecord?id=CVE-2020-28493
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-28493
report
https://access.redhat.com/security/cve/CVE-2021-20095
advisory
https://www.cve.org/CVERecord?id=CVE-2021-20095
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-20095
article
https://www.tenable.com/security/research/tra-2021-14
report
https://access.redhat.com/security/cve/CVE-2021-20270
advisory
https://www.cve.org/CVERecord?id=CVE-2021-20270
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-20270
report
https://access.redhat.com/security/cve/CVE-2021-23336
advisory
https://www.cve.org/CVERecord?id=CVE-2021-23336
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-23336
article
https://snyk.io/vuln/SNYK-UPSTREAM-PYTHONCPYTHON-1074933
report
https://access.redhat.com/security/cve/CVE-2021-27291
advisory
https://www.cve.org/CVERecord?id=CVE-2021-27291
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-27291
report
https://access.redhat.com/security/cve/CVE-2021-28957
advisory
https://www.cve.org/CVERecord?id=CVE-2021-28957
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-28957
report
https://access.redhat.com/security/cve/CVE-2021-42771
advisory
https://www.cve.org/CVERecord?id=CVE-2021-42771
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-42771

Red Hat Security Advisory: python27:2.7 security update

Fixed packages 120

Vulnerabilities 8

Directory Traversal in Babel

Infinite Loop in Pygments

Pygments vulnerable to Regular Expression Denial of Service (ReDoS)

lxml vulnerable to Cross-Site Scripting

Web Cache Poisoning

Regular Expression Denial of Service (ReDoS)

In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via …

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

References