Skip to content
OpenAdvisories

Package · Debian

python-rply

3 known vulnerabilities.

3 results · Feed

  • Medium 6.1

    RPly through 1.1.4 Out-of-Bounds Function Pointer Index via PLY Header

    RPly through 1.1.4 contains an improper array index validation vulnerability in ply_read_header_property() that accepts list as a list property's length or value type. Attackers can supply a crafted PLY file that makes ply_read_list_property() call an out-of-…

  • Medium 5.5

    Link Following in rply

    python-rply before 0.7.4 insecurely creates temporary files.

  • Low —

    RPLY Predictable Tmpfile Names Allows Cache Spoofing

    The parser cache functionality in parsergenerator.py in RPLY (aka python-rply) before 0.7.1 allows local users to spoof cache data by pre-creating a temporary rply-*.json file with a predictable name.