python-tools vulnerabilities

Known vulnerabilities in the python-tools package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L Resource Exhaustion	*
M Inefficient Regular Expression Complexity	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M CVE-2024-6923	*
L Race Condition	*
L Improper Input Validation	*
L Expected Behavior Violation	*
M Use After Free	*
M XML External Entity (XXE) Injection	*
M Race Condition	*
M Uncontrolled Recursion	*
M Improper Input Validation	*
M Resource Exhaustion	*
M Directory Traversal	*
M Incorrect Type Conversion or Cast	*
M Arbitrary Code Injection	*
M Unchecked Return Value	*
M Resource Exhaustion	*
L Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Buffer Overflow	<0:2.6.6-64.el6
M Improper Input Validation	<0:2.6.6-51.el6
M Improper Input Validation	<0:2.6.6-66.el6_8
M Improper Input Validation	<0:2.6.6-66.el6_8
M Protection Mechanism Failure	<0:2.6.6-66.el6_8
M Cryptographic Issues	<0:2.6.6-29.el6_2.2
M Resource Management Errors	<0:2.6.6-29.el6_2.2
M Access Restriction Bypass	<0:2.6.6-29.el6_2.2
M Cross-site Scripting (XSS)	<0:2.6.6-29.el6_2.2
M Improper Neutralization of Special Elements	<0:2.6.6-64.el6
M Resource Exhaustion	<0:2.6.6-64.el6
M Integer Overflow or Wraparound	<0:2.6.6-64.el6
M Resource Management Errors	<0:2.6.6-20.el6
M Information Exposure	<0:2.6.6-20.el6
M Race Condition	<0:2.6.6-20.el6
M Resource Exhaustion	*
M Buffer Overflow	*
M Resource Exhaustion	*
M HTTP Request Smuggling	*
M Eval Injection	*
M Improper Input Validation	*
M HTTP Response Splitting	*
M Cross-site Scripting (XSS)	*
M Improper Input Validation	*
M Improper Input Validation	*
M HTTP Response Splitting	*
M HTTP Response Splitting	*
M Exposed Dangerous Method or Function	*
M HTTP Response Splitting	*
L Improper Input Validation	*
M Improper Input Validation	*
L Heap-based Buffer Overflow	*
H Encoding Error	<0:2.6.6-68.el6_10
M Integer Overflow or Wraparound	*
L Improper Input Validation	*
M Insufficient Verification of Data Authenticity	*
L Improper Handling of Highly Compressed Data (Data Amplification)	*
L CVE-2010-3492	*
L Out-of-Bounds	*
M Improper Initialization	*
L Integer Overflow or Wraparound	*
M Cryptographic Issues	*
M Information Exposure	*
M Out-of-Bounds	*

Vulnerability

Vulnerable Version

Resource Exhaustion