python3-qrcode

Direct Vulnerabilities

Known vulnerabilities in the python3-qrcode package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
C Incorrect Privilege Assignment	<0:5.3-1.module+el8.10.0+91065+f06407c0
C Missing Authentication for Critical Function	<0:5.3-1.module+el8.10.0+91065+f06407c0
C Allocation of Resources Without Limits or Throttling	<0:5.3-1.module+el8.10.0+91065+f06407c0
C Cross-site Scripting (XSS)	<0:5.3-1.module+el8.10.0+91065+f06407c0
C Use of Incorrectly-Resolved Name or Reference	<0:5.3-1.module+el8.10.0+91065+f06407c0
C Eval Injection	<0:5.3-1.module+el8.10.0+91065+f06407c0
C Incorrect Authorization	<0:5.3-1.module+el8.10.0+91065+f06407c0
C Allocation of Resources Without Limits or Throttling	<0:5.3-1.module+el8.10.0+91065+f06407c0
H Server-Side Request Forgery (SSRF)	<0:5.3-1.module+el8.10.0+90703+a2faa53f
H Allocation of Resources Without Limits or Throttling	<0:5.3-1.module+el8.10.0+90703+a2faa53f
H Insufficient Granularity of Access Control	<0:5.3-1.module+el8.10.0+90676+16d53ab4
H Insufficient Granularity of Access Control	<0:5.3-1.module+el8.10.0+90621+268b66c9
H Use of Password Hash With Insufficient Computational Effort	<0:5.1-12.module+el8.9.0+90094+20819f5a
H Incorrect Authorization	<0:5.1-12.module+el8.9.0+90094+20819f5a
M CVE-2024-28102	<0:5.1-12.module+el8.9.0+90094+20819f5a
M Resource Exhaustion	<0:5.1-12.module+el8.9.0+90095+d672673c
M Improper Input Validation	<0:5.1-12.module+el8.9.0+90094+20819f5a
M Cross-site Request Forgery (CSRF)	<0:5.1-12.module+el8.9.0+90094+20819f5a
M Incorrect Authorization	<0:5.1-12.module+el8.9.0+90094+20819f5a
M Race Condition	<0:5.1-12.module+el8.3.0+7868+2151076c
H NULL Pointer Dereference	<0:5.1-12.module+el8.3.0+7868+2151076c
M Cross-site Scripting (XSS)	<0:5.1-12.module+el8.3.0+7868+2151076c
M Cross-site Scripting (XSS)	<0:5.1-12.module+el8.3.0+7868+2151076c
M Cross-site Scripting (XSS)	<0:5.1-12.module+el8.3.0+7868+2151076c
M Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<0:5.1-12.module+el8.3.0+7868+2151076c
M Cross-site Scripting (XSS)	<0:5.1-12.module+el8.3.0+7868+2151076c
M Cross-site Scripting (XSS)	<0:5.1-12.module+el8.3.0+7868+2151076c
M Cross-site Scripting (XSS)	<0:5.1-12.module+el8.3.0+7868+2151076c
M Cross-site Scripting (XSS)	<0:5.1-12.module+el8.3.0+7868+2151076c
M Cross-site Scripting (XSS)	<0:5.1-12.module+el8.3.0+7868+2151076c
M Cross-site Scripting (XSS)	<0:5.1-12.module+el8.3.0+7868+2151076c
M Resource Exhaustion	<0:5.1-12.module+el8.3.0+7868+2151076c

Vulnerability

Vulnerable Version

Incorrect Privilege Assignment

<0:5.3-1.module+el8.10.0+91065+f06407c0