python3-yubico vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the python3-yubico package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
H Use of Password Hash With Insufficient Computational Effort	<0:1.3.2-9.1.module+el8.9.0+1371+ffa84eb9
H Incorrect Authorization	<0:1.3.2-9.1.module+el8.9.0+1371+ffa84eb9
M Improper Input Validation	<0:1.3.2-9.1.module+el8.9.0+1371+ffa84eb9
M CVE-2024-28102	<0:1.3.2-9.1.module+el8.9.0+1371+ffa84eb9
M Resource Exhaustion	<0:1.3.2-9.1.module+el8.9.0+1371+ffa84eb9
M Cross-site Request Forgery (CSRF)	<0:1.3.2-9.1.module+el8.9.0+1371+ffa84eb9
M Incorrect Authorization	<0:1.3.2-9.1.module+el8.9.0+1371+ffa84eb9
M Cross-site Scripting (XSS)	<0:1.3.2-9.1.module+el8.7.0+1074+aae18f3a
H NULL Pointer Dereference	<0:1.3.2-9.1.module+el8.7.0+1074+aae18f3a
M Resource Exhaustion	<0:1.3.2-9.1.module+el8.7.0+1074+aae18f3a
M Cross-site Scripting (XSS)	<0:1.3.2-9.1.module+el8.7.0+1074+aae18f3a
M Cross-site Scripting (XSS)	<0:1.3.2-9.1.module+el8.7.0+1074+aae18f3a
M Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<0:1.3.2-9.1.module+el8.7.0+1074+aae18f3a
M Cross-site Scripting (XSS)	<0:1.3.2-9.1.module+el8.7.0+1074+aae18f3a
M Cross-site Scripting (XSS)	<0:1.3.2-9.1.module+el8.7.0+1074+aae18f3a
M Cross-site Scripting (XSS)	<0:1.3.2-9.1.module+el8.7.0+1074+aae18f3a
M Cross-site Scripting (XSS)	<0:1.3.2-9.1.module+el8.7.0+1074+aae18f3a
M Cross-site Scripting (XSS)	<0:1.3.2-9.1.module+el8.7.0+1074+aae18f3a
M Cross-site Scripting (XSS)	<0:1.3.2-9.1.module+el8.7.0+1074+aae18f3a
M Race Condition	<0:1.3.2-9.1.module+el8.7.0+1074+aae18f3a