Поиск уязвимостей

ELSA-2024-12803: Oracle Linux Automation Manager 2.2 (MODERATE)

A vulnerability was identified in the kjd/idna library, specifically within the `idna.encode()` function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This vulnerability is triggered by a crafted input that causes the `idna.encode()` function to process the input with considerable computational load, significantly increasing the processing time in a quadratic manner relative to the input size.

A vulnerability was identified in the kjd/idna library, specifically within the `idna.encode()` function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This vulnerability is triggered by a crafted input that causes the `idna.encode()` function to process the input with considerable computational load, significantly increasing the processing time in a quadratic manner relative to the input size.

A vulnerability was identified in the kjd/idna library, specifically within the `idna.encode()` function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This vulnerability is triggered by a crafted input that causes the `idna.encode()` function to process the input with considerable computational load, significantly increasing the processing time in a quadratic manner relative to the input size.

A vulnerability was identified in the kjd/idna library, specifically w ...

Security update for python-idna

Security update for python-idna

Security update for python-idna

Moderate: python-idna security update

Moderate: python-idna security update

Internationalized Domain Names in Applications (IDNA) vulnerable to denial of service from specially crafted inputs to idna.encode

ELSA-2024-8365: python-idna security update (MODERATE)

ELSA-2024-4260: python-idna security update (MODERATE)

ELSA-2024-3846: python-idna security update (MODERATE)

Уязвимость функции idna.encode() интернационализированного доменна имен в приложениях (IDNA), позволяющая нарушителю вызвать отказ в обслуживании

Уязвимость python3-idna

ALT-PU-2024-13879: package `python3-module-idna` update to version 3.7-alt1

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. QuerySet.values() and values_list() methods on models with a JSONField are subject to SQL injection in column aliases via a crafted JSON object key as a passed *arg.

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. QuerySet.values() and values_list() methods on models with a JSONField are subject to SQL injection in column aliases via a crafted JSON object key as a passed *arg.