Поиск уязвимостей
Количество 6
Количество 6
CVE-2019-19274
typed_ast 1.3.0 and 1.3.1 has a handle_keywordonly_args out-of-bounds read. An attacker with the ability to cause a Python interpreter to parse Python source (but not necessarily execute it) may be able to crash the interpreter process. This could be a concern, for example, in a web-based service that parses (but does not execute) Python code. (This issue also affected certain Python 3.8.0-alpha prereleases.)
CVE-2019-19274
typed_ast 1.3.0 and 1.3.1 has a handle_keywordonly_args out-of-bounds read. An attacker with the ability to cause a Python interpreter to parse Python source (but not necessarily execute it) may be able to crash the interpreter process. This could be a concern, for example, in a web-based service that parses (but does not execute) Python code. (This issue also affected certain Python 3.8.0-alpha prereleases.)
CVE-2019-19274
typed_ast 1.3.0 and 1.3.1 has a handle_keywordonly_args out-of-bounds ...
GHSA-m3jw-62m7-jjcm
typed-ast Out-of-bounds Read
openSUSE-SU-2020:0567-1
Security update for python-typed-ast
ALT-PU-2019-4221
ALT-PU-2019-4221: package `python3-module-typed_ast` update to version 1.4.0-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2019-19274 typed_ast 1.3.0 and 1.3.1 has a handle_keywordonly_args out-of-bounds read. An attacker with the ability to cause a Python interpreter to parse Python source (but not necessarily execute it) may be able to crash the interpreter process. This could be a concern, for example, in a web-based service that parses (but does not execute) Python code. (This issue also affected certain Python 3.8.0-alpha prereleases.) | CVSS3: 7.5 | 3% Низкий | почти 7 лет назад | |
CVE-2019-19274 typed_ast 1.3.0 and 1.3.1 has a handle_keywordonly_args out-of-bounds read. An attacker with the ability to cause a Python interpreter to parse Python source (but not necessarily execute it) may be able to crash the interpreter process. This could be a concern, for example, in a web-based service that parses (but does not execute) Python code. (This issue also affected certain Python 3.8.0-alpha prereleases.) | CVSS3: 7.5 | 3% Низкий | почти 7 лет назад | |
CVE-2019-19274 typed_ast 1.3.0 and 1.3.1 has a handle_keywordonly_args out-of-bounds ... | CVSS3: 7.5 | 3% Низкий | почти 7 лет назад | |
GHSA-m3jw-62m7-jjcm typed-ast Out-of-bounds Read | CVSS3: 7.5 | 3% Низкий | почти 7 лет назад | |
openSUSE-SU-2020:0567-1 Security update for python-typed-ast | больше 6 лет назад | |||
ALT-PU-2019-4221 ALT-PU-2019-4221: package `python3-module-typed_ast` update to version 1.4.0-alt1 | CVSS3: 7.5 | около 7 лет назад |
Уязвимостей на страницу