stf Schwachstellen (CVE)

Für stf veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

3 Ergebnisse

7.5Hoch

CVE-2026-30922 vor 7 Monaten

pyasn1 Vulnerable to Denial of Service via Unbounded Recursion

pyasn1 pyasn1; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9; Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payl…

7.1Hoch

CVE-2026-24049 vor 9 Monaten

wheel Allows Arbitrary File Permission Modification via Path Traversal

pypa wheel; Red Hat Discovery 2 for RHEL 10; Red Hat Discovery 2 for RHEL 8; Red Hat Discovery 2 for RHEL 9

wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.40.0 through 0.46.1, the unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic b…

7.5Hoch

CVE-2026-23490 vor 9 Monaten

pyasn1 has a DoS vulnerability in decoder

pyasn1 pyasn1; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9; Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. This vulnerability is fixed in 0.6.2.