Vulnerability-Lookup

RHSA-2025:1335

Vulnerability from csaf_redhat - Published: 2025-02-12 00:11 - Updated: 2026-09-17 00:02

Summary

Red Hat Security Advisory: RHUI 4.11 security, bugfix, and enhancement update

Severity

Important

Notes

Topic: An updated version of Red Hat Update Infrastructure (RHUI) is now available. RHUI 4.11 updates Pulp to a newer upstream version, fixes several issues, and adds an enhancement.

Details: Red Hat Update Infrastructure (RHUI) provides a highly scalable and redundant framework for managing repositories and content. It also allows cloud providers to deliver content and updates to Red Hat Enterprise Linux (RHEL) instances. Security Fixes: * Cryptography: NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override (CVE-2024-26130) * Gunicorn: HTTP Request Smuggling due to improper validation of Transfer-Encoding headers (CVE-2024-1135) * Aiohttp: aiohttp: XSS on index pages for static file handling (CVE-2024-27306) * Aiohttp: aiohttp: DoS when trying to parse malformed POST requests (CVE-2024-30251) * Sqlparse: sqlparse: parsing heavily nested list leads to denial of service (CVE-2024-4340) * Jinja2: jinja2: accepts keys containing non-attribute characters (CVE-2024-34064) * Django: Potential denial-of-service in django.utils.translation.get_supported_language_variant() (CVE-2024-39614) * Django: Memory exhaustion in django.utils.numberformat.floatformat() (CVE-2024-41989) * Django: Potential SQL injection in QuerySet.values() and values_list() (CVE-2024-42005) * Django: Potential denial-of-service vulnerability in django.utils.html.urlize() (CVE-2024-41990) * Django: Potential denial-of-service vulnerability in django.utils.html.urlize() and AdminURLFieldWidget (CVE-2024-41991) * Grpcio: client communicating with a HTTP/2 proxy can poison the HPACK table between the proxy and the backend (CVE-2024-7246) * Requests: subsequent requests to the same host ignore cert verification (CVE-2024-35195) For detailed information on other changes in this release, see the Red Hat Update Infrastructure Release Notes linked from the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2024-1135

An HTTP Request Smuggling vulnerability was found in Gunicorn. By crafting requests with conflicting Transfer-Encoding headers, attackers can bypass security restrictions and access restricted endpoints. This issue is due to Gunicorn's handling of Transfer-Encoding headers, where it incorrectly processes requests with multiple, conflicting Transfer-Encoding headers, treating them as chunked regardless of the final encoding specified. This vulnerability allows for a range of attacks, including cache poisoning, session manipulation, and data exposure.

7.5 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

Affected products

Fixed 2 products

Product	Identifier	Version	Remediation
Unresolved product id: 8Base-RHUI-4:python-gunicorn-0:22.0.0-1.0.1.el8ui.src		—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-gunicorn-0:22.0.0-1.0.1.el8ui.noarch		—	Vendor Fix fix Workaround

Known not affected 253 products

Product	Version	Remediation
Unresolved product id: 8Base-RHUI-4:ansible-collection-community-crypto-0:2.21.1-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:ansible-collection-community-crypto-0:2.21.1-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:createrepo_c-0:1.1.3-1.0.1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:createrepo_c-debuginfo-0:1.1.3-1.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:createrepo_c-debugsource-0:1.1.3-1.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:createrepo_c-libs-0:1.1.3-1.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:createrepo_c-libs-debuginfo-0:1.1.3-1.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:libcomps-0:0.1.21-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:libcomps-0:0.1.21-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:libcomps-debuginfo-0:0.1.21-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:libcomps-debugsource-0:0.1.21-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:m2crypto-0:0.40.1-1.0.2.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:m2crypto-debuginfo-0:0.40.1-1.0.2.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:m2crypto-debugsource-0:0.40.1-1.0.2.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-aiodns-0:3.0.0-7.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-aiofiles-0:22.1.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-aiohttp-0:3.9.4-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-aiohttp-debugsource-0:3.9.4-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-aiohttp-xmlrpc-0:1.5.0-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-aiosignal-0:1.3.1-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-asgiref-0:3.6.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-async-timeout-0:4.0.2-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-asyncio-throttle-0:1.0.2-7.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-attrs-0:21.4.0-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-backoff-0:2.2.1-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-brotli-0:1.0.9-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-brotli-debugsource-0:1.0.9-6.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-certifi-0:2022.12.7-5.0.1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-charset-normalizer-0:2.1.1-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-click-0:8.1.3-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-cryptography-0:42.0.8-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-cryptography-debugsource-0:42.0.8-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-dateutil-0:2.8.2-7.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-defusedxml-0:0.7.1-7.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-deprecated-0:1.2.13-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-diff-match-patch-0:20200713-7.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-django-0:4.2.15-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-django-filter-0:23.2-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-django-guid-0:3.3.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-django-import-export-0:3.1.0-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-django-lifecycle-0:1.0.0-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-django-readonly-field-0:1.1.2-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-djangorestframework-0:3.14.0-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-djangorestframework-queryfields-0:1.0.0-8.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-drf-access-policy-0:1.3.0-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-drf-nested-routers-0:0.93.4-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-drf-spectacular-0:0.26.5-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-dynaconf-0:3.1.12-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-ecdsa-0:0.18.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-et-xmlfile-0:1.1.0-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-frozenlist-0:1.3.3-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-frozenlist-debugsource-0:1.3.3-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-future-0:0.18.3-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-gnupg-0:0.5.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-googleapis-common-protos-0:1.59.1-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-grpcio-0:1.65.4-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-grpcio-debugsource-0:1.65.4-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-importlib-metadata-0:6.0.1-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-inflection-0:0.5.1-7.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-iniparse-0:0.4-40.0.1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-jinja2-0:3.1.4-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-jq-0:1.6.0-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-json-stream-rs-tokenizer-0:0.4.25-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-jsonschema-0:4.10.3-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-markuppy-0:1.14-7.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-markupsafe-0:2.1.2-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-markupsafe-debugsource-0:2.1.2-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-multidict-0:6.0.4-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-multidict-debugsource-0:6.0.4-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-odfpy-0:1.4.1-10.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-openpyxl-0:3.1.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-packaging-0:21.3-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-productmd-0:1.33-7.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-protobuf-0:4.21.6-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-psycopg-0:3.2.3-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-psycopg_c-0:3.2.3-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-psycopg_c-debugsource-0:3.2.3-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pulp-container-0:2.20.3-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pulp-container-client-0:2.21.0-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pulp-glue-0:0.29.2-2.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pulp-rpm-0:3.26.1-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pulp-rpm-client-0:3.25.4-1.0.1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pulpcore-0:3.49.22-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pulpcore-client-0:3.49.19-1.0.2.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pyOpenSSL-0:24.1.0-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pycares-0:4.1.2-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pycares-debugsource-0:4.1.2-6.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pycparser-0:2.21-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pycryptodomex-0:3.20.0-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pycryptodomex-debugsource-0:3.20.0-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pygtrie-0:2.5.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pyjwkest-0:1.4.2-9.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pyjwt-0:2.5.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pyparsing-0:3.1.1-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pyrsistent-0:0.18.1-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pyrsistent-debugsource-0:0.18.1-6.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pytz-0:2022.2.1-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pyyaml-0:5.4.1-8.0.1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-redis-0:4.3.4-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-requests-0:2.32.3-2.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-rhsm-0:1.19.2-7.0.1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-rhsm-debugsource-0:1.19.2-7.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-solv-debugsource-0:0.7.28-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-sqlparse-0:0.5.0-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-tablib-0:3.3.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-types-cryptography-0:3.3.23.2-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-typing-extensions-0:4.7.1-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-uritemplate-0:4.1.1-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-url-normalize-0:1.4.3-8.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-urllib3-0:2.2.3-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-urlman-0:2.0.1-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-uuid6-0:2023.5.2-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-whitenoise-0:6.0.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-wrapt-0:1.14.1-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-wrapt-debugsource-0:1.14.1-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-xlrd-0:2.0.1-9.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-xlwt-0:1.3.0-7.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-yarl-0:1.8.2-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-yarl-debugsource-0:1.8.2-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-zipp-0:3.4.0-8.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-certifi-0:2022.12.7-5.0.1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-createrepo_c-0:1.1.3-1.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-createrepo_c-debuginfo-0:1.1.3-1.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-libcomps-0:0.1.21-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-libcomps-debuginfo-0:0.1.21-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-m2crypto-0:0.40.1-1.0.2.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-m2crypto-debuginfo-0:0.40.1-1.0.2.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-pulp-container-client-0:2.21.0-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-pulp-rpm-client-0:3.25.4-1.0.1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-pulpcore-client-0:3.49.19-1.0.2.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-pyyaml-0:5.4.1-8.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-aiodns-0:3.0.0-7.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-aiofiles-0:22.1.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-aiohttp-0:3.9.4-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-aiohttp-debuginfo-0:3.9.4-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-aiohttp-xmlrpc-0:1.5.0-6.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-aiosignal-0:1.3.1-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-asgiref-0:3.6.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-async-timeout-0:4.0.2-6.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-asyncio-throttle-0:1.0.2-7.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-attrs-0:21.4.0-6.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-backoff-0:2.2.1-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-brotli-0:1.0.9-6.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-brotli-debuginfo-0:1.0.9-6.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-certifi-0:2022.12.7-5.0.1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-charset-normalizer-0:2.1.1-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-click-0:8.1.3-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-createrepo_c-0:1.1.3-1.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-createrepo_c-debuginfo-0:1.1.3-1.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-cryptography-0:42.0.8-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-cryptography-debuginfo-0:42.0.8-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-dateutil-0:2.8.2-7.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-defusedxml-0:0.7.1-7.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-deprecated-0:1.2.13-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-diff-match-patch-0:20200713-7.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-django-0:4.2.15-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-django-filter-0:23.2-4.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-django-guid-0:3.3.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-django-import-export-0:3.1.0-4.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-django-lifecycle-0:1.0.0-4.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-django-readonly-field-0:1.1.2-4.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-djangorestframework-0:3.14.0-4.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-djangorestframework-queryfields-0:1.0.0-8.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-drf-access-policy-0:1.3.0-4.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-drf-nested-routers-0:0.93.4-6.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-drf-spectacular-0:0.26.5-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-dynaconf-0:3.1.12-4.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-ecdsa-0:0.18.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-et-xmlfile-0:1.1.0-6.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-frozenlist-0:1.3.3-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-frozenlist-debuginfo-0:1.3.3-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-future-0:0.18.3-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-gnupg-0:0.5.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-googleapis-common-protos-0:1.59.1-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-grpcio-0:1.65.4-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-grpcio-debuginfo-0:1.65.4-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-importlib-metadata-0:6.0.1-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-inflection-0:0.5.1-7.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-iniparse-0:0.4-40.0.1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-jinja2-0:3.1.4-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-jq-0:1.6.0-4.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-json_stream_rs_tokenizer-0:0.4.25-4.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-jsonschema-0:4.10.3-4.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-libcomps-0:0.1.21-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-libcomps-debuginfo-0:0.1.21-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-m2crypto-0:0.40.1-1.0.2.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-m2crypto-debuginfo-0:0.40.1-1.0.2.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-markuppy-0:1.14-7.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-markupsafe-0:2.1.2-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-markupsafe-debuginfo-0:2.1.2-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-multidict-0:6.0.4-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-multidict-debuginfo-0:6.0.4-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-odfpy-0:1.4.1-10.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-openpyxl-0:3.1.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-packaging-0:21.3-6.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-productmd-0:1.33-7.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-protobuf-0:4.21.6-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-psycopg-0:3.2.3-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-psycopg_c-0:3.2.3-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-psycopg_c-debuginfo-0:3.2.3-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pulp-container-0:2.20.3-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pulp-glue-0:0.29.2-2.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pulp-rpm-0:3.26.1-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pulpcore-0:3.49.22-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pyOpenSSL-0:24.1.0-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pycares-0:4.1.2-6.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pycares-debuginfo-0:4.1.2-6.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pycparser-0:2.21-6.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pycryptodomex-0:3.20.0-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pycryptodomex-debuginfo-0:3.20.0-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pygtrie-0:2.5.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pyjwkest-0:1.4.2-9.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pyjwt-0:2.5.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pyparsing-0:3.1.1-4.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pyrsistent-0:0.18.1-6.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pyrsistent-debuginfo-0:0.18.1-6.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pytz-0:2022.2.1-6.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-redis-0:4.3.4-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-requests-0:2.32.3-2.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-rhsm-0:1.19.2-7.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-rhsm-debuginfo-0:1.19.2-7.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-solv-0:0.7.28-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-solv-debuginfo-0:0.7.28-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-sqlparse-0:0.5.0-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-tablib-0:3.3.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-types-cryptography-0:3.3.23.2-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-typing-extensions-0:4.7.1-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-uritemplate-0:4.1.1-6.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-url-normalize-0:1.4.3-8.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-urllib3-0:2.2.3-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-urlman-0:2.0.1-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-uuid6-0:2023.5.2-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-whitenoise-0:6.0.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-wrapt-0:1.14.1-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-wrapt-debuginfo-0:1.14.1-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-xlrd-0:2.0.1-9.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-xlwt-0:1.3.0-7.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-yarl-0:1.8.2-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-yarl-debuginfo-0:1.8.2-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-zipp-0:3.4.0-8.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-authorizer-0:2.0.0-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-authorizer-0:2.0.0-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-authorizer-cert-0:2.0.0-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-authorizer-cert-0:2.0.0-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-fetcher-0:2.0.0-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-fetcher-0:2.0.0-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-mirror-0:2.0.0-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-mirror-0:2.0.0-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-installer-0:4.11.0.2-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-installer-0:4.11.0.2-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-tools-0:4.11.0.4-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-tools-0:4.11.0.4-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-tools-libs-0:4.11.0.4-1.el8ui.noarch	—	Workaround

Threats

Impact Important

CVE-2024-4340

A flaw was found in sqlparse. This issue occurs in a heavily nested list in sqlparse.parse(), where a recursion error may be triggered, which can lead to a denial of service.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-674 - Uncontrolled Recursion

Affected products

Fixed 2 products

Product	Identifier	Version	Remediation
Unresolved product id: 8Base-RHUI-4:python-sqlparse-0:0.5.0-1.el8ui.src		—	Vendor Fix fix
Unresolved product id: 8Base-RHUI-4:python3.11-sqlparse-0:0.5.0-1.el8ui.noarch		—	Vendor Fix fix

Known not affected 253 products

Product	Identifier	Version	Remediation
Unresolved product id: 8Base-RHUI-4:ansible-collection-community-crypto-0:2.21.1-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:ansible-collection-community-crypto-0:2.21.1-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:createrepo_c-0:1.1.3-1.0.1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:createrepo_c-debuginfo-0:1.1.3-1.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:createrepo_c-debugsource-0:1.1.3-1.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:createrepo_c-libs-0:1.1.3-1.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:createrepo_c-libs-debuginfo-0:1.1.3-1.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:libcomps-0:0.1.21-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:libcomps-0:0.1.21-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:libcomps-debuginfo-0:0.1.21-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:libcomps-debugsource-0:0.1.21-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:m2crypto-0:0.40.1-1.0.2.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:m2crypto-debuginfo-0:0.40.1-1.0.2.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:m2crypto-debugsource-0:0.40.1-1.0.2.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-aiodns-0:3.0.0-7.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-aiofiles-0:22.1.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-aiohttp-0:3.9.4-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-aiohttp-debugsource-0:3.9.4-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-aiohttp-xmlrpc-0:1.5.0-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-aiosignal-0:1.3.1-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-asgiref-0:3.6.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-async-timeout-0:4.0.2-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-asyncio-throttle-0:1.0.2-7.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-attrs-0:21.4.0-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-backoff-0:2.2.1-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-brotli-0:1.0.9-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-brotli-debugsource-0:1.0.9-6.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-certifi-0:2022.12.7-5.0.1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-charset-normalizer-0:2.1.1-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-click-0:8.1.3-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-cryptography-0:42.0.8-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-cryptography-debugsource-0:42.0.8-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-dateutil-0:2.8.2-7.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-defusedxml-0:0.7.1-7.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-deprecated-0:1.2.13-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-diff-match-patch-0:20200713-7.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-django-0:4.2.15-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-django-filter-0:23.2-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-django-guid-0:3.3.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-django-import-export-0:3.1.0-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-django-lifecycle-0:1.0.0-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-django-readonly-field-0:1.1.2-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-djangorestframework-0:3.14.0-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-djangorestframework-queryfields-0:1.0.0-8.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-drf-access-policy-0:1.3.0-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-drf-nested-routers-0:0.93.4-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-drf-spectacular-0:0.26.5-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-dynaconf-0:3.1.12-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-ecdsa-0:0.18.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-et-xmlfile-0:1.1.0-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-frozenlist-0:1.3.3-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-frozenlist-debugsource-0:1.3.3-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-future-0:0.18.3-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-gnupg-0:0.5.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-googleapis-common-protos-0:1.59.1-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-grpcio-0:1.65.4-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-grpcio-debugsource-0:1.65.4-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-gunicorn-0:22.0.0-1.0.1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-importlib-metadata-0:6.0.1-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-inflection-0:0.5.1-7.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-iniparse-0:0.4-40.0.1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-jinja2-0:3.1.4-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-jq-0:1.6.0-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-json-stream-rs-tokenizer-0:0.4.25-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-jsonschema-0:4.10.3-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-markuppy-0:1.14-7.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-markupsafe-0:2.1.2-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-markupsafe-debugsource-0:2.1.2-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-multidict-0:6.0.4-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-multidict-debugsource-0:6.0.4-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-odfpy-0:1.4.1-10.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-openpyxl-0:3.1.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-packaging-0:21.3-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-productmd-0:1.33-7.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-protobuf-0:4.21.6-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-psycopg-0:3.2.3-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-psycopg_c-0:3.2.3-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-psycopg_c-debugsource-0:3.2.3-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-pulp-container-0:2.20.3-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pulp-container-client-0:2.21.0-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pulp-glue-0:0.29.2-2.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pulp-rpm-0:3.26.1-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pulp-rpm-client-0:3.25.4-1.0.1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pulpcore-0:3.49.22-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pulpcore-client-0:3.49.19-1.0.2.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pyOpenSSL-0:24.1.0-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pycares-0:4.1.2-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pycares-debugsource-0:4.1.2-6.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-pycparser-0:2.21-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pycryptodomex-0:3.20.0-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pycryptodomex-debugsource-0:3.20.0-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-pygtrie-0:2.5.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pyjwkest-0:1.4.2-9.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pyjwt-0:2.5.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pyparsing-0:3.1.1-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pyrsistent-0:0.18.1-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pyrsistent-debugsource-0:0.18.1-6.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-pytz-0:2022.2.1-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pyyaml-0:5.4.1-8.0.1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-redis-0:4.3.4-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-requests-0:2.32.3-2.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-rhsm-0:1.19.2-7.0.1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-rhsm-debugsource-0:1.19.2-7.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-solv-debugsource-0:0.7.28-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-tablib-0:3.3.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-types-cryptography-0:3.3.23.2-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-typing-extensions-0:4.7.1-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-uritemplate-0:4.1.1-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-url-normalize-0:1.4.3-8.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-urllib3-0:2.2.3-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-urlman-0:2.0.1-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-uuid6-0:2023.5.2-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-whitenoise-0:6.0.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-wrapt-0:1.14.1-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-wrapt-debugsource-0:1.14.1-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-xlrd-0:2.0.1-9.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-xlwt-0:1.3.0-7.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-yarl-0:1.8.2-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-yarl-debugsource-0:1.8.2-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-zipp-0:3.4.0-8.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python3-certifi-0:2022.12.7-5.0.1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3-createrepo_c-0:1.1.3-1.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3-createrepo_c-debuginfo-0:1.1.3-1.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3-libcomps-0:0.1.21-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3-libcomps-debuginfo-0:0.1.21-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3-m2crypto-0:0.40.1-1.0.2.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3-m2crypto-debuginfo-0:0.40.1-1.0.2.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3-pulp-container-client-0:2.21.0-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3-pulp-rpm-client-0:3.25.4-1.0.1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3-pulpcore-client-0:3.49.19-1.0.2.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3-pyyaml-0:5.4.1-8.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-aiodns-0:3.0.0-7.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-aiofiles-0:22.1.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-aiohttp-0:3.9.4-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-aiohttp-debuginfo-0:3.9.4-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-aiohttp-xmlrpc-0:1.5.0-6.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-aiosignal-0:1.3.1-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-asgiref-0:3.6.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-async-timeout-0:4.0.2-6.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-asyncio-throttle-0:1.0.2-7.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-attrs-0:21.4.0-6.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-backoff-0:2.2.1-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-brotli-0:1.0.9-6.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-brotli-debuginfo-0:1.0.9-6.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-certifi-0:2022.12.7-5.0.1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-charset-normalizer-0:2.1.1-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-click-0:8.1.3-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-createrepo_c-0:1.1.3-1.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-createrepo_c-debuginfo-0:1.1.3-1.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-cryptography-0:42.0.8-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-cryptography-debuginfo-0:42.0.8-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-dateutil-0:2.8.2-7.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-defusedxml-0:0.7.1-7.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-deprecated-0:1.2.13-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-diff-match-patch-0:20200713-7.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-django-0:4.2.15-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-django-filter-0:23.2-4.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-django-guid-0:3.3.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-django-import-export-0:3.1.0-4.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-django-lifecycle-0:1.0.0-4.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-django-readonly-field-0:1.1.2-4.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-djangorestframework-0:3.14.0-4.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-djangorestframework-queryfields-0:1.0.0-8.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-drf-access-policy-0:1.3.0-4.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-drf-nested-routers-0:0.93.4-6.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-drf-spectacular-0:0.26.5-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-dynaconf-0:3.1.12-4.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-ecdsa-0:0.18.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-et-xmlfile-0:1.1.0-6.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-frozenlist-0:1.3.3-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-frozenlist-debuginfo-0:1.3.3-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-future-0:0.18.3-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-gnupg-0:0.5.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-googleapis-common-protos-0:1.59.1-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-grpcio-0:1.65.4-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-grpcio-debuginfo-0:1.65.4-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-gunicorn-0:22.0.0-1.0.1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-importlib-metadata-0:6.0.1-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-inflection-0:0.5.1-7.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-iniparse-0:0.4-40.0.1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-jinja2-0:3.1.4-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-jq-0:1.6.0-4.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-json_stream_rs_tokenizer-0:0.4.25-4.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-jsonschema-0:4.10.3-4.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-libcomps-0:0.1.21-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-libcomps-debuginfo-0:0.1.21-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-m2crypto-0:0.40.1-1.0.2.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-m2crypto-debuginfo-0:0.40.1-1.0.2.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-markuppy-0:1.14-7.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-markupsafe-0:2.1.2-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-markupsafe-debuginfo-0:2.1.2-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-multidict-0:6.0.4-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-multidict-debuginfo-0:6.0.4-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-odfpy-0:1.4.1-10.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-openpyxl-0:3.1.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-packaging-0:21.3-6.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-productmd-0:1.33-7.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-protobuf-0:4.21.6-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-psycopg-0:3.2.3-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-psycopg_c-0:3.2.3-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-psycopg_c-debuginfo-0:3.2.3-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-pulp-container-0:2.20.3-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pulp-glue-0:0.29.2-2.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pulp-rpm-0:3.26.1-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pulpcore-0:3.49.22-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pyOpenSSL-0:24.1.0-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pycares-0:4.1.2-6.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-pycares-debuginfo-0:4.1.2-6.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-pycparser-0:2.21-6.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pycryptodomex-0:3.20.0-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-pycryptodomex-debuginfo-0:3.20.0-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-pygtrie-0:2.5.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pyjwkest-0:1.4.2-9.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pyjwt-0:2.5.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pyparsing-0:3.1.1-4.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pyrsistent-0:0.18.1-6.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-pyrsistent-debuginfo-0:0.18.1-6.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-pytz-0:2022.2.1-6.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-redis-0:4.3.4-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-requests-0:2.32.3-2.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-rhsm-0:1.19.2-7.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-rhsm-debuginfo-0:1.19.2-7.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-solv-0:0.7.28-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-solv-debuginfo-0:0.7.28-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-tablib-0:3.3.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-types-cryptography-0:3.3.23.2-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-typing-extensions-0:4.7.1-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-uritemplate-0:4.1.1-6.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-url-normalize-0:1.4.3-8.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-urllib3-0:2.2.3-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-urlman-0:2.0.1-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-uuid6-0:2023.5.2-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-whitenoise-0:6.0.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-wrapt-0:1.14.1-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-wrapt-debuginfo-0:1.14.1-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-xlrd-0:2.0.1-9.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-xlwt-0:1.3.0-7.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-yarl-0:1.8.2-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-yarl-debuginfo-0:1.8.2-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-zipp-0:3.4.0-8.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-authorizer-0:2.0.0-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-authorizer-0:2.0.0-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-authorizer-cert-0:2.0.0-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-authorizer-cert-0:2.0.0-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-fetcher-0:2.0.0-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-fetcher-0:2.0.0-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-mirror-0:2.0.0-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-mirror-0:2.0.0-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:rhui-installer-0:4.11.0.2-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:rhui-installer-0:4.11.0.2-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:rhui-tools-0:4.11.0.4-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:rhui-tools-0:4.11.0.4-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:rhui-tools-libs-0:4.11.0.4-1.el8ui.noarch		—

Threats

Impact Moderate

CVE-2024-7246

A flaw was found in Google gRPC due to HPACK table poisoning between the proxy and backend so that other clients see failed requests, resulting in a denial of service. This occurs because the error status for a misencoded header is not cleared between header reads, resulting in subsequent (incrementally indexed) added headers in the first request being poisoned until cleared from the HPACK table. By sending a specially crafted request, an attacker could leak other clients HTTP header keys. Attackers are only able to access HTTP header keys but not values.

4.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L

CWE-440 - Expected Behavior Violation

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: 8Base-RHUI-4:python-grpcio-0:1.65.4-1.el8ui.src	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHUI-4:python-grpcio-debugsource-0:1.65.4-1.el8ui.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-grpcio-0:1.65.4-1.el8ui.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-grpcio-debuginfo-0:1.65.4-1.el8ui.x86_64	—	Vendor Fix fix Workaround

Known not affected 251 products

Product	Version	Remediation
Unresolved product id: 8Base-RHUI-4:ansible-collection-community-crypto-0:2.21.1-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:ansible-collection-community-crypto-0:2.21.1-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:createrepo_c-0:1.1.3-1.0.1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:createrepo_c-debuginfo-0:1.1.3-1.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:createrepo_c-debugsource-0:1.1.3-1.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:createrepo_c-libs-0:1.1.3-1.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:createrepo_c-libs-debuginfo-0:1.1.3-1.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:libcomps-0:0.1.21-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:libcomps-0:0.1.21-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:libcomps-debuginfo-0:0.1.21-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:libcomps-debugsource-0:0.1.21-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:m2crypto-0:0.40.1-1.0.2.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:m2crypto-debuginfo-0:0.40.1-1.0.2.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:m2crypto-debugsource-0:0.40.1-1.0.2.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-aiodns-0:3.0.0-7.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-aiofiles-0:22.1.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-aiohttp-0:3.9.4-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-aiohttp-debugsource-0:3.9.4-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-aiohttp-xmlrpc-0:1.5.0-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-aiosignal-0:1.3.1-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-asgiref-0:3.6.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-async-timeout-0:4.0.2-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-asyncio-throttle-0:1.0.2-7.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-attrs-0:21.4.0-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-backoff-0:2.2.1-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-brotli-0:1.0.9-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-brotli-debugsource-0:1.0.9-6.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-certifi-0:2022.12.7-5.0.1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-charset-normalizer-0:2.1.1-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-click-0:8.1.3-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-cryptography-0:42.0.8-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-cryptography-debugsource-0:42.0.8-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-dateutil-0:2.8.2-7.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-defusedxml-0:0.7.1-7.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-deprecated-0:1.2.13-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-diff-match-patch-0:20200713-7.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-django-0:4.2.15-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-django-filter-0:23.2-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-django-guid-0:3.3.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-django-import-export-0:3.1.0-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-django-lifecycle-0:1.0.0-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-django-readonly-field-0:1.1.2-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-djangorestframework-0:3.14.0-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-djangorestframework-queryfields-0:1.0.0-8.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-drf-access-policy-0:1.3.0-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-drf-nested-routers-0:0.93.4-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-drf-spectacular-0:0.26.5-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-dynaconf-0:3.1.12-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-ecdsa-0:0.18.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-et-xmlfile-0:1.1.0-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-frozenlist-0:1.3.3-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-frozenlist-debugsource-0:1.3.3-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-future-0:0.18.3-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-gnupg-0:0.5.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-googleapis-common-protos-0:1.59.1-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-gunicorn-0:22.0.0-1.0.1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-importlib-metadata-0:6.0.1-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-inflection-0:0.5.1-7.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-iniparse-0:0.4-40.0.1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-jinja2-0:3.1.4-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-jq-0:1.6.0-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-json-stream-rs-tokenizer-0:0.4.25-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-jsonschema-0:4.10.3-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-markuppy-0:1.14-7.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-markupsafe-0:2.1.2-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-markupsafe-debugsource-0:2.1.2-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-multidict-0:6.0.4-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-multidict-debugsource-0:6.0.4-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-odfpy-0:1.4.1-10.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-openpyxl-0:3.1.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-packaging-0:21.3-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-productmd-0:1.33-7.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-protobuf-0:4.21.6-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-psycopg-0:3.2.3-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-psycopg_c-0:3.2.3-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-psycopg_c-debugsource-0:3.2.3-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pulp-container-0:2.20.3-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pulp-container-client-0:2.21.0-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pulp-glue-0:0.29.2-2.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pulp-rpm-0:3.26.1-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pulp-rpm-client-0:3.25.4-1.0.1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pulpcore-0:3.49.22-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pulpcore-client-0:3.49.19-1.0.2.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pyOpenSSL-0:24.1.0-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pycares-0:4.1.2-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pycares-debugsource-0:4.1.2-6.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pycparser-0:2.21-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pycryptodomex-0:3.20.0-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pycryptodomex-debugsource-0:3.20.0-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pygtrie-0:2.5.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pyjwkest-0:1.4.2-9.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pyjwt-0:2.5.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pyparsing-0:3.1.1-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pyrsistent-0:0.18.1-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pyrsistent-debugsource-0:0.18.1-6.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pytz-0:2022.2.1-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pyyaml-0:5.4.1-8.0.1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-redis-0:4.3.4-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-requests-0:2.32.3-2.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-rhsm-0:1.19.2-7.0.1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-rhsm-debugsource-0:1.19.2-7.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-solv-debugsource-0:0.7.28-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-sqlparse-0:0.5.0-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-tablib-0:3.3.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-types-cryptography-0:3.3.23.2-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-typing-extensions-0:4.7.1-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-uritemplate-0:4.1.1-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-url-normalize-0:1.4.3-8.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-urllib3-0:2.2.3-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-urlman-0:2.0.1-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-uuid6-0:2023.5.2-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-whitenoise-0:6.0.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-wrapt-0:1.14.1-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-wrapt-debugsource-0:1.14.1-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-xlrd-0:2.0.1-9.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-xlwt-0:1.3.0-7.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-yarl-0:1.8.2-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-yarl-debugsource-0:1.8.2-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-zipp-0:3.4.0-8.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-certifi-0:2022.12.7-5.0.1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-createrepo_c-0:1.1.3-1.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-createrepo_c-debuginfo-0:1.1.3-1.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-libcomps-0:0.1.21-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-libcomps-debuginfo-0:0.1.21-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-m2crypto-0:0.40.1-1.0.2.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-m2crypto-debuginfo-0:0.40.1-1.0.2.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-pulp-container-client-0:2.21.0-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-pulp-rpm-client-0:3.25.4-1.0.1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-pulpcore-client-0:3.49.19-1.0.2.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-pyyaml-0:5.4.1-8.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-aiodns-0:3.0.0-7.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-aiofiles-0:22.1.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-aiohttp-0:3.9.4-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-aiohttp-debuginfo-0:3.9.4-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-aiohttp-xmlrpc-0:1.5.0-6.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-aiosignal-0:1.3.1-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-asgiref-0:3.6.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-async-timeout-0:4.0.2-6.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-asyncio-throttle-0:1.0.2-7.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-attrs-0:21.4.0-6.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-backoff-0:2.2.1-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-brotli-0:1.0.9-6.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-brotli-debuginfo-0:1.0.9-6.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-certifi-0:2022.12.7-5.0.1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-charset-normalizer-0:2.1.1-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-click-0:8.1.3-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-createrepo_c-0:1.1.3-1.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-createrepo_c-debuginfo-0:1.1.3-1.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-cryptography-0:42.0.8-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-cryptography-debuginfo-0:42.0.8-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-dateutil-0:2.8.2-7.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-defusedxml-0:0.7.1-7.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-deprecated-0:1.2.13-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-diff-match-patch-0:20200713-7.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-django-0:4.2.15-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-django-filter-0:23.2-4.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-django-guid-0:3.3.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-django-import-export-0:3.1.0-4.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-django-lifecycle-0:1.0.0-4.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-django-readonly-field-0:1.1.2-4.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-djangorestframework-0:3.14.0-4.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-djangorestframework-queryfields-0:1.0.0-8.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-drf-access-policy-0:1.3.0-4.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-drf-nested-routers-0:0.93.4-6.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-drf-spectacular-0:0.26.5-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-dynaconf-0:3.1.12-4.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-ecdsa-0:0.18.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-et-xmlfile-0:1.1.0-6.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-frozenlist-0:1.3.3-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-frozenlist-debuginfo-0:1.3.3-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-future-0:0.18.3-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-gnupg-0:0.5.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-googleapis-common-protos-0:1.59.1-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-gunicorn-0:22.0.0-1.0.1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-importlib-metadata-0:6.0.1-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-inflection-0:0.5.1-7.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-iniparse-0:0.4-40.0.1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-jinja2-0:3.1.4-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-jq-0:1.6.0-4.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-json_stream_rs_tokenizer-0:0.4.25-4.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-jsonschema-0:4.10.3-4.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-libcomps-0:0.1.21-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-libcomps-debuginfo-0:0.1.21-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-m2crypto-0:0.40.1-1.0.2.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-m2crypto-debuginfo-0:0.40.1-1.0.2.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-markuppy-0:1.14-7.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-markupsafe-0:2.1.2-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-markupsafe-debuginfo-0:2.1.2-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-multidict-0:6.0.4-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-multidict-debuginfo-0:6.0.4-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-odfpy-0:1.4.1-10.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-openpyxl-0:3.1.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-packaging-0:21.3-6.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-productmd-0:1.33-7.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-protobuf-0:4.21.6-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-psycopg-0:3.2.3-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-psycopg_c-0:3.2.3-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-psycopg_c-debuginfo-0:3.2.3-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pulp-container-0:2.20.3-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pulp-glue-0:0.29.2-2.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pulp-rpm-0:3.26.1-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pulpcore-0:3.49.22-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pyOpenSSL-0:24.1.0-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pycares-0:4.1.2-6.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pycares-debuginfo-0:4.1.2-6.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pycparser-0:2.21-6.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pycryptodomex-0:3.20.0-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pycryptodomex-debuginfo-0:3.20.0-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pygtrie-0:2.5.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pyjwkest-0:1.4.2-9.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pyjwt-0:2.5.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pyparsing-0:3.1.1-4.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pyrsistent-0:0.18.1-6.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pyrsistent-debuginfo-0:0.18.1-6.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pytz-0:2022.2.1-6.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-redis-0:4.3.4-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-requests-0:2.32.3-2.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-rhsm-0:1.19.2-7.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-rhsm-debuginfo-0:1.19.2-7.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-solv-0:0.7.28-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-solv-debuginfo-0:0.7.28-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-sqlparse-0:0.5.0-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-tablib-0:3.3.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-types-cryptography-0:3.3.23.2-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-typing-extensions-0:4.7.1-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-uritemplate-0:4.1.1-6.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-url-normalize-0:1.4.3-8.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-urllib3-0:2.2.3-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-urlman-0:2.0.1-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-uuid6-0:2023.5.2-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-whitenoise-0:6.0.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-wrapt-0:1.14.1-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-wrapt-debuginfo-0:1.14.1-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-xlrd-0:2.0.1-9.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-xlwt-0:1.3.0-7.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-yarl-0:1.8.2-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-yarl-debuginfo-0:1.8.2-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-zipp-0:3.4.0-8.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-authorizer-0:2.0.0-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-authorizer-0:2.0.0-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-authorizer-cert-0:2.0.0-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-authorizer-cert-0:2.0.0-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-fetcher-0:2.0.0-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-fetcher-0:2.0.0-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-mirror-0:2.0.0-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-mirror-0:2.0.0-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-installer-0:4.11.0.2-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-installer-0:4.11.0.2-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-tools-0:4.11.0.4-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-tools-0:4.11.0.4-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-tools-libs-0:4.11.0.4-1.el8ui.noarch	—	Workaround

Threats

Impact Moderate

CVE-2024-26130

A flaw was discovered in python-cryptography. A NULL pointer dereference can be triggered when a PKCS#12 key and certificate do not match. Specifically, if the pkcs12.serialize_key_and_certificates function is called with a non-matching certificate and private key and an encryption algorithm with hmac_hash set, the Python process may crash, leading to a denial of service.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: 8Base-RHUI-4:python-cryptography-0:42.0.8-1.el8ui.src	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHUI-4:python-cryptography-debugsource-0:42.0.8-1.el8ui.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-cryptography-0:42.0.8-1.el8ui.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-cryptography-debuginfo-0:42.0.8-1.el8ui.x86_64	—	Vendor Fix fix Workaround

Known not affected 251 products

Product	Version	Remediation
Unresolved product id: 8Base-RHUI-4:ansible-collection-community-crypto-0:2.21.1-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:ansible-collection-community-crypto-0:2.21.1-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:createrepo_c-0:1.1.3-1.0.1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:createrepo_c-debuginfo-0:1.1.3-1.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:createrepo_c-debugsource-0:1.1.3-1.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:createrepo_c-libs-0:1.1.3-1.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:createrepo_c-libs-debuginfo-0:1.1.3-1.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:libcomps-0:0.1.21-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:libcomps-0:0.1.21-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:libcomps-debuginfo-0:0.1.21-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:libcomps-debugsource-0:0.1.21-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:m2crypto-0:0.40.1-1.0.2.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:m2crypto-debuginfo-0:0.40.1-1.0.2.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:m2crypto-debugsource-0:0.40.1-1.0.2.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-aiodns-0:3.0.0-7.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-aiofiles-0:22.1.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-aiohttp-0:3.9.4-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-aiohttp-debugsource-0:3.9.4-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-aiohttp-xmlrpc-0:1.5.0-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-aiosignal-0:1.3.1-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-asgiref-0:3.6.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-async-timeout-0:4.0.2-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-asyncio-throttle-0:1.0.2-7.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-attrs-0:21.4.0-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-backoff-0:2.2.1-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-brotli-0:1.0.9-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-brotli-debugsource-0:1.0.9-6.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-certifi-0:2022.12.7-5.0.1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-charset-normalizer-0:2.1.1-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-click-0:8.1.3-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-dateutil-0:2.8.2-7.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-defusedxml-0:0.7.1-7.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-deprecated-0:1.2.13-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-diff-match-patch-0:20200713-7.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-django-0:4.2.15-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-django-filter-0:23.2-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-django-guid-0:3.3.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-django-import-export-0:3.1.0-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-django-lifecycle-0:1.0.0-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-django-readonly-field-0:1.1.2-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-djangorestframework-0:3.14.0-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-djangorestframework-queryfields-0:1.0.0-8.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-drf-access-policy-0:1.3.0-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-drf-nested-routers-0:0.93.4-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-drf-spectacular-0:0.26.5-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-dynaconf-0:3.1.12-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-ecdsa-0:0.18.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-et-xmlfile-0:1.1.0-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-frozenlist-0:1.3.3-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-frozenlist-debugsource-0:1.3.3-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-future-0:0.18.3-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-gnupg-0:0.5.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-googleapis-common-protos-0:1.59.1-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-grpcio-0:1.65.4-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-grpcio-debugsource-0:1.65.4-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-gunicorn-0:22.0.0-1.0.1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-importlib-metadata-0:6.0.1-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-inflection-0:0.5.1-7.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-iniparse-0:0.4-40.0.1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-jinja2-0:3.1.4-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-jq-0:1.6.0-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-json-stream-rs-tokenizer-0:0.4.25-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-jsonschema-0:4.10.3-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-markuppy-0:1.14-7.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-markupsafe-0:2.1.2-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-markupsafe-debugsource-0:2.1.2-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-multidict-0:6.0.4-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-multidict-debugsource-0:6.0.4-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-odfpy-0:1.4.1-10.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-openpyxl-0:3.1.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-packaging-0:21.3-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-productmd-0:1.33-7.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-protobuf-0:4.21.6-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-psycopg-0:3.2.3-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-psycopg_c-0:3.2.3-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-psycopg_c-debugsource-0:3.2.3-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pulp-container-0:2.20.3-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pulp-container-client-0:2.21.0-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pulp-glue-0:0.29.2-2.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pulp-rpm-0:3.26.1-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pulp-rpm-client-0:3.25.4-1.0.1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pulpcore-0:3.49.22-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pulpcore-client-0:3.49.19-1.0.2.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pyOpenSSL-0:24.1.0-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pycares-0:4.1.2-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pycares-debugsource-0:4.1.2-6.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pycparser-0:2.21-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pycryptodomex-0:3.20.0-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pycryptodomex-debugsource-0:3.20.0-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pygtrie-0:2.5.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pyjwkest-0:1.4.2-9.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pyjwt-0:2.5.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pyparsing-0:3.1.1-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pyrsistent-0:0.18.1-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pyrsistent-debugsource-0:0.18.1-6.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pytz-0:2022.2.1-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pyyaml-0:5.4.1-8.0.1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-redis-0:4.3.4-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-requests-0:2.32.3-2.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-rhsm-0:1.19.2-7.0.1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-rhsm-debugsource-0:1.19.2-7.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-solv-debugsource-0:0.7.28-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-sqlparse-0:0.5.0-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-tablib-0:3.3.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-types-cryptography-0:3.3.23.2-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-typing-extensions-0:4.7.1-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-uritemplate-0:4.1.1-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-url-normalize-0:1.4.3-8.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-urllib3-0:2.2.3-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-urlman-0:2.0.1-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-uuid6-0:2023.5.2-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-whitenoise-0:6.0.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-wrapt-0:1.14.1-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-wrapt-debugsource-0:1.14.1-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-xlrd-0:2.0.1-9.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-xlwt-0:1.3.0-7.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-yarl-0:1.8.2-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-yarl-debugsource-0:1.8.2-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-zipp-0:3.4.0-8.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-certifi-0:2022.12.7-5.0.1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-createrepo_c-0:1.1.3-1.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-createrepo_c-debuginfo-0:1.1.3-1.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-libcomps-0:0.1.21-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-libcomps-debuginfo-0:0.1.21-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-m2crypto-0:0.40.1-1.0.2.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-m2crypto-debuginfo-0:0.40.1-1.0.2.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-pulp-container-client-0:2.21.0-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-pulp-rpm-client-0:3.25.4-1.0.1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-pulpcore-client-0:3.49.19-1.0.2.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-pyyaml-0:5.4.1-8.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-aiodns-0:3.0.0-7.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-aiofiles-0:22.1.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-aiohttp-0:3.9.4-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-aiohttp-debuginfo-0:3.9.4-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-aiohttp-xmlrpc-0:1.5.0-6.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-aiosignal-0:1.3.1-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-asgiref-0:3.6.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-async-timeout-0:4.0.2-6.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-asyncio-throttle-0:1.0.2-7.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-attrs-0:21.4.0-6.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-backoff-0:2.2.1-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-brotli-0:1.0.9-6.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-brotli-debuginfo-0:1.0.9-6.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-certifi-0:2022.12.7-5.0.1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-charset-normalizer-0:2.1.1-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-click-0:8.1.3-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-createrepo_c-0:1.1.3-1.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-createrepo_c-debuginfo-0:1.1.3-1.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-dateutil-0:2.8.2-7.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-defusedxml-0:0.7.1-7.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-deprecated-0:1.2.13-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-diff-match-patch-0:20200713-7.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-django-0:4.2.15-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-django-filter-0:23.2-4.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-django-guid-0:3.3.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-django-import-export-0:3.1.0-4.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-django-lifecycle-0:1.0.0-4.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-django-readonly-field-0:1.1.2-4.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-djangorestframework-0:3.14.0-4.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-djangorestframework-queryfields-0:1.0.0-8.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-drf-access-policy-0:1.3.0-4.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-drf-nested-routers-0:0.93.4-6.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-drf-spectacular-0:0.26.5-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-dynaconf-0:3.1.12-4.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-ecdsa-0:0.18.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-et-xmlfile-0:1.1.0-6.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-frozenlist-0:1.3.3-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-frozenlist-debuginfo-0:1.3.3-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-future-0:0.18.3-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-gnupg-0:0.5.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-googleapis-common-protos-0:1.59.1-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-grpcio-0:1.65.4-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-grpcio-debuginfo-0:1.65.4-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-gunicorn-0:22.0.0-1.0.1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-importlib-metadata-0:6.0.1-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-inflection-0:0.5.1-7.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-iniparse-0:0.4-40.0.1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-jinja2-0:3.1.4-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-jq-0:1.6.0-4.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-json_stream_rs_tokenizer-0:0.4.25-4.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-jsonschema-0:4.10.3-4.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-libcomps-0:0.1.21-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-libcomps-debuginfo-0:0.1.21-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-m2crypto-0:0.40.1-1.0.2.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-m2crypto-debuginfo-0:0.40.1-1.0.2.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-markuppy-0:1.14-7.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-markupsafe-0:2.1.2-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-markupsafe-debuginfo-0:2.1.2-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-multidict-0:6.0.4-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-multidict-debuginfo-0:6.0.4-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-odfpy-0:1.4.1-10.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-openpyxl-0:3.1.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-packaging-0:21.3-6.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-productmd-0:1.33-7.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-protobuf-0:4.21.6-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-psycopg-0:3.2.3-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-psycopg_c-0:3.2.3-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-psycopg_c-debuginfo-0:3.2.3-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pulp-container-0:2.20.3-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pulp-glue-0:0.29.2-2.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pulp-rpm-0:3.26.1-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pulpcore-0:3.49.22-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pyOpenSSL-0:24.1.0-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pycares-0:4.1.2-6.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pycares-debuginfo-0:4.1.2-6.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pycparser-0:2.21-6.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pycryptodomex-0:3.20.0-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pycryptodomex-debuginfo-0:3.20.0-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pygtrie-0:2.5.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pyjwkest-0:1.4.2-9.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pyjwt-0:2.5.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pyparsing-0:3.1.1-4.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pyrsistent-0:0.18.1-6.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pyrsistent-debuginfo-0:0.18.1-6.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pytz-0:2022.2.1-6.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-redis-0:4.3.4-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-requests-0:2.32.3-2.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-rhsm-0:1.19.2-7.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-rhsm-debuginfo-0:1.19.2-7.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-solv-0:0.7.28-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-solv-debuginfo-0:0.7.28-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-sqlparse-0:0.5.0-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-tablib-0:3.3.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-types-cryptography-0:3.3.23.2-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-typing-extensions-0:4.7.1-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-uritemplate-0:4.1.1-6.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-url-normalize-0:1.4.3-8.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-urllib3-0:2.2.3-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-urlman-0:2.0.1-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-uuid6-0:2023.5.2-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-whitenoise-0:6.0.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-wrapt-0:1.14.1-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-wrapt-debuginfo-0:1.14.1-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-xlrd-0:2.0.1-9.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-xlwt-0:1.3.0-7.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-yarl-0:1.8.2-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-yarl-debuginfo-0:1.8.2-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-zipp-0:3.4.0-8.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-authorizer-0:2.0.0-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-authorizer-0:2.0.0-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-authorizer-cert-0:2.0.0-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-authorizer-cert-0:2.0.0-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-fetcher-0:2.0.0-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-fetcher-0:2.0.0-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-mirror-0:2.0.0-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-mirror-0:2.0.0-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-installer-0:4.11.0.2-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-installer-0:4.11.0.2-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-tools-0:4.11.0.4-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-tools-0:4.11.0.4-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-tools-libs-0:4.11.0.4-1.el8ui.noarch	—	Workaround

Threats

Impact Important

CVE-2024-27306

A flaw was found in aiohttp, an asynchronous HTTP client/server framework for asyncio and Python. When using "web.static(..., show_index=True)", the resulting index pages do not escape file names. If users can upload files with arbitrary filenames to the static directory, the server is vulnerable to cross-site scripting (XSS) attacks.

6.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: 8Base-RHUI-4:python-aiohttp-0:3.9.4-1.el8ui.src	—	Vendor Fix fix
Unresolved product id: 8Base-RHUI-4:python-aiohttp-debugsource-0:3.9.4-1.el8ui.x86_64	—	Vendor Fix fix
Unresolved product id: 8Base-RHUI-4:python3.11-aiohttp-0:3.9.4-1.el8ui.x86_64	—	Vendor Fix fix
Unresolved product id: 8Base-RHUI-4:python3.11-aiohttp-debuginfo-0:3.9.4-1.el8ui.x86_64	—	Vendor Fix fix

Known not affected 251 products

Product	Identifier	Version	Remediation
Unresolved product id: 8Base-RHUI-4:ansible-collection-community-crypto-0:2.21.1-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:ansible-collection-community-crypto-0:2.21.1-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:createrepo_c-0:1.1.3-1.0.1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:createrepo_c-debuginfo-0:1.1.3-1.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:createrepo_c-debugsource-0:1.1.3-1.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:createrepo_c-libs-0:1.1.3-1.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:createrepo_c-libs-debuginfo-0:1.1.3-1.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:libcomps-0:0.1.21-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:libcomps-0:0.1.21-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:libcomps-debuginfo-0:0.1.21-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:libcomps-debugsource-0:0.1.21-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:m2crypto-0:0.40.1-1.0.2.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:m2crypto-debuginfo-0:0.40.1-1.0.2.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:m2crypto-debugsource-0:0.40.1-1.0.2.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-aiodns-0:3.0.0-7.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-aiofiles-0:22.1.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-aiohttp-xmlrpc-0:1.5.0-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-aiosignal-0:1.3.1-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-asgiref-0:3.6.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-async-timeout-0:4.0.2-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-asyncio-throttle-0:1.0.2-7.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-attrs-0:21.4.0-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-backoff-0:2.2.1-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-brotli-0:1.0.9-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-brotli-debugsource-0:1.0.9-6.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-certifi-0:2022.12.7-5.0.1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-charset-normalizer-0:2.1.1-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-click-0:8.1.3-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-cryptography-0:42.0.8-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-cryptography-debugsource-0:42.0.8-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-dateutil-0:2.8.2-7.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-defusedxml-0:0.7.1-7.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-deprecated-0:1.2.13-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-diff-match-patch-0:20200713-7.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-django-0:4.2.15-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-django-filter-0:23.2-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-django-guid-0:3.3.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-django-import-export-0:3.1.0-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-django-lifecycle-0:1.0.0-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-django-readonly-field-0:1.1.2-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-djangorestframework-0:3.14.0-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-djangorestframework-queryfields-0:1.0.0-8.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-drf-access-policy-0:1.3.0-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-drf-nested-routers-0:0.93.4-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-drf-spectacular-0:0.26.5-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-dynaconf-0:3.1.12-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-ecdsa-0:0.18.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-et-xmlfile-0:1.1.0-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-frozenlist-0:1.3.3-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-frozenlist-debugsource-0:1.3.3-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-future-0:0.18.3-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-gnupg-0:0.5.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-googleapis-common-protos-0:1.59.1-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-grpcio-0:1.65.4-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-grpcio-debugsource-0:1.65.4-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-gunicorn-0:22.0.0-1.0.1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-importlib-metadata-0:6.0.1-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-inflection-0:0.5.1-7.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-iniparse-0:0.4-40.0.1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-jinja2-0:3.1.4-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-jq-0:1.6.0-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-json-stream-rs-tokenizer-0:0.4.25-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-jsonschema-0:4.10.3-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-markuppy-0:1.14-7.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-markupsafe-0:2.1.2-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-markupsafe-debugsource-0:2.1.2-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-multidict-0:6.0.4-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-multidict-debugsource-0:6.0.4-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-odfpy-0:1.4.1-10.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-openpyxl-0:3.1.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-packaging-0:21.3-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-productmd-0:1.33-7.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-protobuf-0:4.21.6-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-psycopg-0:3.2.3-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-psycopg_c-0:3.2.3-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-psycopg_c-debugsource-0:3.2.3-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-pulp-container-0:2.20.3-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pulp-container-client-0:2.21.0-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pulp-glue-0:0.29.2-2.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pulp-rpm-0:3.26.1-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pulp-rpm-client-0:3.25.4-1.0.1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pulpcore-0:3.49.22-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pulpcore-client-0:3.49.19-1.0.2.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pyOpenSSL-0:24.1.0-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pycares-0:4.1.2-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pycares-debugsource-0:4.1.2-6.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-pycparser-0:2.21-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pycryptodomex-0:3.20.0-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pycryptodomex-debugsource-0:3.20.0-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-pygtrie-0:2.5.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pyjwkest-0:1.4.2-9.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pyjwt-0:2.5.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pyparsing-0:3.1.1-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pyrsistent-0:0.18.1-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pyrsistent-debugsource-0:0.18.1-6.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-pytz-0:2022.2.1-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pyyaml-0:5.4.1-8.0.1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-redis-0:4.3.4-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-requests-0:2.32.3-2.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-rhsm-0:1.19.2-7.0.1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-rhsm-debugsource-0:1.19.2-7.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-solv-debugsource-0:0.7.28-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-sqlparse-0:0.5.0-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-tablib-0:3.3.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-types-cryptography-0:3.3.23.2-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-typing-extensions-0:4.7.1-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-uritemplate-0:4.1.1-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-url-normalize-0:1.4.3-8.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-urllib3-0:2.2.3-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-urlman-0:2.0.1-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-uuid6-0:2023.5.2-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-whitenoise-0:6.0.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-wrapt-0:1.14.1-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-wrapt-debugsource-0:1.14.1-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-xlrd-0:2.0.1-9.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-xlwt-0:1.3.0-7.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-yarl-0:1.8.2-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-yarl-debugsource-0:1.8.2-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-zipp-0:3.4.0-8.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python3-certifi-0:2022.12.7-5.0.1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3-createrepo_c-0:1.1.3-1.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3-createrepo_c-debuginfo-0:1.1.3-1.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3-libcomps-0:0.1.21-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3-libcomps-debuginfo-0:0.1.21-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3-m2crypto-0:0.40.1-1.0.2.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3-m2crypto-debuginfo-0:0.40.1-1.0.2.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3-pulp-container-client-0:2.21.0-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3-pulp-rpm-client-0:3.25.4-1.0.1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3-pulpcore-client-0:3.49.19-1.0.2.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3-pyyaml-0:5.4.1-8.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-aiodns-0:3.0.0-7.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-aiofiles-0:22.1.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-aiohttp-xmlrpc-0:1.5.0-6.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-aiosignal-0:1.3.1-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-asgiref-0:3.6.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-async-timeout-0:4.0.2-6.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-asyncio-throttle-0:1.0.2-7.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-attrs-0:21.4.0-6.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-backoff-0:2.2.1-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-brotli-0:1.0.9-6.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-brotli-debuginfo-0:1.0.9-6.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-certifi-0:2022.12.7-5.0.1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-charset-normalizer-0:2.1.1-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-click-0:8.1.3-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-createrepo_c-0:1.1.3-1.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-createrepo_c-debuginfo-0:1.1.3-1.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-cryptography-0:42.0.8-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-cryptography-debuginfo-0:42.0.8-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-dateutil-0:2.8.2-7.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-defusedxml-0:0.7.1-7.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-deprecated-0:1.2.13-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-diff-match-patch-0:20200713-7.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-django-0:4.2.15-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-django-filter-0:23.2-4.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-django-guid-0:3.3.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-django-import-export-0:3.1.0-4.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-django-lifecycle-0:1.0.0-4.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-django-readonly-field-0:1.1.2-4.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-djangorestframework-0:3.14.0-4.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-djangorestframework-queryfields-0:1.0.0-8.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-drf-access-policy-0:1.3.0-4.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-drf-nested-routers-0:0.93.4-6.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-drf-spectacular-0:0.26.5-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-dynaconf-0:3.1.12-4.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-ecdsa-0:0.18.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-et-xmlfile-0:1.1.0-6.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-frozenlist-0:1.3.3-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-frozenlist-debuginfo-0:1.3.3-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-future-0:0.18.3-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-gnupg-0:0.5.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-googleapis-common-protos-0:1.59.1-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-grpcio-0:1.65.4-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-grpcio-debuginfo-0:1.65.4-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-gunicorn-0:22.0.0-1.0.1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-importlib-metadata-0:6.0.1-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-inflection-0:0.5.1-7.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-iniparse-0:0.4-40.0.1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-jinja2-0:3.1.4-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-jq-0:1.6.0-4.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-json_stream_rs_tokenizer-0:0.4.25-4.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-jsonschema-0:4.10.3-4.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-libcomps-0:0.1.21-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-libcomps-debuginfo-0:0.1.21-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-m2crypto-0:0.40.1-1.0.2.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-m2crypto-debuginfo-0:0.40.1-1.0.2.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-markuppy-0:1.14-7.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-markupsafe-0:2.1.2-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-markupsafe-debuginfo-0:2.1.2-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-multidict-0:6.0.4-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-multidict-debuginfo-0:6.0.4-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-odfpy-0:1.4.1-10.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-openpyxl-0:3.1.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-packaging-0:21.3-6.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-productmd-0:1.33-7.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-protobuf-0:4.21.6-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-psycopg-0:3.2.3-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-psycopg_c-0:3.2.3-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-psycopg_c-debuginfo-0:3.2.3-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-pulp-container-0:2.20.3-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pulp-glue-0:0.29.2-2.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pulp-rpm-0:3.26.1-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pulpcore-0:3.49.22-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pyOpenSSL-0:24.1.0-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pycares-0:4.1.2-6.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-pycares-debuginfo-0:4.1.2-6.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-pycparser-0:2.21-6.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pycryptodomex-0:3.20.0-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-pycryptodomex-debuginfo-0:3.20.0-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-pygtrie-0:2.5.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pyjwkest-0:1.4.2-9.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pyjwt-0:2.5.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pyparsing-0:3.1.1-4.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pyrsistent-0:0.18.1-6.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-pyrsistent-debuginfo-0:0.18.1-6.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-pytz-0:2022.2.1-6.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-redis-0:4.3.4-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-requests-0:2.32.3-2.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-rhsm-0:1.19.2-7.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-rhsm-debuginfo-0:1.19.2-7.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-solv-0:0.7.28-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-solv-debuginfo-0:0.7.28-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-sqlparse-0:0.5.0-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-tablib-0:3.3.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-types-cryptography-0:3.3.23.2-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-typing-extensions-0:4.7.1-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-uritemplate-0:4.1.1-6.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-url-normalize-0:1.4.3-8.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-urllib3-0:2.2.3-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-urlman-0:2.0.1-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-uuid6-0:2023.5.2-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-whitenoise-0:6.0.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-wrapt-0:1.14.1-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-wrapt-debuginfo-0:1.14.1-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-xlrd-0:2.0.1-9.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-xlwt-0:1.3.0-7.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-yarl-0:1.8.2-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-yarl-debuginfo-0:1.8.2-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-zipp-0:3.4.0-8.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-authorizer-0:2.0.0-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-authorizer-0:2.0.0-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-authorizer-cert-0:2.0.0-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-authorizer-cert-0:2.0.0-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-fetcher-0:2.0.0-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-fetcher-0:2.0.0-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-mirror-0:2.0.0-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-mirror-0:2.0.0-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:rhui-installer-0:4.11.0.2-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:rhui-installer-0:4.11.0.2-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:rhui-tools-0:4.11.0.4-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:rhui-tools-0:4.11.0.4-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:rhui-tools-libs-0:4.11.0.4-1.el8ui.noarch		—

Threats

Impact Moderate

CVE-2024-30251

An infinite loop flaw was found in aiohttp when handling POST (multipart/form-data) requests. This flaw allows an attacker to send a specially crafted request, leading the server to enter an infinite loop and render it unable to process any further requests. This denial of service can be triggered by a single unauthenticated POST request. AIOHTTP handles multipart strings through a process of segmenting them into chunks. The reading of each chunk is performed under the control of an asynchronous wait, ensuring that the operation completes before proceeding. A vulnerability was identified where a specially crafted request could trigger an infinite loop due to improper detection of the end-of-file (EOF) marker within the content. The resolution involves the implementation of an enhanced checking mechanism. This mechanism correctly assigns the EOF marker to the chunk in question upon the successful completion of content reading, thereby preventing the infinite loop scenario.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Affected products

Fixed 4 products, the same list as for CVE-2024-27306

Known not affected 251 products, the same list as for CVE-2024-27306

Threats

Impact Moderate

CVE-2024-34064

A flaw was found in jinja2. The `xmlattr` filter accepts keys containing non-attribute characters. XML/HTML attributes cannot contain spaces, `/`, `>`, or `=`, as each would then be interpreted as starting a separate attribute. If an application accepts keys (as opposed to only values) as user input, and renders these in pages that other users see as well, an attacker could inject other attributes and perform cross-site scripting (XSS).

5.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 2 products

Product	Identifier	Version	Remediation
Unresolved product id: 8Base-RHUI-4:python-jinja2-0:3.1.4-1.el8ui.src		—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-jinja2-0:3.1.4-1.el8ui.noarch		—	Vendor Fix fix Workaround

Known not affected 253 products

Product	Version	Remediation
Unresolved product id: 8Base-RHUI-4:ansible-collection-community-crypto-0:2.21.1-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:ansible-collection-community-crypto-0:2.21.1-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:createrepo_c-0:1.1.3-1.0.1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:createrepo_c-debuginfo-0:1.1.3-1.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:createrepo_c-debugsource-0:1.1.3-1.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:createrepo_c-libs-0:1.1.3-1.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:createrepo_c-libs-debuginfo-0:1.1.3-1.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:libcomps-0:0.1.21-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:libcomps-0:0.1.21-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:libcomps-debuginfo-0:0.1.21-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:libcomps-debugsource-0:0.1.21-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:m2crypto-0:0.40.1-1.0.2.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:m2crypto-debuginfo-0:0.40.1-1.0.2.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:m2crypto-debugsource-0:0.40.1-1.0.2.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-aiodns-0:3.0.0-7.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-aiofiles-0:22.1.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-aiohttp-0:3.9.4-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-aiohttp-debugsource-0:3.9.4-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-aiohttp-xmlrpc-0:1.5.0-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-aiosignal-0:1.3.1-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-asgiref-0:3.6.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-async-timeout-0:4.0.2-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-asyncio-throttle-0:1.0.2-7.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-attrs-0:21.4.0-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-backoff-0:2.2.1-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-brotli-0:1.0.9-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-brotli-debugsource-0:1.0.9-6.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-certifi-0:2022.12.7-5.0.1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-charset-normalizer-0:2.1.1-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-click-0:8.1.3-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-cryptography-0:42.0.8-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-cryptography-debugsource-0:42.0.8-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-dateutil-0:2.8.2-7.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-defusedxml-0:0.7.1-7.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-deprecated-0:1.2.13-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-diff-match-patch-0:20200713-7.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-django-0:4.2.15-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-django-filter-0:23.2-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-django-guid-0:3.3.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-django-import-export-0:3.1.0-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-django-lifecycle-0:1.0.0-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-django-readonly-field-0:1.1.2-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-djangorestframework-0:3.14.0-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-djangorestframework-queryfields-0:1.0.0-8.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-drf-access-policy-0:1.3.0-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-drf-nested-routers-0:0.93.4-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-drf-spectacular-0:0.26.5-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-dynaconf-0:3.1.12-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-ecdsa-0:0.18.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-et-xmlfile-0:1.1.0-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-frozenlist-0:1.3.3-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-frozenlist-debugsource-0:1.3.3-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-future-0:0.18.3-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-gnupg-0:0.5.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-googleapis-common-protos-0:1.59.1-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-grpcio-0:1.65.4-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-grpcio-debugsource-0:1.65.4-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-gunicorn-0:22.0.0-1.0.1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-importlib-metadata-0:6.0.1-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-inflection-0:0.5.1-7.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-iniparse-0:0.4-40.0.1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-jq-0:1.6.0-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-json-stream-rs-tokenizer-0:0.4.25-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-jsonschema-0:4.10.3-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-markuppy-0:1.14-7.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-markupsafe-0:2.1.2-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-markupsafe-debugsource-0:2.1.2-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-multidict-0:6.0.4-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-multidict-debugsource-0:6.0.4-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-odfpy-0:1.4.1-10.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-openpyxl-0:3.1.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-packaging-0:21.3-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-productmd-0:1.33-7.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-protobuf-0:4.21.6-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-psycopg-0:3.2.3-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-psycopg_c-0:3.2.3-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-psycopg_c-debugsource-0:3.2.3-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pulp-container-0:2.20.3-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pulp-container-client-0:2.21.0-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pulp-glue-0:0.29.2-2.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pulp-rpm-0:3.26.1-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pulp-rpm-client-0:3.25.4-1.0.1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pulpcore-0:3.49.22-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pulpcore-client-0:3.49.19-1.0.2.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pyOpenSSL-0:24.1.0-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pycares-0:4.1.2-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pycares-debugsource-0:4.1.2-6.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pycparser-0:2.21-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pycryptodomex-0:3.20.0-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pycryptodomex-debugsource-0:3.20.0-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pygtrie-0:2.5.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pyjwkest-0:1.4.2-9.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pyjwt-0:2.5.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pyparsing-0:3.1.1-4.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pyrsistent-0:0.18.1-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pyrsistent-debugsource-0:0.18.1-6.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pytz-0:2022.2.1-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-pyyaml-0:5.4.1-8.0.1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-redis-0:4.3.4-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-requests-0:2.32.3-2.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-rhsm-0:1.19.2-7.0.1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-rhsm-debugsource-0:1.19.2-7.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-solv-debugsource-0:0.7.28-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-sqlparse-0:0.5.0-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-tablib-0:3.3.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-types-cryptography-0:3.3.23.2-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-typing-extensions-0:4.7.1-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-uritemplate-0:4.1.1-6.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-url-normalize-0:1.4.3-8.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-urllib3-0:2.2.3-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-urlman-0:2.0.1-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-uuid6-0:2023.5.2-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-whitenoise-0:6.0.0-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-wrapt-0:1.14.1-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-wrapt-debugsource-0:1.14.1-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-xlrd-0:2.0.1-9.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-xlwt-0:1.3.0-7.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-yarl-0:1.8.2-5.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-yarl-debugsource-0:1.8.2-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python-zipp-0:3.4.0-8.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-certifi-0:2022.12.7-5.0.1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-createrepo_c-0:1.1.3-1.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-createrepo_c-debuginfo-0:1.1.3-1.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-libcomps-0:0.1.21-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-libcomps-debuginfo-0:0.1.21-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-m2crypto-0:0.40.1-1.0.2.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-m2crypto-debuginfo-0:0.40.1-1.0.2.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-pulp-container-client-0:2.21.0-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-pulp-rpm-client-0:3.25.4-1.0.1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-pulpcore-client-0:3.49.19-1.0.2.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3-pyyaml-0:5.4.1-8.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-aiodns-0:3.0.0-7.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-aiofiles-0:22.1.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-aiohttp-0:3.9.4-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-aiohttp-debuginfo-0:3.9.4-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-aiohttp-xmlrpc-0:1.5.0-6.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-aiosignal-0:1.3.1-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-asgiref-0:3.6.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-async-timeout-0:4.0.2-6.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-asyncio-throttle-0:1.0.2-7.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-attrs-0:21.4.0-6.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-backoff-0:2.2.1-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-brotli-0:1.0.9-6.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-brotli-debuginfo-0:1.0.9-6.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-certifi-0:2022.12.7-5.0.1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-charset-normalizer-0:2.1.1-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-click-0:8.1.3-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-createrepo_c-0:1.1.3-1.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-createrepo_c-debuginfo-0:1.1.3-1.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-cryptography-0:42.0.8-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-cryptography-debuginfo-0:42.0.8-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-dateutil-0:2.8.2-7.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-defusedxml-0:0.7.1-7.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-deprecated-0:1.2.13-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-diff-match-patch-0:20200713-7.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-django-0:4.2.15-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-django-filter-0:23.2-4.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-django-guid-0:3.3.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-django-import-export-0:3.1.0-4.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-django-lifecycle-0:1.0.0-4.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-django-readonly-field-0:1.1.2-4.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-djangorestframework-0:3.14.0-4.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-djangorestframework-queryfields-0:1.0.0-8.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-drf-access-policy-0:1.3.0-4.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-drf-nested-routers-0:0.93.4-6.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-drf-spectacular-0:0.26.5-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-dynaconf-0:3.1.12-4.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-ecdsa-0:0.18.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-et-xmlfile-0:1.1.0-6.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-frozenlist-0:1.3.3-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-frozenlist-debuginfo-0:1.3.3-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-future-0:0.18.3-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-gnupg-0:0.5.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-googleapis-common-protos-0:1.59.1-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-grpcio-0:1.65.4-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-grpcio-debuginfo-0:1.65.4-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-gunicorn-0:22.0.0-1.0.1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-importlib-metadata-0:6.0.1-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-inflection-0:0.5.1-7.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-iniparse-0:0.4-40.0.1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-jq-0:1.6.0-4.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-json_stream_rs_tokenizer-0:0.4.25-4.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-jsonschema-0:4.10.3-4.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-libcomps-0:0.1.21-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-libcomps-debuginfo-0:0.1.21-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-m2crypto-0:0.40.1-1.0.2.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-m2crypto-debuginfo-0:0.40.1-1.0.2.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-markuppy-0:1.14-7.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-markupsafe-0:2.1.2-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-markupsafe-debuginfo-0:2.1.2-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-multidict-0:6.0.4-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-multidict-debuginfo-0:6.0.4-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-odfpy-0:1.4.1-10.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-openpyxl-0:3.1.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-packaging-0:21.3-6.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-productmd-0:1.33-7.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-protobuf-0:4.21.6-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-psycopg-0:3.2.3-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-psycopg_c-0:3.2.3-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-psycopg_c-debuginfo-0:3.2.3-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pulp-container-0:2.20.3-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pulp-glue-0:0.29.2-2.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pulp-rpm-0:3.26.1-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pulpcore-0:3.49.22-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pyOpenSSL-0:24.1.0-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pycares-0:4.1.2-6.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pycares-debuginfo-0:4.1.2-6.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pycparser-0:2.21-6.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pycryptodomex-0:3.20.0-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pycryptodomex-debuginfo-0:3.20.0-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pygtrie-0:2.5.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pyjwkest-0:1.4.2-9.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pyjwt-0:2.5.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pyparsing-0:3.1.1-4.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pyrsistent-0:0.18.1-6.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pyrsistent-debuginfo-0:0.18.1-6.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-pytz-0:2022.2.1-6.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-redis-0:4.3.4-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-requests-0:2.32.3-2.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-rhsm-0:1.19.2-7.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-rhsm-debuginfo-0:1.19.2-7.0.1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-solv-0:0.7.28-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-solv-debuginfo-0:0.7.28-1.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-sqlparse-0:0.5.0-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-tablib-0:3.3.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-types-cryptography-0:3.3.23.2-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-typing-extensions-0:4.7.1-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-uritemplate-0:4.1.1-6.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-url-normalize-0:1.4.3-8.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-urllib3-0:2.2.3-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-urlman-0:2.0.1-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-uuid6-0:2023.5.2-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-whitenoise-0:6.0.0-5.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-wrapt-0:1.14.1-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-wrapt-debuginfo-0:1.14.1-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-xlrd-0:2.0.1-9.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-xlwt-0:1.3.0-7.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-yarl-0:1.8.2-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-yarl-debuginfo-0:1.8.2-5.el8ui.x86_64	—	Workaround
Unresolved product id: 8Base-RHUI-4:python3.11-zipp-0:3.4.0-8.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-authorizer-0:2.0.0-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-authorizer-0:2.0.0-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-authorizer-cert-0:2.0.0-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-authorizer-cert-0:2.0.0-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-fetcher-0:2.0.0-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-fetcher-0:2.0.0-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-mirror-0:2.0.0-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-mirror-0:2.0.0-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-installer-0:4.11.0.2-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-installer-0:4.11.0.2-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-tools-0:4.11.0.4-1.el8ui.noarch	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-tools-0:4.11.0.4-1.el8ui.src	—	Workaround
Unresolved product id: 8Base-RHUI-4:rhui-tools-libs-0:4.11.0.4-1.el8ui.noarch	—	Workaround

Threats

Impact Moderate

CVE-2024-35195

An incorrect control flow implementation vulnerability was found in Requests. If the first request in a session is made with verify=False, all subsequent requests to the same host will continue to ignore cert verification.

5.6 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N

CWE-670 - Always-Incorrect Control Flow Implementation

Affected products

Fixed 2 products

Product	Identifier	Version	Remediation
Unresolved product id: 8Base-RHUI-4:python-requests-0:2.32.3-2.el8ui.src		—	Vendor Fix fix
Unresolved product id: 8Base-RHUI-4:python3.11-requests-0:2.32.3-2.el8ui.noarch		—	Vendor Fix fix

Known not affected 253 products

Product	Identifier	Version	Remediation
Unresolved product id: 8Base-RHUI-4:ansible-collection-community-crypto-0:2.21.1-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:ansible-collection-community-crypto-0:2.21.1-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:createrepo_c-0:1.1.3-1.0.1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:createrepo_c-debuginfo-0:1.1.3-1.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:createrepo_c-debugsource-0:1.1.3-1.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:createrepo_c-libs-0:1.1.3-1.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:createrepo_c-libs-debuginfo-0:1.1.3-1.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:libcomps-0:0.1.21-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:libcomps-0:0.1.21-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:libcomps-debuginfo-0:0.1.21-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:libcomps-debugsource-0:0.1.21-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:m2crypto-0:0.40.1-1.0.2.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:m2crypto-debuginfo-0:0.40.1-1.0.2.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:m2crypto-debugsource-0:0.40.1-1.0.2.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-aiodns-0:3.0.0-7.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-aiofiles-0:22.1.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-aiohttp-0:3.9.4-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-aiohttp-debugsource-0:3.9.4-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-aiohttp-xmlrpc-0:1.5.0-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-aiosignal-0:1.3.1-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-asgiref-0:3.6.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-async-timeout-0:4.0.2-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-asyncio-throttle-0:1.0.2-7.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-attrs-0:21.4.0-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-backoff-0:2.2.1-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-brotli-0:1.0.9-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-brotli-debugsource-0:1.0.9-6.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-certifi-0:2022.12.7-5.0.1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-charset-normalizer-0:2.1.1-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-click-0:8.1.3-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-cryptography-0:42.0.8-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-cryptography-debugsource-0:42.0.8-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-dateutil-0:2.8.2-7.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-defusedxml-0:0.7.1-7.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-deprecated-0:1.2.13-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-diff-match-patch-0:20200713-7.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-django-0:4.2.15-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-django-filter-0:23.2-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-django-guid-0:3.3.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-django-import-export-0:3.1.0-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-django-lifecycle-0:1.0.0-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-django-readonly-field-0:1.1.2-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-djangorestframework-0:3.14.0-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-djangorestframework-queryfields-0:1.0.0-8.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-drf-access-policy-0:1.3.0-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-drf-nested-routers-0:0.93.4-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-drf-spectacular-0:0.26.5-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-dynaconf-0:3.1.12-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-ecdsa-0:0.18.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-et-xmlfile-0:1.1.0-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-frozenlist-0:1.3.3-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-frozenlist-debugsource-0:1.3.3-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-future-0:0.18.3-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-gnupg-0:0.5.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-googleapis-common-protos-0:1.59.1-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-grpcio-0:1.65.4-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-grpcio-debugsource-0:1.65.4-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-gunicorn-0:22.0.0-1.0.1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-importlib-metadata-0:6.0.1-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-inflection-0:0.5.1-7.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-iniparse-0:0.4-40.0.1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-jinja2-0:3.1.4-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-jq-0:1.6.0-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-json-stream-rs-tokenizer-0:0.4.25-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-jsonschema-0:4.10.3-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-markuppy-0:1.14-7.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-markupsafe-0:2.1.2-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-markupsafe-debugsource-0:2.1.2-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-multidict-0:6.0.4-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-multidict-debugsource-0:6.0.4-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-odfpy-0:1.4.1-10.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-openpyxl-0:3.1.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-packaging-0:21.3-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-productmd-0:1.33-7.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-protobuf-0:4.21.6-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-psycopg-0:3.2.3-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-psycopg_c-0:3.2.3-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-psycopg_c-debugsource-0:3.2.3-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-pulp-container-0:2.20.3-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pulp-container-client-0:2.21.0-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pulp-glue-0:0.29.2-2.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pulp-rpm-0:3.26.1-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pulp-rpm-client-0:3.25.4-1.0.1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pulpcore-0:3.49.22-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pulpcore-client-0:3.49.19-1.0.2.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pyOpenSSL-0:24.1.0-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pycares-0:4.1.2-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pycares-debugsource-0:4.1.2-6.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-pycparser-0:2.21-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pycryptodomex-0:3.20.0-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pycryptodomex-debugsource-0:3.20.0-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-pygtrie-0:2.5.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pyjwkest-0:1.4.2-9.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pyjwt-0:2.5.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pyparsing-0:3.1.1-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pyrsistent-0:0.18.1-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pyrsistent-debugsource-0:0.18.1-6.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-pytz-0:2022.2.1-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pyyaml-0:5.4.1-8.0.1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-redis-0:4.3.4-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-rhsm-0:1.19.2-7.0.1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-rhsm-debugsource-0:1.19.2-7.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-solv-debugsource-0:0.7.28-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-sqlparse-0:0.5.0-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-tablib-0:3.3.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-types-cryptography-0:3.3.23.2-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-typing-extensions-0:4.7.1-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-uritemplate-0:4.1.1-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-url-normalize-0:1.4.3-8.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-urllib3-0:2.2.3-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-urlman-0:2.0.1-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-uuid6-0:2023.5.2-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-whitenoise-0:6.0.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-wrapt-0:1.14.1-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-wrapt-debugsource-0:1.14.1-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-xlrd-0:2.0.1-9.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-xlwt-0:1.3.0-7.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-yarl-0:1.8.2-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-yarl-debugsource-0:1.8.2-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-zipp-0:3.4.0-8.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python3-certifi-0:2022.12.7-5.0.1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3-createrepo_c-0:1.1.3-1.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3-createrepo_c-debuginfo-0:1.1.3-1.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3-libcomps-0:0.1.21-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3-libcomps-debuginfo-0:0.1.21-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3-m2crypto-0:0.40.1-1.0.2.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3-m2crypto-debuginfo-0:0.40.1-1.0.2.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3-pulp-container-client-0:2.21.0-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3-pulp-rpm-client-0:3.25.4-1.0.1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3-pulpcore-client-0:3.49.19-1.0.2.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3-pyyaml-0:5.4.1-8.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-aiodns-0:3.0.0-7.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-aiofiles-0:22.1.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-aiohttp-0:3.9.4-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-aiohttp-debuginfo-0:3.9.4-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-aiohttp-xmlrpc-0:1.5.0-6.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-aiosignal-0:1.3.1-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-asgiref-0:3.6.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-async-timeout-0:4.0.2-6.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-asyncio-throttle-0:1.0.2-7.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-attrs-0:21.4.0-6.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-backoff-0:2.2.1-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-brotli-0:1.0.9-6.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-brotli-debuginfo-0:1.0.9-6.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-certifi-0:2022.12.7-5.0.1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-charset-normalizer-0:2.1.1-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-click-0:8.1.3-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-createrepo_c-0:1.1.3-1.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-createrepo_c-debuginfo-0:1.1.3-1.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-cryptography-0:42.0.8-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-cryptography-debuginfo-0:42.0.8-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-dateutil-0:2.8.2-7.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-defusedxml-0:0.7.1-7.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-deprecated-0:1.2.13-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-diff-match-patch-0:20200713-7.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-django-0:4.2.15-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-django-filter-0:23.2-4.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-django-guid-0:3.3.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-django-import-export-0:3.1.0-4.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-django-lifecycle-0:1.0.0-4.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-django-readonly-field-0:1.1.2-4.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-djangorestframework-0:3.14.0-4.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-djangorestframework-queryfields-0:1.0.0-8.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-drf-access-policy-0:1.3.0-4.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-drf-nested-routers-0:0.93.4-6.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-drf-spectacular-0:0.26.5-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-dynaconf-0:3.1.12-4.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-ecdsa-0:0.18.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-et-xmlfile-0:1.1.0-6.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-frozenlist-0:1.3.3-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-frozenlist-debuginfo-0:1.3.3-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-future-0:0.18.3-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-gnupg-0:0.5.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-googleapis-common-protos-0:1.59.1-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-grpcio-0:1.65.4-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-grpcio-debuginfo-0:1.65.4-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-gunicorn-0:22.0.0-1.0.1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-importlib-metadata-0:6.0.1-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-inflection-0:0.5.1-7.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-iniparse-0:0.4-40.0.1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-jinja2-0:3.1.4-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-jq-0:1.6.0-4.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-json_stream_rs_tokenizer-0:0.4.25-4.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-jsonschema-0:4.10.3-4.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-libcomps-0:0.1.21-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-libcomps-debuginfo-0:0.1.21-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-m2crypto-0:0.40.1-1.0.2.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-m2crypto-debuginfo-0:0.40.1-1.0.2.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-markuppy-0:1.14-7.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-markupsafe-0:2.1.2-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-markupsafe-debuginfo-0:2.1.2-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-multidict-0:6.0.4-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-multidict-debuginfo-0:6.0.4-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-odfpy-0:1.4.1-10.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-openpyxl-0:3.1.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-packaging-0:21.3-6.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-productmd-0:1.33-7.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-protobuf-0:4.21.6-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-psycopg-0:3.2.3-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-psycopg_c-0:3.2.3-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-psycopg_c-debuginfo-0:3.2.3-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-pulp-container-0:2.20.3-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pulp-glue-0:0.29.2-2.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pulp-rpm-0:3.26.1-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pulpcore-0:3.49.22-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pyOpenSSL-0:24.1.0-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pycares-0:4.1.2-6.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-pycares-debuginfo-0:4.1.2-6.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-pycparser-0:2.21-6.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pycryptodomex-0:3.20.0-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-pycryptodomex-debuginfo-0:3.20.0-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-pygtrie-0:2.5.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pyjwkest-0:1.4.2-9.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pyjwt-0:2.5.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pyparsing-0:3.1.1-4.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pyrsistent-0:0.18.1-6.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-pyrsistent-debuginfo-0:0.18.1-6.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-pytz-0:2022.2.1-6.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-redis-0:4.3.4-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-rhsm-0:1.19.2-7.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-rhsm-debuginfo-0:1.19.2-7.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-solv-0:0.7.28-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-solv-debuginfo-0:0.7.28-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-sqlparse-0:0.5.0-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-tablib-0:3.3.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-types-cryptography-0:3.3.23.2-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-typing-extensions-0:4.7.1-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-uritemplate-0:4.1.1-6.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-url-normalize-0:1.4.3-8.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-urllib3-0:2.2.3-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-urlman-0:2.0.1-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-uuid6-0:2023.5.2-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-whitenoise-0:6.0.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-wrapt-0:1.14.1-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-wrapt-debuginfo-0:1.14.1-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-xlrd-0:2.0.1-9.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-xlwt-0:1.3.0-7.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-yarl-0:1.8.2-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-yarl-debuginfo-0:1.8.2-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-zipp-0:3.4.0-8.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-authorizer-0:2.0.0-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-authorizer-0:2.0.0-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-authorizer-cert-0:2.0.0-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-authorizer-cert-0:2.0.0-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-fetcher-0:2.0.0-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-fetcher-0:2.0.0-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-mirror-0:2.0.0-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-mirror-0:2.0.0-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:rhui-installer-0:4.11.0.2-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:rhui-installer-0:4.11.0.2-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:rhui-tools-0:4.11.0.4-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:rhui-tools-0:4.11.0.4-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:rhui-tools-libs-0:4.11.0.4-1.el8ui.noarch		—

Threats

Impact Moderate

CVE-2024-39614

A vulnerability was found in Python-Django in the get_supported_language_variant() function. The issue triggers when parsed with very long strings, including a specific set of characters, leading to a potential denial of service attack.

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-1287 - Improper Validation of Specified Type of Input

Affected products

Fixed 2 products

Product	Identifier	Version	Remediation
Unresolved product id: 8Base-RHUI-4:python-django-0:4.2.15-1.el8ui.src		—	Vendor Fix fix
Unresolved product id: 8Base-RHUI-4:python3.11-django-0:4.2.15-1.el8ui.noarch		—	Vendor Fix fix

Known not affected 253 products

Product	Identifier	Version	Remediation
Unresolved product id: 8Base-RHUI-4:ansible-collection-community-crypto-0:2.21.1-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:ansible-collection-community-crypto-0:2.21.1-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:createrepo_c-0:1.1.3-1.0.1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:createrepo_c-debuginfo-0:1.1.3-1.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:createrepo_c-debugsource-0:1.1.3-1.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:createrepo_c-libs-0:1.1.3-1.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:createrepo_c-libs-debuginfo-0:1.1.3-1.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:libcomps-0:0.1.21-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:libcomps-0:0.1.21-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:libcomps-debuginfo-0:0.1.21-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:libcomps-debugsource-0:0.1.21-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:m2crypto-0:0.40.1-1.0.2.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:m2crypto-debuginfo-0:0.40.1-1.0.2.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:m2crypto-debugsource-0:0.40.1-1.0.2.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-aiodns-0:3.0.0-7.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-aiofiles-0:22.1.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-aiohttp-0:3.9.4-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-aiohttp-debugsource-0:3.9.4-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-aiohttp-xmlrpc-0:1.5.0-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-aiosignal-0:1.3.1-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-asgiref-0:3.6.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-async-timeout-0:4.0.2-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-asyncio-throttle-0:1.0.2-7.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-attrs-0:21.4.0-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-backoff-0:2.2.1-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-brotli-0:1.0.9-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-brotli-debugsource-0:1.0.9-6.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-certifi-0:2022.12.7-5.0.1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-charset-normalizer-0:2.1.1-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-click-0:8.1.3-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-cryptography-0:42.0.8-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-cryptography-debugsource-0:42.0.8-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-dateutil-0:2.8.2-7.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-defusedxml-0:0.7.1-7.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-deprecated-0:1.2.13-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-diff-match-patch-0:20200713-7.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-django-filter-0:23.2-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-django-guid-0:3.3.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-django-import-export-0:3.1.0-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-django-lifecycle-0:1.0.0-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-django-readonly-field-0:1.1.2-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-djangorestframework-0:3.14.0-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-djangorestframework-queryfields-0:1.0.0-8.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-drf-access-policy-0:1.3.0-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-drf-nested-routers-0:0.93.4-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-drf-spectacular-0:0.26.5-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-dynaconf-0:3.1.12-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-ecdsa-0:0.18.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-et-xmlfile-0:1.1.0-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-frozenlist-0:1.3.3-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-frozenlist-debugsource-0:1.3.3-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-future-0:0.18.3-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-gnupg-0:0.5.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-googleapis-common-protos-0:1.59.1-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-grpcio-0:1.65.4-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-grpcio-debugsource-0:1.65.4-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-gunicorn-0:22.0.0-1.0.1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-importlib-metadata-0:6.0.1-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-inflection-0:0.5.1-7.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-iniparse-0:0.4-40.0.1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-jinja2-0:3.1.4-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-jq-0:1.6.0-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-json-stream-rs-tokenizer-0:0.4.25-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-jsonschema-0:4.10.3-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-markuppy-0:1.14-7.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-markupsafe-0:2.1.2-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-markupsafe-debugsource-0:2.1.2-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-multidict-0:6.0.4-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-multidict-debugsource-0:6.0.4-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-odfpy-0:1.4.1-10.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-openpyxl-0:3.1.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-packaging-0:21.3-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-productmd-0:1.33-7.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-protobuf-0:4.21.6-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-psycopg-0:3.2.3-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-psycopg_c-0:3.2.3-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-psycopg_c-debugsource-0:3.2.3-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-pulp-container-0:2.20.3-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pulp-container-client-0:2.21.0-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pulp-glue-0:0.29.2-2.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pulp-rpm-0:3.26.1-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pulp-rpm-client-0:3.25.4-1.0.1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pulpcore-0:3.49.22-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pulpcore-client-0:3.49.19-1.0.2.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pyOpenSSL-0:24.1.0-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pycares-0:4.1.2-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pycares-debugsource-0:4.1.2-6.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-pycparser-0:2.21-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pycryptodomex-0:3.20.0-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pycryptodomex-debugsource-0:3.20.0-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-pygtrie-0:2.5.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pyjwkest-0:1.4.2-9.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pyjwt-0:2.5.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pyparsing-0:3.1.1-4.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pyrsistent-0:0.18.1-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pyrsistent-debugsource-0:0.18.1-6.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-pytz-0:2022.2.1-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-pyyaml-0:5.4.1-8.0.1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-redis-0:4.3.4-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-requests-0:2.32.3-2.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-rhsm-0:1.19.2-7.0.1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-rhsm-debugsource-0:1.19.2-7.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-solv-debugsource-0:0.7.28-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-sqlparse-0:0.5.0-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-tablib-0:3.3.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-types-cryptography-0:3.3.23.2-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-typing-extensions-0:4.7.1-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-uritemplate-0:4.1.1-6.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-url-normalize-0:1.4.3-8.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-urllib3-0:2.2.3-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-urlman-0:2.0.1-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-uuid6-0:2023.5.2-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-whitenoise-0:6.0.0-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-wrapt-0:1.14.1-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-wrapt-debugsource-0:1.14.1-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-xlrd-0:2.0.1-9.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-xlwt-0:1.3.0-7.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-yarl-0:1.8.2-5.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python-yarl-debugsource-0:1.8.2-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python-zipp-0:3.4.0-8.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:python3-certifi-0:2022.12.7-5.0.1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3-createrepo_c-0:1.1.3-1.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3-createrepo_c-debuginfo-0:1.1.3-1.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3-libcomps-0:0.1.21-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3-libcomps-debuginfo-0:0.1.21-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3-m2crypto-0:0.40.1-1.0.2.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3-m2crypto-debuginfo-0:0.40.1-1.0.2.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3-pulp-container-client-0:2.21.0-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3-pulp-rpm-client-0:3.25.4-1.0.1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3-pulpcore-client-0:3.49.19-1.0.2.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3-pyyaml-0:5.4.1-8.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-aiodns-0:3.0.0-7.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-aiofiles-0:22.1.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-aiohttp-0:3.9.4-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-aiohttp-debuginfo-0:3.9.4-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-aiohttp-xmlrpc-0:1.5.0-6.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-aiosignal-0:1.3.1-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-asgiref-0:3.6.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-async-timeout-0:4.0.2-6.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-asyncio-throttle-0:1.0.2-7.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-attrs-0:21.4.0-6.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-backoff-0:2.2.1-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-brotli-0:1.0.9-6.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-brotli-debuginfo-0:1.0.9-6.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-certifi-0:2022.12.7-5.0.1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-charset-normalizer-0:2.1.1-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-click-0:8.1.3-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-createrepo_c-0:1.1.3-1.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-createrepo_c-debuginfo-0:1.1.3-1.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-cryptography-0:42.0.8-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-cryptography-debuginfo-0:42.0.8-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-dateutil-0:2.8.2-7.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-defusedxml-0:0.7.1-7.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-deprecated-0:1.2.13-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-diff-match-patch-0:20200713-7.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-django-filter-0:23.2-4.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-django-guid-0:3.3.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-django-import-export-0:3.1.0-4.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-django-lifecycle-0:1.0.0-4.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-django-readonly-field-0:1.1.2-4.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-djangorestframework-0:3.14.0-4.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-djangorestframework-queryfields-0:1.0.0-8.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-drf-access-policy-0:1.3.0-4.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-drf-nested-routers-0:0.93.4-6.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-drf-spectacular-0:0.26.5-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-dynaconf-0:3.1.12-4.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-ecdsa-0:0.18.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-et-xmlfile-0:1.1.0-6.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-frozenlist-0:1.3.3-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-frozenlist-debuginfo-0:1.3.3-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-future-0:0.18.3-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-gnupg-0:0.5.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-googleapis-common-protos-0:1.59.1-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-grpcio-0:1.65.4-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-grpcio-debuginfo-0:1.65.4-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-gunicorn-0:22.0.0-1.0.1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-importlib-metadata-0:6.0.1-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-inflection-0:0.5.1-7.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-iniparse-0:0.4-40.0.1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-jinja2-0:3.1.4-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-jq-0:1.6.0-4.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-json_stream_rs_tokenizer-0:0.4.25-4.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-jsonschema-0:4.10.3-4.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-libcomps-0:0.1.21-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-libcomps-debuginfo-0:0.1.21-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-m2crypto-0:0.40.1-1.0.2.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-m2crypto-debuginfo-0:0.40.1-1.0.2.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-markuppy-0:1.14-7.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-markupsafe-0:2.1.2-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-markupsafe-debuginfo-0:2.1.2-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-multidict-0:6.0.4-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-multidict-debuginfo-0:6.0.4-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-odfpy-0:1.4.1-10.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-openpyxl-0:3.1.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-packaging-0:21.3-6.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-productmd-0:1.33-7.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-protobuf-0:4.21.6-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-psycopg-0:3.2.3-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-psycopg_c-0:3.2.3-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-psycopg_c-debuginfo-0:3.2.3-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-pulp-container-0:2.20.3-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pulp-glue-0:0.29.2-2.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pulp-rpm-0:3.26.1-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pulpcore-0:3.49.22-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pyOpenSSL-0:24.1.0-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pycares-0:4.1.2-6.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-pycares-debuginfo-0:4.1.2-6.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-pycparser-0:2.21-6.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pycryptodomex-0:3.20.0-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-pycryptodomex-debuginfo-0:3.20.0-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-pygtrie-0:2.5.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pyjwkest-0:1.4.2-9.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pyjwt-0:2.5.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pyparsing-0:3.1.1-4.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-pyrsistent-0:0.18.1-6.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-pyrsistent-debuginfo-0:0.18.1-6.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-pytz-0:2022.2.1-6.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-redis-0:4.3.4-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-requests-0:2.32.3-2.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-rhsm-0:1.19.2-7.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-rhsm-debuginfo-0:1.19.2-7.0.1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-solv-0:0.7.28-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-solv-debuginfo-0:0.7.28-1.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-sqlparse-0:0.5.0-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-tablib-0:3.3.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-types-cryptography-0:3.3.23.2-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-typing-extensions-0:4.7.1-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-uritemplate-0:4.1.1-6.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-url-normalize-0:1.4.3-8.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-urllib3-0:2.2.3-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-urlman-0:2.0.1-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-uuid6-0:2023.5.2-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-whitenoise-0:6.0.0-5.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-wrapt-0:1.14.1-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-wrapt-debuginfo-0:1.14.1-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-xlrd-0:2.0.1-9.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-xlwt-0:1.3.0-7.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:python3.11-yarl-0:1.8.2-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-yarl-debuginfo-0:1.8.2-5.el8ui.x86_64		—
Unresolved product id: 8Base-RHUI-4:python3.11-zipp-0:3.4.0-8.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-authorizer-0:2.0.0-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-authorizer-0:2.0.0-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-authorizer-cert-0:2.0.0-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-authorizer-cert-0:2.0.0-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-fetcher-0:2.0.0-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-fetcher-0:2.0.0-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-mirror-0:2.0.0-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:rhui-cds-plugin-mirror-0:2.0.0-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:rhui-installer-0:4.11.0.2-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:rhui-installer-0:4.11.0.2-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:rhui-tools-0:4.11.0.4-1.el8ui.noarch		—
Unresolved product id: 8Base-RHUI-4:rhui-tools-0:4.11.0.4-1.el8ui.src		—
Unresolved product id: 8Base-RHUI-4:rhui-tools-libs-0:4.11.0.4-1.el8ui.noarch		—

Threats

Impact Moderate

CVE-2024-41989

A security issue was found in Django. If 'floatformat' received a string representation of a number in scientific notation with a large exponent, it could lead to significant memory consumption. To avoid this, decimals with more than 200 digits are now returned as is.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 2 products, the same list as for CVE-2024-39614

Known not affected 253 products, the same list as for CVE-2024-39614

Threats

Impact Moderate

CVE-2024-41990

A flaw was found in Django. Processing very large inputs with a specific sequence of characters with the urlize and urlizetrunc functions can cause a denial of service.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-130 - Improper Handling of Length Parameter Inconsistency

Affected products

Fixed 2 products, the same list as for CVE-2024-39614

Known not affected 253 products, the same list as for CVE-2024-39614

Threats

Impact Moderate

CVE-2024-41991

A flaw was found in Django. 'urlize', 'urlizetrunc', and 'AdminURLFieldWidget' may be subject to a denial of service attack via certain inputs with a very large number of Unicode characters.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 2 products, the same list as for CVE-2024-39614

Known not affected 253 products, the same list as for CVE-2024-39614

Threats

Impact Moderate

CVE-2024-42005

A flaw was found in Django. The QuerySet.values() and QuerySet.values_list() methods on models with a JSONField were subject to SQL injection in column aliases via a crafted JSON object key as a passed *arg.

7.3 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Affected products

Fixed 2 products, the same list as for CVE-2024-39614

Known not affected 253 products, the same list as for CVE-2024-39614

Threats

Impact Moderate

References

81 references

URL	Category
https://access.redhat.com/errata/RHSA-2025:1335	self
https://access.redhat.com/security/updates/classi…	external
https://docs.redhat.com/en/documentation/red_hat_…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2269617	external
https://bugzilla.redhat.com/show_bug.cgi?id=2275280	external
https://bugzilla.redhat.com/show_bug.cgi?id=2275989	external
https://bugzilla.redhat.com/show_bug.cgi?id=2278038	external
https://bugzilla.redhat.com/show_bug.cgi?id=2278710	external
https://bugzilla.redhat.com/show_bug.cgi?id=2279476	external
https://bugzilla.redhat.com/show_bug.cgi?id=2282114	external
https://bugzilla.redhat.com/show_bug.cgi?id=2295938	external
https://bugzilla.redhat.com/show_bug.cgi?id=2302433	external
https://bugzilla.redhat.com/show_bug.cgi?id=2302434	external
https://bugzilla.redhat.com/show_bug.cgi?id=2302435	external
https://bugzilla.redhat.com/show_bug.cgi?id=2302436	external
https://issues.redhat.com/browse/RHUI-429	external
https://issues.redhat.com/browse/RHUI-577	external
https://issues.redhat.com/browse/RHUI-617	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2024-1135	self
https://bugzilla.redhat.com/show_bug.cgi?id=2275280	external
https://www.cve.org/CVERecord?id=CVE-2024-1135	external
https://nvd.nist.gov/vuln/detail/CVE-2024-1135	external
https://github.com/advisories/GHSA-w3h3-4rj7-4ph4	external
https://github.com/benoitc/gunicorn/commit/ac29c9…	external
https://huntr.com/bounties/22158e34-cfd5-41ad-97e…	external
https://access.redhat.com/security/cve/CVE-2024-4340	self
https://bugzilla.redhat.com/show_bug.cgi?id=2278038	external
https://www.cve.org/CVERecord?id=CVE-2024-4340	external
https://nvd.nist.gov/vuln/detail/CVE-2024-4340	external
https://github.com/advisories/GHSA-2m57-hf25-phgg	external
https://access.redhat.com/security/cve/CVE-2024-7246	self
https://bugzilla.redhat.com/show_bug.cgi?id=2303104	external
https://www.cve.org/CVERecord?id=CVE-2024-7246	external
https://nvd.nist.gov/vuln/detail/CVE-2024-7246	external
https://github.com/grpc/grpc/issues/36245	external
https://access.redhat.com/security/cve/CVE-2024-26130	self
https://bugzilla.redhat.com/show_bug.cgi?id=2269617	external
https://www.cve.org/CVERecord?id=CVE-2024-26130	external
https://nvd.nist.gov/vuln/detail/CVE-2024-26130	external
https://access.redhat.com/security/cve/CVE-2024-27306	self
https://bugzilla.redhat.com/show_bug.cgi?id=2275989	external
https://www.cve.org/CVERecord?id=CVE-2024-27306	external
https://nvd.nist.gov/vuln/detail/CVE-2024-27306	external
https://access.redhat.com/security/cve/CVE-2024-30251	self
https://bugzilla.redhat.com/show_bug.cgi?id=2278710	external
https://www.cve.org/CVERecord?id=CVE-2024-30251	external
https://nvd.nist.gov/vuln/detail/CVE-2024-30251	external
https://github.com/aio-libs/aiohttp/security/advi…	external
https://www.openwall.com/lists/oss-security/2024/…	external
https://access.redhat.com/security/cve/CVE-2024-34064	self
https://bugzilla.redhat.com/show_bug.cgi?id=2279476	external
https://www.cve.org/CVERecord?id=CVE-2024-34064	external
https://nvd.nist.gov/vuln/detail/CVE-2024-34064	external
https://github.com/pallets/jinja/security/advisor…	external
https://access.redhat.com/security/cve/CVE-2024-35195	self
https://bugzilla.redhat.com/show_bug.cgi?id=2282114	external
https://www.cve.org/CVERecord?id=CVE-2024-35195	external
https://nvd.nist.gov/vuln/detail/CVE-2024-35195	external
https://github.com/psf/requests/security/advisori…	external
https://access.redhat.com/security/cve/CVE-2024-39614	self
https://bugzilla.redhat.com/show_bug.cgi?id=2295938	external
https://www.cve.org/CVERecord?id=CVE-2024-39614	external
https://nvd.nist.gov/vuln/detail/CVE-2024-39614	external
https://access.redhat.com/security/cve/CVE-2024-41989	self
https://bugzilla.redhat.com/show_bug.cgi?id=2302433	external
https://www.cve.org/CVERecord?id=CVE-2024-41989	external
https://nvd.nist.gov/vuln/detail/CVE-2024-41989	external
https://access.redhat.com/security/cve/CVE-2024-41990	self
https://bugzilla.redhat.com/show_bug.cgi?id=2302434	external
https://www.cve.org/CVERecord?id=CVE-2024-41990	external
https://nvd.nist.gov/vuln/detail/CVE-2024-41990	external
https://www.djangoproject.com/weblog/2024/aug/06/…	external
https://access.redhat.com/security/cve/CVE-2024-41991	self
https://bugzilla.redhat.com/show_bug.cgi?id=2302435	external
https://www.cve.org/CVERecord?id=CVE-2024-41991	external
https://nvd.nist.gov/vuln/detail/CVE-2024-41991	external
https://access.redhat.com/security/cve/CVE-2024-42005	self
https://bugzilla.redhat.com/show_bug.cgi?id=2302436	external
https://www.cve.org/CVERecord?id=CVE-2024-42005	external
https://nvd.nist.gov/vuln/detail/CVE-2024-42005	external

JSON

To clipboard

Loading 1.1 MB of JSON…

CVE-2024-1135 (GCVE-0-2024-1135)

Vulnerability from cvelistv5 – Published: 2024-04-16 00:00 – Updated: 2025-02-13 17:27

Title

HTTP Request Smuggling in benoitc/gunicorn

Summary

Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requests with conflicting Transfer-Encoding headers, attackers can bypass security restrictions and access restricted endpoints. This issue is due to Gunicorn's handling of Transfer-Encoding headers, where it incorrectly processes requests with multiple, conflicting Transfer-Encoding headers, treating them as chunked regardless of the final encoding specified. This vulnerability allows for a range of attacks including cache poisoning, session manipulation, and data exposure.

Severity

7.5 (High)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-04-19 17:32 UTC

CWE

CWE-444 - Inconsistent Interpretation of HTTP Requests

Assigner

@huntr_ai mitre root

References

3 references

URL	Tags
https://huntr.com/bounties/22158e34-cfd5-41ad-97e…
https://lists.debian.org/debian-lts-announce/2024…
https://lists.debian.org/debian-lts-announce/2024…

Impacted products

2 products

Vendor	Product	Version
benoitc	benoitc/gunicorn	Affected: unspecified , ≤ latest (custom)
benoitc	gunicorn	Affected: * cpe:2.3:a:benoitc:gunicorn::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:benoitc:gunicorn:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "gunicorn",
            "vendor": "benoitc",
            "versions": [
              {
                "status": "affected",
                "version": "*"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-1135",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-04-19T17:32:23.631972Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:59:56.871Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-12-20T07:02:46.961Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://huntr.com/bounties/22158e34-cfd5-41ad-97e0-a780773d96c1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00027.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/12/msg00018.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "benoitc/gunicorn",
          "vendor": "benoitc",
          "versions": [
            {
              "lessThanOrEqual": "latest",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requests with conflicting Transfer-Encoding headers, attackers can bypass security restrictions and access restricted endpoints. This issue is due to Gunicorn\u0027s handling of Transfer-Encoding headers, where it incorrectly processes requests with multiple, conflicting Transfer-Encoding headers, treating them as chunked regardless of the final encoding specified. This vulnerability allows for a range of attacks including cache poisoning, session manipulation, and data exposure."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-444",
              "description": "CWE-444 Inconsistent Interpretation of HTTP Requests",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-06-30T23:06:05.937Z",
        "orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
        "shortName": "@huntr_ai"
      },
      "references": [
        {
          "url": "https://huntr.com/bounties/22158e34-cfd5-41ad-97e0-a780773d96c1"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00027.html"
        }
      ],
      "source": {
        "advisory": "22158e34-cfd5-41ad-97e0-a780773d96c1",
        "discovery": "EXTERNAL"
      },
      "title": "HTTP Request Smuggling in benoitc/gunicorn"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
    "assignerShortName": "@huntr_ai",
    "cveId": "CVE-2024-1135",
    "datePublished": "2024-04-16T00:00:14.938Z",
    "dateReserved": "2024-01-31T18:15:14.296Z",
    "dateUpdated": "2025-02-13T17:27:34.444Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-26130 (GCVE-0-2024-26130)

Vulnerability from cvelistv5 – Published: 2024-02-21 16:28 – Updated: 2024-08-14 20:01

Title

cryptography NULL pointer deference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override

Summary

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Starting in version 38.0.0 and prior to version 42.0.4, if `pkcs12.serialize_key_and_certificates` is called with both a certificate whose public key did not match the provided private key and an `encryption_algorithm` with `hmac_hash` set (via `PrivateFormat.PKCS12.encryption_builder().hmac_hash(...)`, then a NULL pointer dereference would occur, crashing the Python process. This has been resolved in version 42.0.4, the first version in which a `ValueError` is properly raised.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-08-14 19:56 UTC

CWE

CWE-476 - NULL Pointer Dereference

Assigner

GitHub_M mitre root

References

3 references

URL	Tags
https://github.com/pyca/cryptography/security/adv…	x_refsource_CONFIRM
https://github.com/pyca/cryptography/pull/10423	x_refsource_MISC
https://github.com/pyca/cryptography/commit/97d23…	x_refsource_MISC

Impacted products

2 products

Vendor	Product	Version
pyca	cryptography	Affected: >= 38.0.0, < 42.0.4
cryptography_project	cryptography	Affected: 38.0.0 , < 42.04 (custom) cpe:2.3:a:cryptography_project:cryptography::::::python::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T23:59:32.542Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "https://github.com/pyca/cryptography/security/advisories/GHSA-6vqw-3v5j-54x4",
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/pyca/cryptography/security/advisories/GHSA-6vqw-3v5j-54x4"
          },
          {
            "name": "https://github.com/pyca/cryptography/pull/10423",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/pyca/cryptography/pull/10423"
          },
          {
            "name": "https://github.com/pyca/cryptography/commit/97d231672763cdb5959a3b191e692a362f1b9e55",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/pyca/cryptography/commit/97d231672763cdb5959a3b191e692a362f1b9e55"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:cryptography_project:cryptography:*:*:*:*:*:python:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "cryptography",
            "vendor": "cryptography_project",
            "versions": [
              {
                "lessThan": "42.04",
                "status": "affected",
                "version": "38.0.0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-26130",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-14T19:56:07.150963Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-14T20:01:52.628Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "cryptography",
          "vendor": "pyca",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 38.0.0, \u003c 42.0.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Starting in version 38.0.0 and prior to version 42.0.4, if `pkcs12.serialize_key_and_certificates` is called with both a certificate whose public key did not match the provided private key and an `encryption_algorithm` with `hmac_hash` set (via `PrivateFormat.PKCS12.encryption_builder().hmac_hash(...)`, then a NULL pointer dereference would occur, crashing the Python process. This has been resolved in version 42.0.4, the first version in which a `ValueError` is properly raised."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "CWE-476: NULL Pointer Dereference",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-02-21T16:28:18.632Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/pyca/cryptography/security/advisories/GHSA-6vqw-3v5j-54x4",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/pyca/cryptography/security/advisories/GHSA-6vqw-3v5j-54x4"
        },
        {
          "name": "https://github.com/pyca/cryptography/pull/10423",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/pyca/cryptography/pull/10423"
        },
        {
          "name": "https://github.com/pyca/cryptography/commit/97d231672763cdb5959a3b191e692a362f1b9e55",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/pyca/cryptography/commit/97d231672763cdb5959a3b191e692a362f1b9e55"
        }
      ],
      "source": {
        "advisory": "GHSA-6vqw-3v5j-54x4",
        "discovery": "UNKNOWN"
      },
      "title": "cryptography NULL pointer deference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2024-26130",
    "datePublished": "2024-02-21T16:28:18.632Z",
    "dateReserved": "2024-02-14T17:40:03.687Z",
    "dateUpdated": "2024-08-14T20:01:52.628Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-27306 (GCVE-0-2024-27306)

Vulnerability from cvelistv5 – Published: 2024-04-18 14:23 – Updated: 2025-11-03 20:37

Title

aiohttp vulnerable to XSS on index pages for static file handling

Summary

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. A XSS vulnerability exists on index pages for static file handling. This vulnerability is fixed in 3.9.4. We have always recommended using a reverse proxy server (e.g. nginx) for serving static files. Users following the recommendation are unaffected. Other users can disable `show_index` if unable to upgrade.

Severity

6.1 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-04-25 19:36 UTC

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-80 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Assigner

GitHub_M mitre root

References

7 references

URL	Tags
https://github.com/aio-libs/aiohttp/security/advi…	x_refsource_CONFIRM
https://github.com/aio-libs/aiohttp/pull/8319	x_refsource_MISC
https://github.com/aio-libs/aiohttp/commit/283355…	x_refsource_MISC
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.debian.org/debian-lts-announce/2025…

Impacted products

2 products

Vendor	Product	Version
aio-libs	aiohttp	Affected: < 3.9.4
aiohttp	aiohttp	Affected: 0 , < 3.9.4 (semver) cpe:2.3:a:aiohttp:aiohttp::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:aiohttp:aiohttp:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "aiohttp",
            "vendor": "aiohttp",
            "versions": [
              {
                "lessThan": "3.9.4",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-27306",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-04-25T19:36:48.583083Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-20T13:35:26.968Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T20:37:02.696Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-7gpw-8wmc-pm8g",
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-7gpw-8wmc-pm8g"
          },
          {
            "name": "https://github.com/aio-libs/aiohttp/pull/8319",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/aio-libs/aiohttp/pull/8319"
          },
          {
            "name": "https://github.com/aio-libs/aiohttp/commit/28335525d1eac015a7e7584137678cbb6ff19397",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/aio-libs/aiohttp/commit/28335525d1eac015a7e7584137678cbb6ff19397"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2EXRGTN2WG7VZLUZ7WOXU5GQJKCPPHKP/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NWEI6NIHZ3G7DURDZVMRK7ZEFC2BTD3U/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZIVBMPEY7WWOFMC3CWXFBRQPFECV4SW3/"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00002.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "aiohttp",
          "vendor": "aio-libs",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.9.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. A XSS vulnerability exists on index pages for static file handling. This vulnerability is fixed in 3.9.4. We have always recommended using a reverse proxy server (e.g. nginx) for serving static files. Users following the recommendation are unaffected. Other users can disable `show_index` if unable to upgrade."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-80",
              "description": "CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-05-02T03:06:10.832Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-7gpw-8wmc-pm8g",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-7gpw-8wmc-pm8g"
        },
        {
          "name": "https://github.com/aio-libs/aiohttp/pull/8319",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/aio-libs/aiohttp/pull/8319"
        },
        {
          "name": "https://github.com/aio-libs/aiohttp/commit/28335525d1eac015a7e7584137678cbb6ff19397",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/aio-libs/aiohttp/commit/28335525d1eac015a7e7584137678cbb6ff19397"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2EXRGTN2WG7VZLUZ7WOXU5GQJKCPPHKP/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NWEI6NIHZ3G7DURDZVMRK7ZEFC2BTD3U/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZIVBMPEY7WWOFMC3CWXFBRQPFECV4SW3/"
        }
      ],
      "source": {
        "advisory": "GHSA-7gpw-8wmc-pm8g",
        "discovery": "UNKNOWN"
      },
      "title": "aiohttp vulnerable to XSS on index pages for static file handling"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2024-27306",
    "datePublished": "2024-04-18T14:23:25.325Z",
    "dateReserved": "2024-02-22T18:08:38.876Z",
    "dateUpdated": "2025-11-03T20:37:02.696Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-30251 (GCVE-0-2024-30251)

Vulnerability from cvelistv5 – Published: 2024-05-02 13:55 – Updated: 2025-11-03 20:37

Title

Denial of service when trying to parse malformed POST requests in aiohttp

Summary

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In affected versions an attacker can send a specially crafted POST (multipart/form-data) request. When the aiohttp server processes it, the server will enter an infinite loop and be unable to process any further requests. An attacker can stop the application from serving requests after sending a single request. This issue has been addressed in version 3.9.4. Users are advised to upgrade. Users unable to upgrade may manually apply a patch to their systems. Please see the linked GHSA for instructions.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-05-02 15:13 UTC

CWE

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Assigner

GitHub_M mitre root

References

6 references

URL	Tags
https://github.com/aio-libs/aiohttp/security/advi…	x_refsource_CONFIRM
https://github.com/aio-libs/aiohttp/commit/7eecdf…	x_refsource_MISC
https://github.com/aio-libs/aiohttp/commit/cebe52…	x_refsource_MISC
https://github.com/aio-libs/aiohttp/commit/f21c6f…	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2024/05/02/4
https://lists.debian.org/debian-lts-announce/2025…

Impacted products

2 products

Vendor	Product	Version
aio-libs	aiohttp	Affected: < 3.9.4
aio-libs_project	aiohttp	Affected: - , < 3.9.4 (custom) cpe:2.3:a:aio-libs_project:aiohttp:-:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:aio-libs_project:aiohttp:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "aiohttp",
            "vendor": "aio-libs_project",
            "versions": [
              {
                "lessThan": "3.9.4",
                "status": "affected",
                "version": "-",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-30251",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-02T15:13:44.627436Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:38:32.295Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T20:37:11.081Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-5m98-qgg9-wh84",
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-5m98-qgg9-wh84"
          },
          {
            "name": "https://github.com/aio-libs/aiohttp/commit/7eecdff163ccf029fbb1ddc9de4169d4aaeb6597",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/aio-libs/aiohttp/commit/7eecdff163ccf029fbb1ddc9de4169d4aaeb6597"
          },
          {
            "name": "https://github.com/aio-libs/aiohttp/commit/cebe526b9c34dc3a3da9140409db63014bc4cf19",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/aio-libs/aiohttp/commit/cebe526b9c34dc3a3da9140409db63014bc4cf19"
          },
          {
            "name": "https://github.com/aio-libs/aiohttp/commit/f21c6f2ca512a026ce7f0f6c6311f62d6a638866",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/aio-libs/aiohttp/commit/f21c6f2ca512a026ce7f0f6c6311f62d6a638866"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2024/05/02/4"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00002.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "aiohttp",
          "vendor": "aio-libs",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.9.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In affected versions an attacker can send a specially crafted POST (multipart/form-data) request. When the aiohttp server processes it, the server will enter an infinite loop and be unable to process any further requests. An attacker can stop the application from serving requests after sending a single request. This issue has been addressed in version 3.9.4. Users are advised to upgrade. Users unable to upgrade may manually apply a patch to their systems. Please see the linked GHSA for instructions."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-835",
              "description": "CWE-835: Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-05-02T13:55:07.893Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-5m98-qgg9-wh84",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-5m98-qgg9-wh84"
        },
        {
          "name": "https://github.com/aio-libs/aiohttp/commit/7eecdff163ccf029fbb1ddc9de4169d4aaeb6597",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/aio-libs/aiohttp/commit/7eecdff163ccf029fbb1ddc9de4169d4aaeb6597"
        },
        {
          "name": "https://github.com/aio-libs/aiohttp/commit/cebe526b9c34dc3a3da9140409db63014bc4cf19",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/aio-libs/aiohttp/commit/cebe526b9c34dc3a3da9140409db63014bc4cf19"
        },
        {
          "name": "https://github.com/aio-libs/aiohttp/commit/f21c6f2ca512a026ce7f0f6c6311f62d6a638866",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/aio-libs/aiohttp/commit/f21c6f2ca512a026ce7f0f6c6311f62d6a638866"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2024/05/02/4"
        }
      ],
      "source": {
        "advisory": "GHSA-5m98-qgg9-wh84",
        "discovery": "UNKNOWN"
      },
      "title": "Denial of service when trying to parse malformed POST requests in aiohttp"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2024-30251",
    "datePublished": "2024-05-02T13:55:06.135Z",
    "dateReserved": "2024-03-26T12:52:00.933Z",
    "dateUpdated": "2025-11-03T20:37:11.081Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-34064 (GCVE-0-2024-34064)

Vulnerability from cvelistv5 – Published: 2024-05-06 14:41 – Updated: 2025-11-03 21:54

Title

Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter

Summary

Jinja is an extensible templating engine. The `xmlattr` filter in affected versions of Jinja accepts keys containing non-attribute characters. XML/HTML attributes cannot contain spaces, `/`, `>`, or `=`, as each would then be interpreted as starting a separate attribute. If an application accepts keys (as opposed to only values) as user input, and renders these in pages that other users see as well, an attacker could use this to inject other attributes and perform XSS. The fix for CVE-2024-22195 only addressed spaces but not other characters. Accepting keys as user input is now explicitly considered an unintended use case of the `xmlattr` filter, and code that does so without otherwise validating the input should be flagged as insecure, regardless of Jinja version. Accepting _values_ as user input continues to be safe. This vulnerability is fixed in 3.1.4.

Severity

5.4 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-05-09 17:53 UTC

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

GitHub_M mitre root

References

7 references

URL	Tags
https://github.com/pallets/jinja/security/advisor…	x_refsource_CONFIRM
https://github.com/pallets/jinja/commit/0668239dc…	x_refsource_MISC
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.debian.org/debian-lts-announce/2024…

Impacted products

1 product

Vendor	Product	Version
pallets	jinja	Affected: < 3.1.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 5.4,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-34064",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-09T17:53:36.420762Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-08-27T21:13:00.297Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:54:48.796Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "https://github.com/pallets/jinja/security/advisories/GHSA-h75v-3vvj-5mfj",
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/pallets/jinja/security/advisories/GHSA-h75v-3vvj-5mfj"
          },
          {
            "name": "https://github.com/pallets/jinja/commit/0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/pallets/jinja/commit/0668239dc6b44ef38e7a6c9f91f312fd4ca581cb"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GCLF44KY43BSVMTE6S53B4V5WP3FRRSE/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/567XIGSZMABG6TSMYWD7MIYNJSUQQRUC/"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/12/msg00009.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "jinja",
          "vendor": "pallets",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.1.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Jinja is an extensible templating engine. The `xmlattr` filter in affected versions of Jinja accepts keys containing non-attribute characters. XML/HTML attributes cannot contain spaces, `/`, `\u003e`, or `=`, as each would then be interpreted as starting a separate attribute. If an application accepts keys (as opposed to only values) as user input, and renders these in pages that other users see as well, an attacker could use this to inject other attributes and perform XSS. The fix for CVE-2024-22195 only addressed spaces but not other characters. Accepting keys as user input is now explicitly considered an unintended use case of the `xmlattr` filter, and code that does so without otherwise validating the input should be flagged as insecure, regardless of Jinja version. Accepting _values_ as user input continues to be safe. This vulnerability is fixed in 3.1.4."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-06-10T16:08:27.786Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/pallets/jinja/security/advisories/GHSA-h75v-3vvj-5mfj",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/pallets/jinja/security/advisories/GHSA-h75v-3vvj-5mfj"
        },
        {
          "name": "https://github.com/pallets/jinja/commit/0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/pallets/jinja/commit/0668239dc6b44ef38e7a6c9f91f312fd4ca581cb"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GCLF44KY43BSVMTE6S53B4V5WP3FRRSE/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/567XIGSZMABG6TSMYWD7MIYNJSUQQRUC/"
        }
      ],
      "source": {
        "advisory": "GHSA-h75v-3vvj-5mfj",
        "discovery": "UNKNOWN"
      },
      "title": "Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2024-34064",
    "datePublished": "2024-05-06T14:41:39.912Z",
    "dateReserved": "2024-04-30T06:56:33.380Z",
    "dateUpdated": "2025-11-03T21:54:48.796Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-35195 (GCVE-0-2024-35195)

Vulnerability from cvelistv5 – Published: 2024-05-20 20:14 – Updated: 2025-07-31 03:56

Title

Requests `Session` object does not verify requests after making first request with verify=False

Summary

Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. This vulnerability is fixed in 2.32.0.

Severity

5.6 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-07-30 00:00 UTC

CWE

CWE-670 - Always-Incorrect Control Flow Implementation

Assigner

GitHub_M mitre root

References

5 references

URL	Tags
https://github.com/psf/requests/security/advisori…	x_refsource_CONFIRM
https://github.com/psf/requests/pull/6655	x_refsource_MISC
https://github.com/psf/requests/commit/a58d7f2ffb…	x_refsource_MISC
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…

Impacted products

2 products

Vendor	Product	Version
psf	requests	Affected: < 2.32.0
request_project	request	Affected: 0 , < 2.32.0 (custom) cpe:2.3:a:request_project:request:2.32.0:::::node.js::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:request_project:request:2.32.0:*:*:*:*:node.js:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "request",
            "vendor": "request_project",
            "versions": [
              {
                "lessThan": "2.32.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-35195",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-30T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-31T03:56:03.717Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T03:07:46.774Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "https://github.com/psf/requests/security/advisories/GHSA-9wx4-h78v-vm56",
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/psf/requests/security/advisories/GHSA-9wx4-h78v-vm56"
          },
          {
            "name": "https://github.com/psf/requests/pull/6655",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/psf/requests/pull/6655"
          },
          {
            "name": "https://github.com/psf/requests/commit/a58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/psf/requests/commit/a58d7f2ffb4d00b46dca2d70a3932a0b37e22fac"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "requests",
          "vendor": "psf",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 2.32.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. This vulnerability is fixed in 2.32.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-670",
              "description": "CWE-670: Always-Incorrect Control Flow Implementation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-06-10T16:09:17.143Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/psf/requests/security/advisories/GHSA-9wx4-h78v-vm56",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/psf/requests/security/advisories/GHSA-9wx4-h78v-vm56"
        },
        {
          "name": "https://github.com/psf/requests/pull/6655",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/psf/requests/pull/6655"
        },
        {
          "name": "https://github.com/psf/requests/commit/a58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/psf/requests/commit/a58d7f2ffb4d00b46dca2d70a3932a0b37e22fac"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ/"
        }
      ],
      "source": {
        "advisory": "GHSA-9wx4-h78v-vm56",
        "discovery": "UNKNOWN"
      },
      "title": "Requests `Session` object does not verify requests after making first request with verify=False"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2024-35195",
    "datePublished": "2024-05-20T20:14:48.206Z",
    "dateReserved": "2024-05-10T14:24:24.342Z",
    "dateUpdated": "2025-07-31T03:56:03.717Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-39614 (GCVE-0-2024-39614)

Vulnerability from cvelistv5 – Published: 2024-07-10 00:00 – Updated: 2025-11-04 16:12

Summary

An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. get_supported_language_variant() was subject to a potential denial-of-service attack when used with very long strings containing specific characters.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-07-10 13:29 UTC

CWE

n/a
CWE-130 - Improper Handling of Length Parameter Inconsistency

Assigner

mitre mitre root

References

4 references

URL	Tags
https://docs.djangoproject.com/en/dev/releases/se…
https://groups.google.com/forum/#%21forum/django-…
https://www.djangoproject.com/weblog/2024/jul/09/…
https://security.netapp.com/advisory/ntap-2024080…

Impacted products

1 product

Vendor	Product	Version
djangoproject	django	Unaffected: 5.1 Affected: 5.0 , < 5.0.7 (custom) Affected: 4.2 , < 4.2.14 (custom) cpe:2.3:a:djangoproject:django::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "django",
            "vendor": "djangoproject",
            "versions": [
              {
                "status": "unaffected",
                "version": "5.1"
              },
              {
                "lessThan": "5.0.7",
                "status": "affected",
                "version": "5.0",
                "versionType": "custom"
              },
              {
                "lessThan": "4.2.14",
                "status": "affected",
                "version": "4.2",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-39614",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-10T13:29:40.596884Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-130",
                "description": "CWE-130 Improper Handling of Length Parameter Inconsistency",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-30T16:26:00.516Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T16:12:29.895Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://docs.djangoproject.com/en/dev/releases/security/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://groups.google.com/forum/#%21forum/django-announce"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.djangoproject.com/weblog/2024/jul/09/security-releases/"
          },
          {
            "url": "https://security.netapp.com/advisory/ntap-20240808-0005/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. get_supported_language_variant() was subject to a potential denial-of-service attack when used with very long strings containing specific characters."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-07-10T04:51:34.459Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://docs.djangoproject.com/en/dev/releases/security/"
        },
        {
          "url": "https://groups.google.com/forum/#%21forum/django-announce"
        },
        {
          "url": "https://www.djangoproject.com/weblog/2024/jul/09/security-releases/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2024-39614",
    "datePublished": "2024-07-10T00:00:00.000Z",
    "dateReserved": "2024-06-26T00:00:00.000Z",
    "dateUpdated": "2025-11-04T16:12:29.895Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-41989 (GCVE-0-2024-41989)

Vulnerability from cvelistv5 – Published: 2024-08-07 00:00 – Updated: 2025-11-04 16:13

Summary

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The floatformat template filter is subject to significant memory consumption when given a string representation of a number in scientific notation with a large exponent.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-08-08 19:34 UTC

CWE

n/a
CWE-400 - Uncontrolled Resource Consumption

Assigner

mitre mitre root

References

4 references

URL	Tags
https://docs.djangoproject.com/en/dev/releases/se…
https://groups.google.com/forum/#%21forum/django-…
https://www.djangoproject.com/weblog/2024/aug/06/…
https://security.netapp.com/advisory/ntap-2024090…

Impacted products

1 product

Vendor	Product	Version
djangoproject	django	Affected: 4.2 , < 4.2.15 (custom) Affected: 5.0 , < 5.0.8 (custom) cpe:2.3:a:djangoproject:django::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "django",
            "vendor": "djangoproject",
            "versions": [
              {
                "lessThan": "4.2.15",
                "status": "affected",
                "version": "4.2",
                "versionType": "custom"
              },
              {
                "lessThan": "5.0.8",
                "status": "affected",
                "version": "5.0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-41989",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-08T19:34:43.299369Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-14T18:52:59.811Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T16:13:40.784Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://security.netapp.com/advisory/ntap-20240905-0007/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The floatformat template filter is subject to significant memory consumption when given a string representation of a number in scientific notation with a large exponent."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-08-07T14:10:31.266Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://docs.djangoproject.com/en/dev/releases/security/"
        },
        {
          "url": "https://groups.google.com/forum/#%21forum/django-announce"
        },
        {
          "url": "https://www.djangoproject.com/weblog/2024/aug/06/security-releases/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2024-41989",
    "datePublished": "2024-08-07T00:00:00.000Z",
    "dateReserved": "2024-07-25T00:00:00.000Z",
    "dateUpdated": "2025-11-04T16:13:40.784Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-41990 (GCVE-0-2024-41990)

Vulnerability from cvelistv5 – Published: 2024-08-07 00:00 – Updated: 2025-11-04 16:13

Summary

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-08-07 15:20 UTC

CWE

n/a
CWE-130 - Improper Handling of Length Parameter Inconsistency

Assigner

mitre mitre root

References

4 references

URL	Tags
https://docs.djangoproject.com/en/dev/releases/se…
https://groups.google.com/forum/#%21forum/django-…
https://www.djangoproject.com/weblog/2024/aug/06/…
https://security.netapp.com/advisory/ntap-2024090…

Impacted products

2 products

Vendor	Product	Version
djangoproject	django	Affected: 4.2 , < 4.2.15 (custom) Affected: 5.0 , < 5.0.8 (custom) cpe:2.3:a:djangoproject:django::::::::
djangoproject	django	Affected: pkg:pypi/django@4.2 , < pkg:pypi/django@4.2.15 (custom) Affected: pkg:pypi/django@5.0 , < pkg:pypi/django@5.0.8 (custom) cpe:2.3:a:djangoproject:django::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "django",
            "vendor": "djangoproject",
            "versions": [
              {
                "lessThan": "4.2.15",
                "status": "affected",
                "version": "4.2",
                "versionType": "custom"
              },
              {
                "lessThan": "5.0.8",
                "status": "affected",
                "version": "5.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "django",
            "vendor": "djangoproject",
            "versions": [
              {
                "lessThan": "pkg:pypi/django@4.2.15",
                "status": "affected",
                "version": "pkg:pypi/django@4.2",
                "versionType": "custom"
              },
              {
                "lessThan": "pkg:pypi/django@5.0.8",
                "status": "affected",
                "version": "pkg:pypi/django@5.0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-41990",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-07T15:20:51.732074Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-130",
                "description": "CWE-130 Improper Handling of Length Parameter Inconsistency",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-18T14:57:21.043Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T16:13:41.723Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://security.netapp.com/advisory/ntap-20240905-0007/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-08-07T14:11:45.667Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://docs.djangoproject.com/en/dev/releases/security/"
        },
        {
          "url": "https://groups.google.com/forum/#%21forum/django-announce"
        },
        {
          "url": "https://www.djangoproject.com/weblog/2024/aug/06/security-releases/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2024-41990",
    "datePublished": "2024-08-07T00:00:00.000Z",
    "dateReserved": "2024-07-25T00:00:00.000Z",
    "dateUpdated": "2025-11-04T16:13:41.723Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-41991 (GCVE-0-2024-41991)

Vulnerability from cvelistv5 – Published: 2024-08-07 00:00 – Updated: 2025-11-04 16:13

Summary

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and urlizetrunc template filters, and the AdminURLFieldWidget widget, are subject to a potential denial-of-service attack via certain inputs with a very large number of Unicode characters.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-08-07 17:57 UTC

CWE

n/a
CWE-130 - Improper Handling of Length Parameter Inconsistency

Assigner

mitre mitre root

References

4 references

URL	Tags
https://docs.djangoproject.com/en/dev/releases/se…
https://groups.google.com/forum/#%21forum/django-…
https://www.djangoproject.com/weblog/2024/aug/06/…
https://security.netapp.com/advisory/ntap-2024090…

Impacted products

1 product

Vendor	Product	Version
djangoproject	django	Affected: 4.2 , < 4.2.15 (custom) Affected: 5.0 , < 5.0.8 (custom) cpe:2.3:a:djangoproject:django::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "django",
            "vendor": "djangoproject",
            "versions": [
              {
                "lessThan": "4.2.15",
                "status": "affected",
                "version": "4.2",
                "versionType": "custom"
              },
              {
                "lessThan": "5.0.8",
                "status": "affected",
                "version": "5.0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-41991",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-07T17:57:11.874865Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-130",
                "description": "CWE-130 Improper Handling of Length Parameter Inconsistency",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-12T15:56:42.887Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T16:13:42.653Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://security.netapp.com/advisory/ntap-20240905-0007/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and urlizetrunc template filters, and the AdminURLFieldWidget widget, are subject to a potential denial-of-service attack via certain inputs with a very large number of Unicode characters."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-08-07T14:13:02.341Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://docs.djangoproject.com/en/dev/releases/security/"
        },
        {
          "url": "https://groups.google.com/forum/#%21forum/django-announce"
        },
        {
          "url": "https://www.djangoproject.com/weblog/2024/aug/06/security-releases/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2024-41991",
    "datePublished": "2024-08-07T00:00:00.000Z",
    "dateReserved": "2024-07-25T00:00:00.000Z",
    "dateUpdated": "2025-11-04T16:13:42.653Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2025:1335

CVE-2024-1135 (GCVE-0-2024-1135)

CVE-2024-26130 (GCVE-0-2024-26130)

CVE-2024-27306 (GCVE-0-2024-27306)

CVE-2024-30251 (GCVE-0-2024-30251)

CVE-2024-34064 (GCVE-0-2024-34064)

CVE-2024-35195 (GCVE-0-2024-35195)

CVE-2024-39614 (GCVE-0-2024-39614)

CVE-2024-41989 (GCVE-0-2024-41989)

CVE-2024-41990 (GCVE-0-2024-41990)

CVE-2024-41991 (GCVE-0-2024-41991)

Tags

Sightings

Nomenclature

Related by attack behaviour