Known vulnerabilities in python2-tkinter (Alpine package)

Known vulnerabilities in python2-tkinter (Alpine package)

Vendor: Alpine Linux Development Team

Software: python2-tkinter (Alpine package)

Software CPE: cpe:2.3:o:alpine:python2-tkinter_alpine_package:*:*:*:*:*:alpine_linux:*:*

Website: https://alpinelinux.org/

Total vulnerabilities: 10

Public exploits: 2

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Vulnerabilities (10)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU22617 - Improper input validation CVE-2019-16056	CWE-20	Low	No	No	2.7.17-r0	10.11.2019	SB2019111003 SB2019111004 SB2019110649 and 31 more
#VU31958 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CVE-2019-18348	CWE-74	Medium	No	No	2.7.18-r0	23.10.2019	SB2019102324 SB2020052312 SB2020042173 and 13 more
#VU21440 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-16935	CWE-79	Medium	No	No	2.7.17-r0	30.09.2019	SB2019093008 SB2019111003 SB2019111004 and 24 more
#VU21091 - Out-of-bounds read CVE-2019-15903	CWE-125	Medium	Available	No	2.7.17-r0	12.09.2019	SB2019091209 SB2019091210 SB2019091701 and 61 more
#VU18827 - Exposed Dangerous Method or Function CVE-2019-9948	CWE-749	Medium	No	No	2.7.17-r0	19.06.2019	SB2019031318 SB2019061903 SB2019042504 and 18 more
#VU18355 - Improper input validation CVE-2019-9636	CWE-20	Medium	No	No	2.7.17-r0	27.04.2019	SB2019042703 SB2019050611 SB2019051007 and 56 more
#VU17805 - NULL Pointer Dereference CVE-2019-5010	CWE-476	Medium	Available	No	2.7.15-r3, 2.7.16-r0	20.02.2019	SB2019030606 SB2019030301 SB2019021425 and 25 more
#VU15760 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2018-14647	CWE-611	Low	No	No	2.7.17-r0	08.11.2018	SB2018110808 SB2018122106 SB2018092802 and 35 more
#VU12283 - Improper input validation CVE-2018-1060	CWE-20	Medium	No	No	2.7.15-r3	27.04.2018	SB2018042706 SB2018111109 SB2018120712 and 36 more
#VU12282 - Improper input validation CVE-2018-1061	CWE-20	Medium	No	No	2.7.15-r3	27.04.2018	SB2018042706 SB2018111109 SB2018120712 and 20 more