Known vulnerabilities in python-certifi (Red Hat package) - page 3

Vendor: Red Hat Inc.

Software CPE: cpe:2.3:o:red_hat:python-certifi_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 48

Public exploits: 2

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Vulnerabilities (48)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU84432 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2023-5189	CWE-22	Medium	No	No	2022.12.7-3.el8pc	14.12.2023	SB2023121427 SB2023121428 SB2024032846 and 1 more
#VU82226 - Inefficient Regular Expression Complexity CVE-2022-40896	CWE-1333	Medium	No	No	2022.12.7-3.el8pc	18.10.2023	SB20231018123 SB2023121111 SB2023122110 and 15 more
#VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-40167	CWE-444	Medium	No	No	2022.12.7-3.el8pc	14.09.2023	SB2023091440 SB2023092933 SB2023101760 and 68 more
#VU80395 - Resource exhaustion CVE-2023-41164	CWE-400	Medium	No	No	2022.12.7-3.el8pc	04.09.2023	SB2023090432 SB2023090550 SB2023091166 and 19 more
#VU79951 - Cleartext Storage of Sensitive Information CVE-2023-38037	CWE-312	Low	No	No	2022.12.7-3.el8pc	24.08.2023	SB2023082433 SB2023121429 SB2024011862 and 5 more
#VU78448 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-37276	CWE-444	Medium	No	No	2022.12.7-3.el8pc	20.07.2023	SB2023072024 SB2024013032 SB2024021609 and 3 more
#VU71398 - Insufficient Verification of Data Authenticity CVE-2022-23491	CWE-345	High	No	No	2022.12.7-1.el9ap	20.01.2023	SB2023012034 SB2023012035 SB2023012036 and 51 more
#VU54626 - Improper Control of Generation of Code ('Code Injection') CVE-2021-3583	CWE-94	High	No	No	2020.6.20-1.el8pc	08.07.2021	SB2021070822 SB2021070823 SB2021071517 and 12 more

Showing elements 41 - 60 out of 48