Known vulnerabilities in python-pexpect (Red Hat package) - page 2

Software CPE: cpe:2.3:o:red_hat:python-pexpect_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 55
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting python-pexpect (Red Hat package) python-pexpect (Red Hat package) is affected by 55 known vulnerabilities: 5 high, 37 medium, 13 low Critical High Medium Low

Vulnerabilities (55)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88936 - Improper Authorization
CVE-2023-4320
CWE-285 Low
No
No
4.8.0-5.el8pc 23.04.2024 SB2024042346
#VU85835 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-21647
CWE-444 Medium
No
No
4.8.0-5.el8pc 26.01.2024 SB2024012625
SB2024012628
SB2024030762
and 10 more
#VU85747 - Observable discrepancy
CVE-2023-52323
CWE-203 Low
No
No
4.8.0-5.el8pc 24.01.2024 SB2024012414
SB2024012416
SB2024022053
and 24 more
#VU84432 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-5189
CWE-22 Medium
No
No
4.8.0-5.el8pc 14.12.2023 SB2023121427
SB2023121428
SB2024032846
and 1 more
#VU83633 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-49082
CWE-444 Medium
No
No
4.8.0-5.el8pc 04.12.2023 SB2023120404
SB2023120408
SB2023121355
and 16 more
#VU82226 - Inefficient Regular Expression Complexity
CVE-2022-40896
CWE-1333 Medium
No
No
4.8.0-5.el8pc 18.10.2023 SB20231018123
SB2023121111
SB2023122110
and 15 more
#VU81657 - Resource exhaustion
CVE-2023-43665
CWE-400 Medium
No
No
4.8.0-5.el8pc 05.10.2023 SB2023100544
SB2023100545
SB2023100546
and 16 more
#VU80792 - Improper input validation
CVE-2023-36479
CWE-20 Medium
No
No
4.8.0-5.el8pc 14.09.2023 SB2023091440
SB2023092933
SB2023102621
and 48 more
#VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40167
CWE-444 Medium
No
No
4.8.0-5.el8pc 14.09.2023 SB2023091440
SB2023092933
SB2023101760
and 68 more
#VU80395 - Resource exhaustion
CVE-2023-41164
CWE-400 Medium
No
No
4.8.0-5.el8pc 04.09.2023 SB2023090432
SB2023090550
SB2023091166
and 19 more
#VU79951 - Cleartext Storage of Sensitive Information
CVE-2023-38037
CWE-312 Low
No
No
4.8.0-5.el8pc 24.08.2023 SB2023082433
SB2023121429
SB2024011862
and 5 more
#VU78448 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-37276
CWE-444 Medium
No
No
4.8.0-5.el8pc 20.07.2023 SB2023072024
SB2024013032
SB2024021609
and 3 more
#VU73722 - Resource exhaustion
CVE-2022-41725
CWE-400 Medium
No
No
4.6-2.el8ar, 4.6-3.el9 15.03.2023 SB2023030130
SB2023031537
SB2023031538
and 80 more
#VU72686 - Resource exhaustion
CVE-2022-41723
CWE-400 Medium
No
No
4.6-2.el8ar, 4.6-3.el9 01.03.2023 SB2023030130
SB2023030131
SB2023030946
and 190 more
#VU72685 - Resource Management Errors
CVE-2022-41724
CWE-399 Medium
No
No
4.6-2.el8ar, 4.6-3.el9 01.03.2023 SB2023030130
SB2023030131
SB2023030211
and 87 more
#VU71431 - Improper input validation
CVE-2023-0056
CWE-20 Medium
No
No
4.6-2.el8ar, 4.6-3.el9 23.01.2023 SB2023012331
SB2023012332
SB2023012641
and 20 more
#VU71362 - Protection Mechanism Failure
CVE-2022-3259
CWE-693 Low
No
No
4.6-2.el8ar, 4.6-3.el9 19.01.2023 SB2023011939
SB2023020908
SB2023032315
and 8 more
#VU70334 - Allocation of Resources Without Limits or Throttling
CVE-2022-41717
CWE-770 Medium
Available
No
4.6-2.el8ar, 4.6-3.el9 14.12.2022 SB2022121432
SB2022121433
SB2022121435
and 185 more
#VU69291 - Incorrect Authorization
CVE-2022-2990
CWE-863 Low
No
No
4.6-2.el8ar, 4.6-3.el9 14.11.2022 SB2022111431
SB2022111435
SB2022111439
and 14 more
#VU54626 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-3583
CWE-94 High
No
No
4.6-3.el8ap 08.07.2021 SB2021070822
SB2021070823
SB2021071517
and 12 more


Showing elements 21 - 40 out of 55