Known vulnerabilities in python3x-dynaconf (Red Hat package)

Vendor: Red Hat Inc.
Software: python3x-dynaconf (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:python3x-dynaconf_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 5.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting python3x-dynaconf (Red Hat package) python3x-dynaconf (Red Hat package) is affected by 2 known vulnerabilities: 1 medium, 1 low Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82547 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-46137		 CWE-444 Medium
No
No
 3.1.12-2.el8ap 30.10.2023 SB2023103002
SB2023112046
SB2023112942
and 16 more
#VU81056 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-41040		 CWE-22 Low
No
No
 3.1.12-2.el8ap 22.09.2023 SB2023092227
SB2023102621
SB2023110908
and 6 more