enterprise_linux_appstream_aus_v_8_6 vulnerabilities
CVEs whose affected-version data names the enterprise_linux_appstream_aus_v_8_6 package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
32 CVEsRSS
CVE-2024-6345High· 8.8pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools (CVE-2024-6345)
A flaw was found in the package_index module of pypa/setuptools. Affected versions of this package allow remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or …
▾ TwilightRed Hat · Red Hat Enterprise Linux AppStream (v. 8)EPSS 1.9%via CSAF
CVE-2024-37891Medium· 4.4urllib3: proxy-authorization request header is not stripped during cross-origin redirects (CVE-2024-37891)
A flaw was found in urllib3, an HTTP client library for Python. In certain configurations, urllib3 does not treat the `Proxy-Authorization` HTTP header as one carrying authentication material. This issue results in not stripping the header…
▾ SunlitRed Hat · Red Hat Enterprise Linux AppStream (v. 8)EPSS 1.1%via CSAF