enterprise_linux_high_availability_v_9 vulnerabilities
CVEs whose affected-version data names the enterprise_linux_high_availability_v_9 package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2024-56201High· 7.3jinja2: Jinja has a sandbox breakout through malicious filenames (CVE-2024-56201)
A flaw was found in the Jinja2 package. A bug in the Jinja compiler allows an attacker that controls both the content and filename of a template to execute arbitrary Python code, regardless of Jinja's sandbox being used. An attacker needs …
▾ TwilightRed Hat · Red Hat OpenShift Container Platform 4.18EPSS 0.31%via CSAF
CVE-2023-52323Medium· 5.9pycryptodome: side-channel leakage for OAEP decryption in PyCryptodome and pycryptodomex (CVE-2023-52323)
A flaw was found in PyCryptodome/pycryptodomex which may allow for side-channel leakage when performing OAEP decryption, which could be exploited to carry out a Manger attack.
▾ SunlitRed Hat · Red Hat Enterprise Linux AppStream (v. 9)EPSS 0.62%via CSAF