enterprise_linux_highavailability_tus_v_8_4 vulnerabilities
CVEs whose affected-version data names the enterprise_linux_highavailability_tus_v_8_4 package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2024-37891Medium· 4.4urllib3: proxy-authorization request header is not stripped during cross-origin redirects (CVE-2024-37891)
A flaw was found in urllib3, an HTTP client library for Python. In certain configurations, urllib3 does not treat the `Proxy-Authorization` HTTP header as one carrying authentication material. This issue results in not stripping the header…
▾ SunlitRed Hat · Red Hat Enterprise Linux AppStream (v. 8)EPSS 1.1%via CSAF
CVE-2023-52323Medium· 5.9pycryptodome: side-channel leakage for OAEP decryption in PyCryptodome and pycryptodomex (CVE-2023-52323)
A flaw was found in PyCryptodome/pycryptodomex which may allow for side-channel leakage when performing OAEP decryption, which could be exploited to carry out a Manger attack.
▾ SunlitRed Hat · Red Hat Enterprise Linux AppStream (v. 9)EPSS 0.62%via CSAF