almalinux/python2-pymongo

Vulnerabilities (23)

• CVE-2021-23336MedFeb 15, 2021
  affected < 3.7.0-1.module_el8.6.0+2781+fed64c13fixed 3.7.0-1.module_el8.6.0+2781+fed64c13

  The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before 3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a vector called parameter cloaking. When

• CVE-2020-28493MedFeb 1, 2021
  affected < 3.7.0-1.module_el8.6.0+2781+fed64c13fixed 3.7.0-1.module_el8.6.0+2781+fed64c13

  This affects the package jinja2 from 0.0.0 and before 2.11.3. The ReDoS vulnerability is mainly due to the `_punctuation_re regex` operator and its use of multiple wildcards. The last wildcard is the most exploitable as it searches for trailing punctuation. This issue can be miti

• CVE-2020-27619CriOct 22, 2020
  affected < 3.7.0-1.module_el8.6.0+2781+fed64c13fixed 3.7.0-1.module_el8.6.0+2781+fed64c13

  In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP.