1189 matches found
ALSA-2021:4201 Moderate: babel security and bug fix update
Babel provides tools to build and work with gettext message catalogs, and a Python interface to the CLDR Common Locale Data Repository, providing access to various locale display names, localized number and date formatting, etc. Security Fixes: python-babel: Relative path traversal allows attacke...
babel security and bug fix update
An update is available for babel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Babel provides tools to build and work with gettext message catalogs, and a...
Moderate: babel security and bug fix update
Babel provides tools to build and work with gettext message catalogs, and a Python interface to the CLDR Common Locale Data Repository, providing access to various locale display names, localized number and date formatting, etc. Security Fixes: python-babel: Relative path traversal allows attacke...
python27:2.7 security update
An update is available for python-pymongo, python2-rpm-macros, python-sqlalchemy, python-backports, python-docutils, pytest, python-psycopg2, python-lxml, python-PyMySQL, python-urllib3, PyYAML, python-pytest-mock, python-attrs, python-jinja2, python-docs, python-requests, python-mock,...
CVE-2021-42771 affecting package babel 2.6.0-9
CVE-2021-42771 affecting package babel 2.6.0-9. A patched version of the package is available...
Important Photon OS Security Update - PHSA-2021-4.0-0123
Updates of 'python3-babel' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2021-0123
Updates of 'python3-babel' packages of Photon OS have been released...
Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal leading to code execution.
...
EulerOS 2.0 SP3 : babel (EulerOS-SA-2021-2571)
According to the versions of the babel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none. CVE-2021-20095 Note that...
CVE-2021-42771
A flaw was found in python-babel. A path traversal vulnerability was found in how locale data files are checked and loaded within python-babel, allowing a local attacker to trick an application that uses python-babel to load a file outside of the intended locale directory. The highest threat from...
Debian: Security Advisory (DLA-2790-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Directory Traversal in Babel
Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...
01os (=0.0.14), 3-04-2025-ttm (=0.1.0) +13125 more potentially affected by CVE-2021-42771 via babel (>=1.0.0 <=2.9.0)
babel PYPI version =1.0.0, =0.1.0.dev384, =0.1.0, =1.0.3, =1.0.0, =0.0.3, =0.1.0, =1.0.3, =0.1.0, =0.1.2 and more Source cves: CVE-2021-42771 Source advisory: OSV:GHSA-H4M5-QPFP-3MPV...
GHSA-H4M5-QPFP-3MPV Directory Traversal in Babel
Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...
[SECURITY] [DLA 2790-1] python-babel security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2790-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler October 21, 2021 https://wiki.debian.org/LTS -...
Directory Traversal
babel is vulnerable to directory traversal. The library does not clean the locale identifiers properly before loading from file, allowing a malicious user to load arbitrary locale .dat files...
DLA-2790-1 python-babel - security update
Bulletin has no description...
ALPINE-CVE-2021-42771
Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...
CVE-2021-42771
Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...
AZL-6325 CVE-2021-42771 affecting package babel for versions less than 2.9.1-1
Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...