286 matches found
Reportlab 安全漏洞
ReportLab is an open source engine for creating data-driven PDF documents and custom vector graphics from ReportLab, Denmark. A security vulnerability exists in Reportlab v3.6.12 and earlier versions, which stems from a vulnerability that allows an attacker to execute arbitrary code by supplying ...
Exploit for Code Injection in Reportlab
CODE INJECTION VULNERABILITY IN REPORTLAB PYTHON LIBRARY tl...
Mageia: Security Advisory (MGASA-2023-0186)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated python-reportlab packages fix security vulnerability
Updates python3-reportlab includes a security fix and other minor bug fixes. See references for details...
PT-2023-36344 · Unknown · Python3-Reportlab
Name of the Vulnerable Software and Affected Versions: python3-reportlab affected versions not specified Description: The issue concerns a security fix in python3-reportlab, along with other minor bug fixes. Recommendations: At the moment, there is no information about a newer version that contai...
PT-2023-3041
Name of the Vulnerable Software and Affected Versions ReportLab versions up to 3.6.12 Description The issue is related to the rl safe eval function in the ReportLab library, which is associated with incorrect code generation management. This can allow a remote attacker to bypass security...
SUSE CVE-2019-17626
ReportLab through 3.5.26 allows remote code execution because of toColorevalarg in colors.py, as demonstrated by a crafted XML document with 'span color="' followed by arbitrary Python code...
SUSE CVE-2020-28463
All versions of package reportlab are vulnerable to Server-side Request Forgery SSRF via img tags. In order to reduce risk, use trustedSchemes & trustedHosts see in Reportlab's documentation Steps to reproduce by Karan Bamal: 1. Download and install the latest package of reportlab 2. Go to demos ...
OESA-2022-1887 python-reportlab security update
The ReportLab Toolkit. An Open Source Python library for generating PDFs and graphics. Security Fixes: All versions of package reportlab are vulnerable to Server-side Request Forgery SSRF via img tags. In order to reduce risk, use trustedSchemes & trustedHosts see in Reportlab's documentation Ste...
Security Bulletin: IBM Spectrum Discover is vulnerable to multiple vulnerabilities
Summary RamdaCVE-2021-42581 is vulnerable to remote attackers to execute arbitrary code on the system, caused by a prototype pollution in functions. An attacker could exploit this vulnerability to execute arbitrary code on the system. Node-forgeCVE-2022-24773, 217313, CVE-2022-24771, CVE-2020-772...
XML Injection in ReportLab
ReportLab through 3.5.26 allows remote code execution because of toColorevalarg in colors.py, as demonstrated by a crafted XML document with 'span color="' followed by arbitrary Python code...
GHSA-QPG2-VX7J-3869 XML Injection in ReportLab
ReportLab through 3.5.26 allows remote code execution because of toColorevalarg in colors.py, as demonstrated by a crafted XML document with 'span color="' followed by arbitrary Python code...
Mageia: Security Advisory (MGASA-2020-0059)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2021-0521)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MGASA-2021-0521 Updated python-reportlab packages fix security vulnerability
Server-side Request Forgery SSRF...
Updated python-reportlab packages fix security vulnerability
Server-side Request Forgery SSRF...
Fedora: Security Advisory for python-reportlab (FEDORA-2021-13cdc0ab0e)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for python-reportlab (FEDORA-2021-04bfae8300)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
