VDB

GCVE-110-MAGEIA-2022-359

GCVE-110-MAGEIA-2022-359
Advisory Published
Vulnetix · Advisory published October 8, 2022
Converting between int and str in bases other than 2 (binary), 4, 8 (octal), 16 (hexadecimal), or 32 such as base 10 (decimal) now raises a ValueError if the number of digits in string form is above a limit to avoid potential denial of service attacks due to the algorithmic complexity. (CVE-2020-10735) mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch with untrusted input (if they lack validation of user-provided filenames or arguments). (CVE-2015-20107) Open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at the beginning of URI path which may leads to information disclosure. (CVE-2021-28861) Also fixes permissions and title for the documentation.

Affected Products

VendorProductVersionsPlatforms
Mageiapython-pip0 (affected), 22.0.4-1.mga8 (unaffected)
Mageiapython30 (affected), 3.8.14-1.1.mga8 (unaffected)

Browse GCVE Records

72,337 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›