Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-14422
5.9
MEDIUMCVSS v3
Published
June 18, 2020
CVSS v2
4.3 MEDIUM
Affected
17 projects
Assigned by
MITRE
Severity scale
010
Description
Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow a remote attacker to cause a denial of service if an application is affected by the performance of a dictionary containing IPv4Interface or IPv6Interface objects, and this attacker can cause many dictionary entries to be created. This is fixed in: v3.5.10, v3.5.10rc1; v3.6.12; v3.7.9; v3.8.4, v3.8.4rc1, v3.8.5, v3.8.6, v3.8.6rc1; v3.9.0, v3.9.0b4, v3.9.0b5, v3.9.0rc1, v3.9.0rc2.
GitHubPython
ChocolateyPython is a programming language that lets you work more quickly and integrate your systems more effectively. You can learn to use Python and see almost immediate gains in productivity and lower maintenance costs.
## Notes
- This package depends on the the latest major version of python package.
- This package do not support package parameters, please install the package [python315](https://chocolatey.org/packages/python315) directly when using package parameters.
- **If the package is out of date please check [Version History](#versionhistory) for the latest submitted version. If you have a question, please ask it in [Chocolatey Community Package Discussions](https://github.com/chocolatey-community/chocolatey-packages/discussions) or raise an issue on the [Chocolatey Community Packages Repository](https://github.com/chocolatey-community/chocolatey-packages/issues) if you have problems with the package. Disqus comments will generally not be responded to.**
ChocolateyPython is a programming language that lets you work more quickly and integrate your systems more effectively. You can learn to use Python and see almost immediate gains in productivity and lower maintenance costs.
## Notes
- This package depends on the the latest major version of python package.
- This package do not support package parameters, please install the package [python315](https://chocolatey.org/packages/python315) directly when using package parameters.
- **If the package is out of date please check [Version History](#versionhistory) for the latest submitted version. If you have a question, please ask it in [Chocolatey Community Package Discussions](https://github.com/chocolatey-community/chocolatey-packages/discussions) or raise an issue on the [Chocolatey Community Packages Repository](https://github.com/chocolatey-community/chocolatey-packages/issues) if you have problems with the package. Disqus comments will generally not be responded to.**>= 3.0.0, < 3.5.10, >= 3.7.0, < 3.7.9, >= 3.6.0, < 3.6.12, >= 3.8.0, < 3.8.4
Visual Studio Marketplace
NPM
Crates.io
NuGet Gallery
RubyGems
Docker Hub