title: Red Hat Security Advisory: RHUI 4.8 Release - Security Updates, Bug Fixes, and Enhancements
description: python-django: Potential regular expression denial of service vulnerability in EmailValidator/URLValidator python-aiohttp: HTTP request smuggling via llhttp HTTP request parser python-django: Potential denial of service vulnerability in  ``django.utils.encoding.uri_to_iri()`` python-django: Denial-of-service possibility in django.utils.text.Truncator python-aiohttp: numerous issues in HTTP parser with header parsing aiohttp: HTTP request modification aiohttp: CRLF injection if user controls the HTTP method using aiohttp client python-cryptography: NULL-dereference when loading PKCS7 certificates jinja2: HTML attribute injection when passing user input as keys to xmlattr filter aiohttp: follow_symlinks directory traversal vulnerability python-ecdsa: vulnerable to the Minerva attack python-aiohttp: http request smuggling Django: denial-of-service in ``intcomma`` template filter python-django: Potential regular expression denial-of-service in django.utils.text.Truncator.words()
cpes: cpe:/a:redhat:rhui:4::el8