title: Red Hat Security Advisory: RHUI 4.11 security, bugfix, and enhancement update
description: python-gunicorn: HTTP Request Smuggling due to improper validation of Transfer-Encoding headers sqlparse: parsing heavily nested list leads to denial of service grpc: client communicating with a HTTP/2 proxy can poison the HPACK table between the proxy and the backend python-cryptography: NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override aiohttp: XSS on index pages for static file handling aiohttp: DoS when trying to parse malformed POST requests jinja2: accepts keys containing non-attribute characters requests: subsequent requests to the same host ignore cert verification python-django: Potential denial-of-service in django.utils.translation.get_supported_language_variant() python-django: Memory exhaustion in django.utils.numberformat.floatformat() python-django: Potential denial-of-service vulnerability in django.utils.html.urlize() python-django: Potential denial-of-service vulnerability in django.utils.html.urlize() and AdminURLFieldWidget python-django: Potential SQL injection in QuerySet.values() and values_list()
cpes: cpe:/a:redhat:rhui:4::el8