ROOT-APP-PYPI-CVE-2024-5629 CVE-2024-5629 in pymongo - Patched by Root

Root has patched CVE-2024-5629 in the pymongo package for Root:PyPI. Multiple fixed versions available...

afs2-datasource (>=3.6.0, <=3.8.2), amanzi-orca (>=0.5.2, <=0.5.3) +23 more potentially affected by CVE-2024-5629 via pymongo (3.7.2)

pymongo PYPI version 3.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - afs2-datasource =3.6.0, =0.5.2, =1.1.0rc1, =0.0.2.dev1, =0.0.4, =0.5.0, =1.0.8a5, =0.2.1, =0.0.1, =0.0.1, =4.0.9, =0.0.3, =0.0.13 and more Source...

appkernel (>=0.1.0, <=1.0.0), cg (>=12.1.3, <=16.3.4) +9 more potentially affected by CVE-2024-5629 via pymongo (3.6.1)

pymongo PYPI version 3.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - appkernel =0.1.0, =12.1.3, =0.0.1, =0.0.6, =1.5.0, =0.0.1, =1.0.0, =4.1.1, =0.0.29, =0.0.1, =0.0.2 Source cves: CVE-2024-5629 Source advisory:...

mongoext (>=0.3.0, <=0.4.0) potentially affected by CVE-2024-5629 via pymongo (3.0.0)

pymongo PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - mongoext =0.3.0, =0.4.0 Source cves: CVE-2024-5629 Source advisory: OSV:PYSEC-2026-1826...

sd-python-wrapper (>=0.1.2, <=0.1.26) potentially affected by CVE-2024-5629 via pymongo (3.2.0)

pymongo PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - sd-python-wrapper =0.1.2, =0.1.26 Source cves: CVE-2024-5629 Source advisory: OSV:PYSEC-2026-1826...

mongodb-migrations (0.1.1), rolabesti (>=0.1.0, <=0.5.3) potentially affected by CVE-2024-5629 via pymongo (3.2.1)

pymongo PYPI version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - mongodb-migrations 0.1.1 - rolabesti =0.1.0, =0.5.3 Source cves: CVE-2024-5629 Source advisory: OSV:PYSEC-2026-1826...

aquests (>=0.7.8.5b1, <=0.7.16.18), clink (>=0.9.0, <=0.23.0) +9 more potentially affected by CVE-2024-5629 via pymongo (3.4.0)

pymongo PYPI version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - aquests =0.7.8.5b1, =0.9.0, =0.0.1, =0.2.3, =0.8.5rc2, =1.3.3, =0.0.4, =1.0.0, =0.0.1, =0.1.0 Source cves: CVE-2024-5629 Source advisory:...

edx-enterprise (>=0.40.6, <=0.42.0) potentially affected by CVE-2024-5629 via pymongo (3.5.0)

pymongo PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - edx-enterprise =0.40.6, =0.42.0 Source cves: CVE-2024-5629 Source advisory: OSV:PYSEC-2026-1826...

inmanta (2016.6.0) potentially affected by CVE-2024-5629 via pymongo (2.7.0)

pymongo PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - inmanta 2016.6.0 Source cves: CVE-2024-5629 Source advisory: OSV:PYSEC-2026-1826...

quokka (>=0.0.1.dev84, <=0.4.1.dev22) potentially affected by CVE-2024-5629 via pymongo (2.4.1)

pymongo PYPI version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - quokka =0.0.1.dev84, =0.4.1.dev22 Source cves: CVE-2024-5629 Source advisory: OSV:PYSEC-2026-1826...

mongoext (>=0.2.0, <=0.2.3), mongoops (>=0.0.1, <=1.0.1) potentially affected by CVE-2024-5629 via pymongo (2.8.0)

pymongo PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - mongoext =0.2.0, =0.0.1, =1.0.1 Source cves: CVE-2024-5629 Source advisory: OSV:PYSEC-2026-1826...

agave (>=0.0.1.dev0, <=0.2.3.dev0), agrothon (>=1.1.5, <=1.3.2) +348 more potentially affected by CVE-2024-5629 via pymongo (3.13.0)

pymongo PYPI version 3.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - agave =0.0.1.dev0, =1.1.5, =2022.9.19, =0.0.4, =0.0.1, =0.1.7, =0.2.0, =0.1.0, =0.7.1a0, =0.7.1a0, =0.7.1a0, =0.7.1a0, =0.7.1a3, =0.0.1, =2.2.0 a...

gakp-pylib (>=0.2.7, <=0.9.3), khan-mongo (0.1.6) +1 more potentially affected by CVE-2024-5629 via pymongo (3.2.2)

pymongo PYPI version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - gakp-pylib =0.2.7, =1.3.0, =1.4.0 Source cves: CVE-2024-5629 Source advisory: OSV:PYSEC-2026-1826...

airvue-gn (>=0.0.1, <=0.0.2), ax-env (>=0.2.2, <=0.3.0) +22 more potentially affected by CVE-2024-5629 via pymongo (3.12.3)

pymongo PYPI version 3.12.3 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - airvue-gn =0.0.1, =0.2.2, =0.1.0, =0.1.12, =0.1.12, =0.1.21, =0.3.2, =0.1.0.dev1, =1.1.0b37, =3.1.1, =0.0.11, =0.0.12 and more Source cves:...

askbob (>=0.0.3, <=0.0.4), autoneuro-pypi (1.0.0) +46 more potentially affected by CVE-2024-5629 via pymongo (3.10.1)

pymongo PYPI version 3.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - askbob =0.0.3, =1.1.0, =1.1.0, =0.0.3, =1.3.7, =0.0.5, =0.0.2, =0.0.0, =0.0.13 - deeppavlov-agent 2.3.0a0 - discord-fate-bot 0.1.1 - dragg 0.0.0 ...

capreolus (>=0.1.0, <=0.1.5), ckanext-nhm (>=3.7.1, <=6.9.8) +19 more potentially affected by CVE-2024-5629 via pymongo (3.9.0)

pymongo PYPI version 3.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - capreolus =0.1.0, =3.7.1, =3.0.2, =3.7.0, =0.2.0, =0.0.2, =0.0.2, =0.9.2rc1, =0.0.2, =0.1.2, =0.0.1, =0.0.8 and more Source cves: CVE-2024-5629...

apartment-browser (0.0.1), arctic (>=1.81.1, <=1.82.2) +29 more potentially affected by CVE-2024-5629 via pymongo (3.11.0)

pymongo PYPI version 3.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - apartment-browser 0.0.1 - arctic =1.81.1, =1.0.0, =0.1.0, =1.1.1, =0.1.0, =0.1.5, =0.1.0a5, =0.4.0, =0.5.7 and more Source cves: CVE-2024-5629...

autotm (>=0.2.3.2, <=0.2.3.4), bolinette (>=0.7.7, <=0.10.0) +10 more potentially affected by CVE-2024-5629 via pymongo (3.11.3)

pymongo PYPI version 3.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - autotm =0.2.3.2, =0.7.7, =0.3.2, =2.0.34, =2.0.3, =0.1.0, =0.0.2, =0.1.19, =0.1.11, =0.1.33 Source cves: CVE-2024-5629 Source advisory:...

aiogram-utils (>=0.0.1, <=0.0.3), algorithmic-trader (>=0.0.2, <=0.0.6) +35 more potentially affected by CVE-2024-5629 via pymongo (3.12.0)

pymongo PYPI version 3.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - aiogram-utils =0.0.1, =0.0.2, =1.1.1, =1.0.4, =0.11.0, =0.2.1, =0.4.0, =0.2.2, =0.2.5.5, =0.3.4, =1.0.0, =0.1.0, =1.5.2, =0.1.2, =0.1.14 and more...

bolinette (>=0.12.1, <=0.14.0), clean-architecture-mongodb-adapter (0.1.3) +16 more potentially affected by CVE-2024-5629 via pymongo (3.12.1)

pymongo PYPI version 3.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - bolinette =0.12.1, =0.0.3, =1.0.38, =0.0.0, =0.2.22, =0.1.3, =1.0.0, =0.0.7, =0.3.6, =0.1.7, =1.1.1, =1.5.0 - spreg-satosa-sync 1.1.3 and more...