6 matches found
acdh-spacytei (>=0.0.1, <=0.0.5), ircrobots (0.3.6) potentially affected by CVE-2026-63374 via anyio (1.3.1)
anyio PYPI version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - acdh-spacytei =0.0.1, =0.0.5 - ircrobots 0.3.6 Source cves: CVE-2026-63374 Source advisory: OSV:PYSEC-2026-4025...
acdh-spacytei (>=0.0.1, <=0.0.5), ircrobots (0.3.6) potentially affected by CVE-2026-64847 via anyio (1.3.1)
anyio PYPI version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - acdh-spacytei =0.0.1, =0.0.5 - ircrobots 0.3.6 Source cves: CVE-2026-64847 Source advisory: OSV:PYSEC-2026-4024...
acdh-spacytei (>=0.0.1, <=0.0.5), ircrobots (0.3.6) potentially affected by CVE-2026-63374 via anyio (1.3.1)
anyio PYPI version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - acdh-spacytei =0.0.1, =0.0.5 - ircrobots 0.3.6 Source cves: CVE-2026-63374 Source advisory: OSV:GHSA-82R6-8W77-94W6...
acdh-spacytei (>=0.0.1, <=0.0.5), ircrobots (0.3.6) potentially affected by CVE-2026-64847 via anyio (1.3.1)
anyio PYPI version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - acdh-spacytei =0.0.1, =0.0.5 - ircrobots 0.3.6 Source cves: CVE-2026-64847 Source advisory: OSV:GHSA-5P39-CFHJ-2XMP...
CVE-2025-40702 Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CH
Cross-Site Scripting XSS vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage ACDH-CH, due to inadequate validation of user input when a POST request is sent. The vulnerabilities could allow a remote user to send specially crafted queries to an...
acapelladb (>=0.3.4, <=0.3.8), acapi (>=0.5.0, <=0.8.0) +705 more potentially affected by CVE-2025-50181 via urllib3 (1.24.3)
urllib3 PYPI version 1.24.3 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - acapelladb =0.3.4, =0.5.0, =0.0.1, =0.0.1, =0.24.0.2, =0.1.1, =0.0.2, =0.10.0, =0.81.3, =2.0.2, =2.1.5 and more Source cves: CVE-2025-50181 Sourc...