tom-education (1.1.4) potentially affected by CVE-2023-41334 via astropy (3.2.2)

astropy PYPI version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on astropy and may be impacted: - tom-education 1.1.4 Source cves: CVE-2023-41334 Source advisory: OSV:PYSEC-2026-1199...

nuradioreco (>=0.2.1, <=1.1.1) potentially affected by CVE-2023-41334 via astropy (2.0.14)

astropy PYPI version 2.0.14 is affected by a known vulnerability. The following packages have a transitive dependency on astropy and may be impacted: - nuradioreco =0.2.1, =1.1.1 Source cves: CVE-2023-41334 Source advisory: OSV:PYSEC-2026-1199...

exorad (>=2.1.78, <=2.1.79.1), lisacattools (>=1.0.0, <=1.1.0) +1 more potentially affected by CVE-2023-41334 via astropy (4.2.0)

astropy PYPI version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on astropy and may be impacted: - exorad =2.1.78, =1.0.0, =2.6.0a1, =2.6.2 Source cves: CVE-2023-41334 Source advisory: OSV:PYSEC-2026-1199...

aimapper (0.1.0), amat (2.2.20) +80 more potentially affected by CVE-2023-41334 via astropy (4.3.1)

astropy PYPI version 4.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on astropy and may be impacted: - aimapper 0.1.0 - amat 2.2.20 - ampel-ztf =0.7.1a3, =1.0.0, =1.0.0, =0.3.0, =0.4.0, =0.1.1, =0.1.0, =0.0.1a5, =1.2.0, =0.1.0, =0.9.3, =0.9.48 and...

aimfast (>=1.3.0, <=1.3.3), aphos-openapi (>=2.5.0, <=2.5.3) +98 more potentially affected by CVE-2023-41334 via astropy (>=5.0.0rc2, <=5.3.2)

astropy PYPI version =5.0.0rc2, =1.3.0, =2.5.0, =0.0.3, =0.0.1, =0.0.2, =0.0.1, =1.3.3, =2021.10.14.1, =2021.10.14.1, =2021.10.14.1, =1.0.2, =2023.8.2, =2023.8.2.1 and more Source cves: CVE-2023-41334 Source advisory: OSV:PYSEC-2026-1199...

cubeviz (>=0.0.0, <=0.3.3), gistpipeline (3.0.0) +1 more potentially affected by CVE-2023-41334 via astropy (3.1.0)

astropy PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on astropy and may be impacted: - cubeviz =0.0.0, =0.3.3 - gistpipeline 3.0.0 - properimage 0.6.0 Source cves: CVE-2023-41334 Source advisory: OSV:PYSEC-2026-1199...

astro-ghost (0.1.3), exorad (>=2.1.68, <=2.1.70.1) +7 more potentially affected by CVE-2023-41334 via astropy (4.0.0)

astropy PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on astropy and may be impacted: - astro-ghost 0.1.3 - exorad =2.1.68, =0.6.1, =0.9.1, =1.0.0, =1.3.1, =0.0.1, =0.1.10, =0.1.11 Source cves: CVE-2023-41334 Source advisory:...

ligo-skymap (0.5.1), simmer (>=0.3.10, <=0.4.4) potentially affected by CVE-2023-41334 via astropy (4.0.6)

astropy PYPI version 4.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on astropy and may be impacted: - ligo-skymap 0.5.1 - simmer =0.3.10, =0.4.4 Source cves: CVE-2023-41334 Source advisory: OSV:PYSEC-2026-1199...

deproject (0.2.0) potentially affected by CVE-2023-41334 via astropy (3.1.0rc2)

astropy PYPI version 3.1.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on astropy and may be impacted: - deproject 0.2.0 Source cves: CVE-2023-41334 Source advisory: OSV:PYSEC-2026-1199...

blip-alpha (>=0.0.3, <=0.0.19), blip-gw (>=1.0.0, <=1.0.6) +7 more potentially affected by CVE-2023-41334 via astropy (4.0.1.post1)

astropy PYPI version 4.0.1.post1 is affected by a known vulnerability. The following packages have a transitive dependency on astropy and may be impacted: - blip-alpha =0.0.3, =1.0.0, =0.1.0, =0.0.1, =0.17.4, =1.8.1, =1.0.0, =1.0.1 Source cves: CVE-2023-41334 Source advisory: OSV:PYSEC-2026-1199...

astropixie-widgets (>=0.1.0, <=0.1.2), autolens (0.1.2) +1 more potentially affected by CVE-2023-41334 via astropy (3.0.0)

astropy PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on astropy and may be impacted: - astropixie-widgets =0.1.0, =0.1.2 - autolens 0.1.2 - moons1d 0.2.4 Source cves: CVE-2023-41334 Source advisory: OSV:PYSEC-2026-1199...

vizic (>=0.1.0, <=0.3.0) potentially affected by CVE-2023-41334 via astropy (1.2.1)

astropy PYPI version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on astropy and may be impacted: - vizic =0.1.0, =0.3.0 Source cves: CVE-2023-41334 Source advisory: OSV:PYSEC-2026-1199...

mccd (1.1.0) potentially affected by CVE-2023-41334 via astropy (4.0.2)

astropy PYPI version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on astropy and may be impacted: - mccd 1.1.0 Source cves: CVE-2023-41334 Source advisory: OSV:PYSEC-2026-1199...

vizic (>=0.1.0, <=0.3.0) potentially affected by unknown CVE via astropy (1.2.1)

astropy PYPI version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on astropy and may be impacted: - vizic =0.1.0, =0.3.0 Source cves: unknown CVE Source advisory: MEND:WS-2017-0234...

aimapper (0.1.0), aimfast (>=0.1.0, <=1.3.3) +238 more potentially affected by unknown CVE via astropy (>=1.2.1, <=5.3.2)

astropy PYPI version =1.2.1, =0.1.0, =0.7.1a3, =2.5.0, =0.0.3, =0.0.1, =1.0.1, =0.3.0, =0.0.2, =1.0.0, =1.4.0 and more Source cves: unknown CVE Source advisory: MEND:WS-2023-0378...

EUVD-2024-0929

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2023-41334

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Astropy is a project for astronomy in Python that fosters interoperability between Python astronomy packages. Version 5.3.2 of the Astropy core package is...

Mageia: Security Advisory (MGASA-2024-0313)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2024-0313 Updated python-astropy packages fix security vulnerability

Version 5.3.2 of the Astropy core package is vulnerable to remote code execution due to improper input validation in the TranformGraph.todotgraph function. A malicious user can provide a command or a script file as a value to the savelayout argument, which will be placed as the first value in a...

Updated python-astropy packages fix security vulnerability

Version 5.3.2 of the Astropy core package is vulnerable to remote code execution due to improper input validation in the TranformGraph.todotgraph function. A malicious user can provide a command or a script file as a value to the savelayout argument, which will be placed as the first value in a...