Design/Logic Flaw

Autobahn|Python before 20.12.3 allows redirect header injection...

nucypher (>=0.1.0a17, <=0.1.0a20) potentially affected by CVE-2020-35678 via autobahn (19.2.1)

autobahn PYPI version 19.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - nucypher =0.1.0a17, =0.1.0a20 Source cves: CVE-2020-35678 Source advisory: OSV:PYSEC-2020-25...

nucypher (>=0.1.0a23, <=0.1.0a26) potentially affected by CVE-2020-35678 via autobahn (19.6.2)

autobahn PYPI version 19.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - nucypher =0.1.0a23, =0.1.0a26 Source cves: CVE-2020-35678 Source advisory: OSV:PYSEC-2020-25...

autobahntestsuite (>=0.8.0, <=0.8.2) potentially affected by CVE-2020-35678 via autobahn (0.10.9)

autobahn PYPI version 0.10.9 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - autobahntestsuite =0.8.0, =0.8.2 Source cves: CVE-2020-35678 Source advisory: OSV:PYSEC-2020-25...

marlben (>=1.0.0, <=1.0.4), neural-mmo (>=1.5.1, <=1.5.2.2) +1 more potentially affected by CVE-2020-35678 via autobahn (19.3.3)

autobahn PYPI version 19.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - marlben =1.0.0, =1.5.1, =1.5.2.2 - nmmo 1.5.3.2 Source cves: CVE-2020-35678 Source advisory: OSV:PYSEC-2020-25...

missinglinkai-resource-manager-docker (>=1.0.367, <=2.14.1737), pyne-xmas-elves (>=0.1.0, <=0.7.1) +2 more potentially affected by CVE-2020-35678 via autobahn (17.10.1)

autobahn PYPI version 17.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - missinglinkai-resource-manager-docker =1.0.367, =0.1.0, =0.7.2, =0.7.7, =0.10.1 Source cves: CVE-2020-35678 Source advisory: OSV:PYSEC-2020-25...

compas-cloud (0.1.0), nucypher (>=1.2.0b2, <=2.0.0b3) potentially affected by CVE-2020-35678 via autobahn (19.11.1)

autobahn PYPI version 19.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - compas-cloud 0.1.0 - nucypher =1.2.0b2, =2.0.0b3 Source cves: CVE-2020-35678 Source advisory: OSV:PYSEC-2020-25...

bittensor (>=1.0.0, <=1.0.4), hazard-feed (>=0.2.0, <=0.2.5) +2 more potentially affected by CVE-2020-35678 via autobahn (>=20.1.3, <=20.7.1)

autobahn PYPI version =20.1.3, =1.0.0, =0.2.0, =2.0.0b4, =0.0.1, =0.0.8 Source cves: CVE-2020-35678 Source advisory: OSV:PYSEC-2020-25...

paps-settings (>=0.2.4a0, <=0.2.6a0) potentially affected by CVE-2020-35678 via autobahn (0.13.1)

autobahn PYPI version 0.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - paps-settings =0.2.4a0, =0.2.6a0 Source cves: CVE-2020-35678 Source advisory: OSV:PYSEC-2020-25...

crossbar (17.3.1) potentially affected by CVE-2020-35678 via autobahn (0.18.1)

autobahn PYPI version 0.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - crossbar 17.3.1 Source cves: CVE-2020-35678 Source advisory: OSV:PYSEC-2020-25...

golemrpc (>=0.3.4, <=0.3.6) potentially affected by CVE-2020-35678 via autobahn (18.10.1)

autobahn PYPI version 18.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - golemrpc =0.3.4, =0.3.6 Source cves: CVE-2020-35678 Source advisory: OSV:PYSEC-2020-25...

UBUNTU-CVE-2020-35678

Autobahn|Python before 20.12.3 allows redirect header injection...

PYSEC-2020-25

Autobahn|Python before 20.12.3 allows redirect header injection...

CVE-2020-35678

Autobahn|Python before 20.12.3 allows redirect header injection...

nucypher (0.1.0a29) potentially affected by CVE-2020-35678 via autobahn (19.9.3)

autobahn PYPI version 19.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - nucypher 0.1.0a29 Source cves: CVE-2020-35678 Source advisory: OSV:PYSEC-2020-25...

PYSEC-2020-25

Autobahn|Python before 20.12.3 allows redirect header injection...

aiorest-ws (>=1.1.0, <=1.1.1) potentially affected by CVE-2020-35678 via autobahn (0.16.0)

autobahn PYPI version 0.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - aiorest-ws =1.1.0, =1.1.1 Source cves: CVE-2020-35678 Source advisory: OSV:PYSEC-2020-25...

nucypher (>=0.1.0a2, <=0.1.0a9) potentially affected by CVE-2020-35678 via autobahn (19.1.1)

autobahn PYPI version 19.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - nucypher =0.1.0a2, =0.1.0a9 Source cves: CVE-2020-35678 Source advisory: OSV:PYSEC-2020-25...

brokerkit-zerodha (1.0.3), buckets-for-zerodha (0.1.0) +30 more potentially affected by CVE-2020-35678 via autobahn (19.11.2)

autobahn PYPI version 19.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - brokerkit-zerodha 1.0.3 - buckets-for-zerodha 0.1.0 - easy-kite-methods =0.0.1, =0.0.1, =1.0.0, =1.0.2, =0.19.0, =0.0.1, =0.0.1, =0.1.0, =0.1....

nucypher (>=0.1.0a30, <=1.2.0b1) potentially affected by CVE-2020-35678 via autobahn (19.10.1)

autobahn PYPI version 19.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - nucypher =0.1.0a30, =1.2.0b1 Source cves: CVE-2020-35678 Source advisory: OSV:PYSEC-2020-25...