vfxt (>=0.5.2.1, <=0.5.4.3) potentially affected by CVE-2022-30187 via azure-storage-queue (2.0.1)

azure-storage-queue PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on azure-storage-queue and may be impacted: - vfxt =0.5.2.1, =0.5.4.3 Source cves: CVE-2022-30187 Source advisory: OSV:PYSEC-2026-2388...

azureml-automl-dnn-nlp (>=1.37.0, <=1.42.0.post1), azureml-automl-dnn-vision (>=1.37.0, <=1.42.0) +10 more potentially affected by CVE-2022-30187 via azure-storage-queue (>=12.1.2, <=12.3.0)

azure-storage-queue PYPI version =12.1.2, =1.37.0, =1.37.0, =1.37.0, =1.37.0, =1.37.0, =0.0.1, =0.0.1, =0.7.10, =0.1.1, =0.1.0, =2.0.0, =4.4.1 - vfxt 0.5.4.4 Source cves: CVE-2022-30187 Source advisory: OSV:PYSEC-2026-2388...

saltext-azurerm (1.0.0) potentially affected by CVE-2022-30187 via azure-storage-queue (1.1.0)

azure-storage-queue PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on azure-storage-queue and may be impacted: - saltext-azurerm 1.0.0 Source cves: CVE-2022-30187 Source advisory: OSV:PYSEC-2026-2388...

baybars (>=0.0.1, <=0.0.5) potentially affected by CVE-2022-30187 via azure-storage-queue (0.37.0)

azure-storage-queue PYPI version 0.37.0 is affected by a known vulnerability. The following packages have a transitive dependency on azure-storage-queue and may be impacted: - baybars =0.0.1, =0.0.5 Source cves: CVE-2022-30187 Source advisory: OSV:PYSEC-2026-2388...

appdaemon (>=4.0.4, <=4.0.5), aviatrix-discovery (>=0.2.100, <=0.2.148) +18 more potentially affected by CVE-2022-30187 via azure-storage-queue (1.4.0)

azure-storage-queue PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on azure-storage-queue and may be impacted: - appdaemon =4.0.4, =0.2.100, =0.2.123, =3.0.0, =1.0.86, =1.0.0, =0.0.2, =0.0.1, =0.15.8, =0.2.10, =1.12.1, =2.4.1 and more...

Microsoft: CBC Padding Oracle in Azure Blob Storage Encryption Library

SummaryThe Azure Storage Encryption library in Java and other languages is vulnerable to a CBC Padding Oracle attack, similar to CVE-2020-8911. The library is not vulnerable to the equivalent of CVE-2020-8912, but only because it currently only supports AES-CBC as encryption mode. SeverityModerat...

blobxfer (>=1.0.0, <=1.1.0) potentially affected by CVE-2022-30187 via azure-storage-blob (0.37.1)

azure-storage-blob PYPI version 0.37.1 is affected by a known vulnerability. The following packages have a transitive dependency on azure-storage-blob and may be impacted: - blobxfer =1.0.0, =1.1.0 Source cves: CVE-2022-30187 Source advisory: OSV:PYSEC-2026-784...

blobxfer (1.1.1) potentially affected by CVE-2022-30187 via azure-storage-blob (1.0.0)

azure-storage-blob PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on azure-storage-blob and may be impacted: - blobxfer 1.1.1 Source cves: CVE-2022-30187 Source advisory: OSV:PYSEC-2026-784...

altf1be-helpers (2.1.4), amplo (>=0.9.0, <=0.10.1) +127 more potentially affected by CVE-2022-30187 via azure-storage-blob (>=12.0.0b3, <=12.13.0b1)

azure-storage-blob PYPI version =12.0.0b3, =0.9.0, =2020.5.20rc1, =1.0.0b1, =4.0.6, =0.1.0b1, =0.2.5, =1.0.0b1, =0.21.2111.177147b1, =12.0.0b1, =12.0.0b5, =0.2.7, =0.5.0 and more Source cves: CVE-2022-30187 Source advisory: OSV:PYSEC-2026-784...

afs2-datasource (>=3.6.0, <=3.8.2), azblobexplorer (>=1.1.1, <=1.1.4) +4 more potentially affected by CVE-2022-30187 via azure-storage-blob (2.0.1)

azure-storage-blob PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on azure-storage-blob and may be impacted: - afs2-datasource =3.6.0, =1.1.1, =1.8.0, =0.0.1, =0.5.2.1, =0.5.4.3 - xtlib 0.0.996 Source cves: CVE-2022-30187 Source...

blobxfer (>=1.5.5, <=1.6.0) potentially affected by CVE-2022-30187 via azure-storage-blob (1.4.0)

azure-storage-blob PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on azure-storage-blob and may be impacted: - blobxfer =1.5.5, =1.6.0 Source cves: CVE-2022-30187 Source advisory: OSV:PYSEC-2026-784...

blobxfer (1.3.1), kfserving (0.2.1.0) potentially affected by CVE-2022-30187 via azure-storage-blob (1.3.0)

azure-storage-blob PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on azure-storage-blob and may be impacted: - blobxfer 1.3.1 - kfserving 0.2.1.0 Source cves: CVE-2022-30187 Source advisory: OSV:PYSEC-2026-784...

agogosml (>=0.1.1, <=0.1.3), appdaemon (>=4.0.4, <=4.0.5) +40 more potentially affected by CVE-2022-30187 via azure-storage-blob (1.5.0)

azure-storage-blob PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on azure-storage-blob and may be impacted: - agogosml =0.1.1, =4.0.4, =0.2.100, =0.2.123, =1.0.0, =0.1.9, =3.0.0, =1.1.0, =2.0.68, =3.2.2, =0.1.0, =1.2.0rc1, =0.95.0,...

adlfs (>=0.1.2, <=0.2.0), airflow-ditto (0.0.1.2) +34 more potentially affected by CVE-2022-30187 via azure-storage-blob (2.1.0)

azure-storage-blob PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on azure-storage-blob and may be impacted: - adlfs =0.1.2, =0.0.1, =0.6.0, =1.0.1, =0.1.11, =1.1.5, =0.0.38, =0.1.15, =0.0.3, =0.0.1, =1.9.4, =4.7.0, =0.7.0, =0.7.9 and...

aztk (>=0.9.0, <=0.10.3), azure-cli (>=2.0.2, <=2.0.67) +8 more potentially affected by CVE-2022-30187 via azure-storage-blob (1.3.1)

azure-storage-blob PYPI version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on azure-storage-blob and may be impacted: - aztk =0.9.0, =2.0.2, =2.1.7, =0.4.4, =1.4.0, =1.0.0.post1, =2.0.66, =2.2.9, =0.4.9, =0.4.12 Source cves: CVE-2022-30187 Sour...

baybars (>=0.0.1, <=0.0.5), blobxfer (>=1.0.0rc1, <=1.0.0rc3) potentially affected by CVE-2022-30187 via azure-storage-blob (0.37.0)

azure-storage-blob PYPI version 0.37.0 is affected by a known vulnerability. The following packages have a transitive dependency on azure-storage-blob and may be impacted: - baybars =0.0.1, =1.0.0rc1, =1.0.0rc3 Source cves: CVE-2022-30187 Source advisory: OSV:PYSEC-2026-784...

aztk (>=0.7.0b14, <=0.8.1), azure-cli-acr (>=2.0.27, <=2.1.6) +5 more potentially affected by CVE-2022-30187 via azure-storage-blob (1.1.0)

azure-storage-blob PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on azure-storage-blob and may be impacted: - aztk =0.7.0b14, =2.0.27, =0.4.1, =1.2.0, =0.0.2, =0.0.3 - saltext-azurerm 1.0.0 - spongeblob 0.1.1 Source cves: CVE-2022-301...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: tflint, k3s, gitlab-kas, kubernetes-dashboard, kyverno, caddy, docker-cli-buildx, podman, openbao, cluster-api-azure-controller, rancher-machine, buildkitd, trivy, k9s, snyk-cli, kaf, nfpm, flux-notification-controller, glab, rancher, step, apko, guac, chezmoi,...

SUSE SLES15 Security Update : azure-storage-azcopy (SUSE-SU-2026:2466-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2466-1 advisory. This update for azure-storage-azcopy fixes the following issues Update to 10.32.4: - CVE-2025-47907: database/sql: incorrect result...

Security update for azure-storage-azcopy

This update for azure-storage-azcopy fixes the following issues Update to 10.32.4: CVE-2025-47907: database/sql: incorrect results returned from Rows.Scan bsc1247720. CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header...