crl-datacube (0.1.13) potentially affected by CVE-2026-23528 via distributed (2024.11.0)

distributed PYPI version 2024.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - crl-datacube 0.1.13 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

PT-2024-38056 · F Logic · F-Logic Datacube3

Name of the Vulnerable Software and Affected Versions: F-logic DataCube3 version 1.0 Description: A critical issue has been found in the HTTP POST Request Handler component, specifically in the file /admin/config time sync.php. The manipulation of the ntp server argument leads to os command...

Field Logic DataCube3 Security Vulnerability

Field Logic DataCube4 is a small measurement terminal system from Field Logic. A security vulnerability exists in Field Logic DataCube3 version 1.0 that stems from vulnerability to unauthenticated SQL injection, which could allow an unauthenticated malicious actor to execute arbitrary SQL queries...

PT-2024-2171 · Unknown · F-Logic Datacube3

Name of the Vulnerable Software and Affected Versions: F-logic DataCube3 version 1.0 Description: The issue is related to unrestricted file upload, which could allow an authenticated malicious actor to upload a file of a dangerous type by manipulating the filename extension. This could potentiall...

datacube-wps (>=0.4.0, <=0.4.8) potentially affected by CVE-2021-39371 via pywps (4.2.4)

pywps PYPI version 4.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on pywps and may be impacted: - datacube-wps =0.4.0, =0.4.8 Source cves: CVE-2021-39371 Source advisory: GHSA-P9WF-3XPG-C9G5...

datacube-wps (>=0.4.0, <=0.4.8) potentially affected by CVE-2021-39371 via pywps (4.2.4)

pywps PYPI version 4.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on pywps and may be impacted: - datacube-wps =0.4.0, =0.4.8 Source cves: CVE-2021-39371 Source advisory: OSV:GHSA-P9WF-3XPG-C9G5...

datacube-wps (>=0.4.0, <=0.4.8) potentially affected by CVE-2021-39371 via pywps (4.2.4)

pywps PYPI version 4.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on pywps and may be impacted: - datacube-wps =0.4.0, =0.4.8 Source cves: CVE-2021-39371 Source advisory: OSV:PYSEC-2021-121...

datacube (1.6.2), osm-export-tool (0.0.17) +1 more potentially affected by CVE-2019-17545 via gdal (2.3.3)

gdal PYPI version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on gdal and may be impacted: - datacube 1.6.2 - osm-export-tool 0.0.17 - pysy =0.0.8, =0.0.10 Source cves: CVE-2019-17545 Source advisory: OSV:PYSEC-2019-241...