eth-brownie (>=1.6.1, <=1.6.5), nucypher (>=2.0.0b0, <=2.0.0b11) +3 more potentially affected by unknown CVE via eth-abi (2.1.0)

eth-abi PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on eth-abi and may be impacted: - eth-brownie =1.6.1, =2.0.0b0, =0.200.0rc3, =0.1.0, =0.7.0, =0.13.2 Source cves: unknown CVE Source advisory: OSV:GHSA-3QWC-47JF-5RF7...

aleph-client (>=0.6.0, <=0.6.1), aleph-sdk-python (>=0.7.0b1, <=0.9.0) +5 more potentially affected by unknown CVE via eth-abi (4.0.0b2)

eth-abi PYPI version 4.0.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on eth-abi and may be impacted: - aleph-client =0.6.0, =0.7.0b1, =1.0.0rc1, =1.0.1, =1.3.1 Source cves: unknown CVE Source advisory: OSV:GHSA-3QWC-47JF-5RF7...

ape-addressbook (>=0.4.0a1, <=0.5.0a1), ape-alchemy (>=0.1.0b1, <=0.5.4) +54 more potentially affected by unknown CVE via eth-abi (3.0.1)

eth-abi PYPI version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on eth-abi and may be impacted: - ape-addressbook =0.4.0a1, =0.1.0b1, =0.1.22, =0.4.0, =0.4.0a0, =0.1.0a0, =0.4.0a1, =0.1.0a2, =0.4.0, =0.4.0, =0.4.0, =0.4.0a1, =0.4.0, =0.5.5 and...

eth-abi is vulnerable to recursive DoS

This is related to recent ZST stuff https://github.com/ethereum/eth-abi/security/advisories/GHSA-rqr8-pxh7-cq3g, but it's a different one. Basically a recursive pointer issue py from ethabi import decode payload =...

nucypher (>=0.1.0a2, <=0.1.0a20) potentially affected by unknown CVE via eth-abi (2.0.0b5)

eth-abi PYPI version 2.0.0b5 is affected by a known vulnerability. The following packages have a transitive dependency on eth-abi and may be impacted: - nucypher =0.1.0a2, =0.1.0a20 Source cves: unknown CVE Source advisory: OSV:GHSA-3QWC-47JF-5RF7...

0x-order-utils (>=1.0.2, <=1.1.1), 0x-web3 (>=4.7.1, <=4.8.2.1) +55 more potentially affected by unknown CVE via eth-abi (1.3.0)

eth-abi PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on eth-abi and may be impacted: - 0x-order-utils =1.0.2, =4.7.1, =0.1.0, =0.1.3, =0.0.1, =1.0.1, =0.1.4, =2.0.0, =0.0.1, =0.2.2, =0.3.6, =0.4.5 and more Source cves: unknown CVE...

ape-alchemy (>=0.1.0, <=0.2.0), ape-ens (>=0.1.0, <=0.2.0) +25 more potentially affected by unknown CVE via eth-abi (2.1.1)

eth-abi PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on eth-abi and may be impacted: - ape-alchemy =0.1.0, =0.1.0, =0.1.0, =0.0.0, =0.0.0, =0.0.5, =0.0.0a1, =0.0.1a12, =1.6.6, =1.6.4.2, =0.2.1, =0.1.0, =0.1.0, =0.3.8 and more Source...

rubi (>=2.6.0, <=3.0.0) potentially affected by unknown CVE via eth-abi (4.1.0)

eth-abi PYPI version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on eth-abi and may be impacted: - rubi =2.6.0, =3.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-3QWC-47JF-5RF7...

0x-web3 (5.0.0a5), abi-maker (0.1.0) +274 more potentially affected by unknown CVE via eth-abi (2.2.0)

eth-abi PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on eth-abi and may be impacted: - 0x-web3 5.0.0a5 - abi-maker 0.1.0 - acapy-mydata-did-protocol =0.1.3, =0.1.13, =0.1.0, =0.0.3, =0.1.0, =0.1.0, =0.3.0, =0.3.0, =0.1.0a1, =0.3.0 an...

moonwalking (>=0.1.0, <=0.1.4), raiden (>=0.10.0, <=0.100.2) +1 more potentially affected by unknown CVE via eth-abi (1.2.0)

eth-abi PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on eth-abi and may be impacted: - moonwalking =0.1.0, =0.10.0, =0.100.2 - raiden-services 0.0.1 Source cves: unknown CVE Source advisory: OSV:GHSA-3QWC-47JF-5RF7...

django-ethereum-events (1.0.5), layer-py (>=0.0.1, <=0.0.3) +1 more potentially affected by unknown CVE via eth-abi (1.1.1)

eth-abi PYPI version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on eth-abi and may be impacted: - django-ethereum-events 1.0.5 - layer-py =0.0.1, =0.4.0, =0.5.1 Source cves: unknown CVE Source advisory: OSV:GHSA-3QWC-47JF-5RF7...

aark-sdk (>=0.1.2, <=0.1.9), arbitrum-py (0.1.0) +37 more potentially affected by unknown CVE via eth-abi (4.2.1)

eth-abi PYPI version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on eth-abi and may be impacted: - aark-sdk =0.1.2, =0.2.0, =0.2.1, =0.1.25, =0.0.1, =7.0.0rc3, =0.1.0b1, =7.0.0, =0.2.1, =4.0.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE...

avotes-parser-cli (>=0.5.5.post5, <=0.5.6), avotes-parser-core (>=0.5.5.post4, <=0.5.6) +6 more potentially affected by unknown CVE via eth-abi (5.0.0)

eth-abi PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on eth-abi and may be impacted: - avotes-parser-cli =0.5.5.post5, =0.5.5.post4, =1.20.0, =0.0.1, =1.2.87, =0.8.14, =3.4.7, =4.0.50 Source cves: unknown CVE Source advisory:...

clove (>=1.0.0, <=1.2.16), eth-tester (0.1.0b33) +6 more potentially affected by unknown CVE via eth-abi (2.0.0b9)

eth-abi PYPI version 2.0.0b9 is affected by a known vulnerability. The following packages have a transitive dependency on eth-abi and may be impacted: - clove =1.0.0, =0.1.4a2, =0.1.0a23, =0.0.1, =0.1.3a3, =0.1.2b2, =4.0.0b9, =4.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-3QWC-47JF-5RF...

dbot-manager (>=0.0.6, <=0.0.8), eth-cobra (>=0.1.0, <=0.1.1) +14 more potentially affected by unknown CVE via eth-abi (1.2.2)

eth-abi PYPI version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on eth-abi and may be impacted: - dbot-manager =0.0.6, =0.1.0, =0.1.0a32, =0.2.0rc1, =0.2.0a28, =1.0.0a1, =0.1.14, =0.1.7, =0.3.2, =0.1.0a12, =0.1.0a16 - twig 0.1.0a4 and more Sour...

avotes-parser-cli (>=0.5.5.post5, <=0.5.6), avotes-parser-core (>=0.5.5.post4, <=0.5.6) +6 more potentially affected by unknown CVE via eth-abi (5.0.0)

eth-abi PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on eth-abi and may be impacted: - avotes-parser-cli =0.5.5.post5, =0.5.5.post4, =1.20.0, =0.0.1, =1.2.87, =0.8.14, =3.4.7, =4.0.50 Source cves: unknown CVE Source advisory:...

autonomy-dev (>=0.2.40, <=0.2.48), candy-web (1.0.0) +44 more potentially affected by unknown CVE via eth-abi (4.0.0)

eth-abi PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on eth-abi and may be impacted: - autonomy-dev =0.2.40, =0.10.12, =2.1.6, =0.1.0, =2.4.0 - saveass 1.0.0 - seniorweb 1.0.0 - stamwqr 1.0.0 - sweet-web3 1.0.0 - taylor-swift-web 1.0...

eth-brownie (>=1.2.0, <=1.6.0), nucypher (>=0.1.0a27, <=1.2.0b2) +1 more potentially affected by unknown CVE via eth-abi (2.0.0)

eth-abi PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on eth-abi and may be impacted: - eth-brownie =1.2.0, =0.1.0a27, =1.2.0b2 - web3fsnpy 1.0.2 Source cves: unknown CVE Source advisory: OSV:GHSA-3QWC-47JF-5RF7...

eth-tester-rpc (>=0.1.0b1, <=0.2.0b1), raiden (0.8.0) +2 more potentially affected by unknown CVE via eth-abi (2.0.0b3)

eth-abi PYPI version 2.0.0b3 is affected by a known vulnerability. The following packages have a transitive dependency on eth-abi and may be impacted: - eth-tester-rpc =0.1.0b1, =0.2.0, =0.3.1 - vyper-debug 0.1.2b4 Source cves: unknown CVE Source advisory: OSV:GHSA-3QWC-47JF-5RF7...

django-ethereum-events (>=0.1.3, <=0.1.4), ens (>=0.6.0, <=0.6.1) +3 more potentially affected by unknown CVE via eth-abi (0.5.0)

eth-abi PYPI version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on eth-abi and may be impacted: - django-ethereum-events =0.1.3, =0.6.0, =0.1.2, =2.2.1, =3.16.5, =4.0.0b7 Source cves: unknown CVE Source advisory: OSV:GHSA-3QWC-47JF-5RF7...