22 matches found
django-googleauth-ng (>=2.1.0, <=2.3.0) potentially affected by CVE-2026-102269 via pyjwt (0.4.1)
pyjwt PYPI version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - django-googleauth-ng =2.1.0, =2.3.0 Source cves: CVE-2026-102269 Source advisory: OSV:PYSEC-2026-4147...
django-googleauth-ng (>=2.1.0, <=2.3.0) potentially affected by CVE-2026-102270 via pyjwt (0.4.1)
pyjwt PYPI version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - django-googleauth-ng =2.1.0, =2.3.0 Source cves: CVE-2026-102270 Source advisory: OSV:PYSEC-2026-4148...
django-googleauth-ng (>=2.1.0, <=2.3.0) potentially affected by CVE-2026-101917 via pyjwt (0.4.1)
pyjwt PYPI version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - django-googleauth-ng =2.1.0, =2.3.0 Source cves: CVE-2026-101917 Source advisory: OSV:PYSEC-2026-4140...
django-googleauth-ng (>=2.1.0, <=2.3.0) potentially affected by CVE-2026-102268 via pyjwt (0.4.1)
pyjwt PYPI version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - django-googleauth-ng =2.1.0, =2.3.0 Source cves: CVE-2026-102268 Source advisory: OSV:PYSEC-2026-4145...
django-googleauth-ng (>=2.1.0, <=2.3.0) potentially affected by CVE-2026-102267 via pyjwt (0.4.1)
pyjwt PYPI version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - django-googleauth-ng =2.1.0, =2.3.0 Source cves: CVE-2026-102267 Source advisory: OSV:PYSEC-2026-4144...
django-googleauth-ng (>=2.1.0, <=2.3.0) potentially affected by CVE-2026-102270 via pyjwt (0.4.1)
pyjwt PYPI version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - django-googleauth-ng =2.1.0, =2.3.0 Source cves: CVE-2026-102270 Source advisory: OSV:GHSA-JWRC-G2Q2-PQ5P...
django-googleauth-ng (>=2.1.0, <=2.3.0) potentially affected by CVE-2026-102269 via pyjwt (0.4.1)
pyjwt PYPI version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - django-googleauth-ng =2.1.0, =2.3.0 Source cves: CVE-2026-102269 Source advisory: OSV:GHSA-HXM8-2XGR-2P9M...
django-googleauth-ng (>=2.1.0, <=2.3.0) potentially affected by CVE-2026-102268 via pyjwt (0.4.1)
pyjwt PYPI version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - django-googleauth-ng =2.1.0, =2.3.0 Source cves: CVE-2026-102268 Source advisory: OSV:GHSA-FFC3-869F-JXW9...
django-googleauth-ng (>=2.1.0, <=2.3.0) potentially affected by CVE-2026-102267 via pyjwt (0.4.1)
pyjwt PYPI version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - django-googleauth-ng =2.1.0, =2.3.0 Source cves: CVE-2026-102267 Source advisory: OSV:GHSA-9V7F-9G4P-FFGJ...
django-googleauth-ng (>=2.1.0, <=2.3.0) potentially affected by CVE-2026-101917 via pyjwt (0.4.1)
pyjwt PYPI version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - django-googleauth-ng =2.1.0, =2.3.0 Source cves: CVE-2026-101917 Source advisory: OSV:GHSA-2GX3-RCP4-G85Q...
django-googleauth-ng (>=2.1.0, <=2.3.0) potentially affected by CVE-2026-48526 via pyjwt (0.4.1)
pyjwt PYPI version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - django-googleauth-ng =2.1.0, =2.3.0 Source cves: CVE-2026-48526 Source advisory: OSV:GHSA-XGMM-8J9V-C9WX...
django-googleauth-ng (>=2.1.0, <=2.3.0) potentially affected by CVE-2026-48522 via pyjwt (0.4.1)
pyjwt PYPI version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - django-googleauth-ng =2.1.0, =2.3.0 Source cves: CVE-2026-48522 Source advisory: OSV:PYSEC-2026-175...
django-googleauth-ng (>=2.1.0, <=2.3.0) potentially affected by CVE-2026-48524 via pyjwt (0.4.1)
pyjwt PYPI version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - django-googleauth-ng =2.1.0, =2.3.0 Source cves: CVE-2026-48524 Source advisory: OSV:PYSEC-2026-177...
django-googleauth-ng (>=2.1.0, <=2.3.0) potentially affected by CVE-2026-48526 via pyjwt (0.4.1)
pyjwt PYPI version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - django-googleauth-ng =2.1.0, =2.3.0 Source cves: CVE-2026-48526 Source advisory: OSV:PYSEC-2026-179...
django-googleauth-ng (>=2.1.0, <=2.3.0) potentially affected by CVE-2026-32597 via pyjwt (0.4.1)
pyjwt PYPI version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - django-googleauth-ng =2.1.0, =2.3.0 Source cves: CVE-2026-32597 Source advisory: OSV:PYSEC-2026-120...
Fedora 38 : PyDrive2 (2023-21d2191c73)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-21d2191c73 advisory. Update to 1.18 and security fix for CVE-2023-49297 Tenable has extracted the preceding description block directly from the Fedora security advisory...
PyDrive2's unsafe YAML deserialization in LoadSettingsFile allows arbitrary code execution
Summary Unsafe YAML deserilization will result in arbitrary code execution. A maliciously crafted YAML file can cause arbitrary code execution if PyDrive2 is run in the same directory as it, or if it is loaded in via LoadSettingsFile. Details The loader being imported from the yaml library is...
GHSA-V5F6-HJMF-9MC5 PyDrive2's unsafe YAML deserialization in LoadSettingsFile allows arbitrary code execution
Summary Unsafe YAML deserilization will result in arbitrary code execution. A maliciously crafted YAML file can cause arbitrary code execution if PyDrive2 is run in the same directory as it, or if it is loaded in via LoadSettingsFile. Details The loader being imported from the yaml library is...
CVE-2023-49297
PyDrive2 is a wrapper library of google-api-python-client that simplifies many common Google Drive API V2 tasks. Unsafe YAML deserilization will result in arbitrary code execution. A maliciously crafted YAML file can cause arbitrary code execution if PyDrive2 is run in the same directory as it, o...
UBUNTU-CVE-2023-49297
PyDrive2 is a wrapper library of google-api-python-client that simplifies many common Google Drive API V2 tasks. Unsafe YAML deserilization will result in arbitrary code execution. A maliciously crafted YAML file can cause arbitrary code execution if PyDrive2 is run in the same directory as it, o...