hoppr-cop

Hoppr-Cop For Policing Your SBOM Vulnerabilities Hoppr Cop is a cli and python library that generates high quality vulnerability information from a cyclone-dx Software Bill of Materials SBOM by aggregating data from multiple vulnerability databases. This project is offered as part of the hoppr...

ddev (>=1.4.1, <=2.1.0), hoppr (>=1.7.0, <=1.13.2) +2 more potentially affected by unknown CVE via in-toto (>=1.0.1, <=1.4.0)

in-toto PYPI version =1.0.1, =1.4.1, =1.7.0, =1.0.18, =1.4.9 - hoppr-openssf-scorecard 0.0.1 Source cves: unknown CVE Source advisory: OSV:GHSA-JJGP-WHRP-GQ8M...

ddev (>=1.4.1, <=2.1.0), hoppr (>=1.7.0, <=1.13.2) +2 more potentially affected by unknown CVE via in-toto (>=1.0.1, <=1.4.0)

in-toto PYPI version =1.0.1, =1.4.1, =1.7.0, =1.0.18, =1.4.9 - hoppr-openssf-scorecard 0.0.1 Source cves: unknown CVE Source advisory: GHSA-JJGP-WHRP-GQ8M...

hoppr (>=1.7.0, <=1.13.2), hoppr-cop (>=1.0.18, <=1.4.9) +1 more potentially affected by CVE-2023-32076 via in-toto (1.4.0)

in-toto PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on in-toto and may be impacted: - hoppr =1.7.0, =1.0.18, =1.4.9 - hoppr-openssf-scorecard 0.0.1 Source cves: CVE-2023-32076 Source advisory: OSV:GHSA-WC64-C5RV-32PF...

ddev (>=1.4.1, <=2.1.0), hoppr (>=1.7.0, <=1.13.2) +2 more potentially affected by CVE-2023-32076 via in-toto (>=1.0.1, <=1.4.0)

in-toto PYPI version =1.0.1, =1.4.1, =1.7.0, =1.0.18, =1.4.9 - hoppr-openssf-scorecard 0.0.1 Source cves: CVE-2023-32076 Source advisory: GHSA-WC64-C5RV-32PF...

hoppr (>=1.7.0, <=1.13.2), hoppr-cop (>=1.0.18, <=1.4.9) +1 more potentially affected by CVE-2023-32076 via in-toto (1.4.0)

in-toto PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on in-toto and may be impacted: - hoppr =1.7.0, =1.0.18, =1.4.9 - hoppr-openssf-scorecard 0.0.1 Source cves: CVE-2023-32076 Source advisory: OSV:PYSEC-2023-63...

ddev (>=1.4.1, <=2.1.0), hoppr (>=1.7.0, <=1.13.2) +2 more potentially affected by CVE-2023-32076 via in-toto (>=1.0.1, <=1.4.0)

in-toto PYPI version =1.0.1, =1.4.1, =1.7.0, =1.0.18, =1.4.9 - hoppr-openssf-scorecard 0.0.1 Source cves: CVE-2023-32076 Source advisory: MEND:CVE-2023-32076...