57 matches found
armada-airflow (0.5.4), jefferson-street-composer (>=1.3.0, <=1.7.1) potentially affected by CVE-2026-59242 via apache-airflow (2.7.1)
apache-airflow PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - armada-airflow 0.5.4 - jefferson-street-composer =1.3.0, =1.7.1 Source cves: CVE-2026-59242 Source advisory: OSV:GHSA-FCMM-42R9-MMMM...
armada-airflow (0.5.4), jefferson-street-composer (>=1.3.0, <=1.7.1) potentially affected by CVE-2026-54183 via apache-airflow (2.7.1)
apache-airflow PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - armada-airflow 0.5.4 - jefferson-street-composer =1.3.0, =1.7.1 Source cves: CVE-2026-54183 Source advisory: OSV:GHSA-G4QJ-5VXV-WGGF...
armada-airflow (0.5.4), jefferson-street-composer (>=1.3.0, <=1.7.1) potentially affected by CVE-2026-68076 via apache-airflow (2.7.1)
apache-airflow PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - armada-airflow 0.5.4 - jefferson-street-composer =1.3.0, =1.7.1 Source cves: CVE-2026-68076 Source advisory: OSV:PYSEC-2026-3709...
armada-airflow (0.5.4), jefferson-street-composer (>=1.3.0, <=1.7.1) potentially affected by CVE-2026-54183 via apache-airflow (2.7.1)
apache-airflow PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - armada-airflow 0.5.4 - jefferson-street-composer =1.3.0, =1.7.1 Source cves: CVE-2026-54183 Source advisory: OSV:PYSEC-2026-3705...
armada-airflow (0.5.4), jefferson-street-composer (>=1.3.0, <=1.7.1) potentially affected by CVE-2026-49487 via apache-airflow (2.7.1)
apache-airflow PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - armada-airflow 0.5.4 - jefferson-street-composer =1.3.0, =1.7.1 Source cves: CVE-2026-49487 Source advisory: OSV:GHSA-22HF-VX2V-GJFF...
armada-airflow (0.5.4), jefferson-street-composer (>=1.3.0, <=1.7.1) potentially affected by CVE-2026-48828 via apache-airflow (2.7.1)
apache-airflow PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - armada-airflow 0.5.4 - jefferson-street-composer =1.3.0, =1.7.1 Source cves: CVE-2026-48828 Source advisory: OSV:GHSA-563F-2439-RMQ4...
PYSEC-2026-826 sviehb/jefferson vulnerable to path traversal
A vulnerability has been found in the sviehb/jefferson JFFS2 filesystem extraction tool. This vulnerability affects unknown code of the file src/scripts/jefferson. The manipulation leads to path traversal. The attack can be initiated remotely. Upgrading to version 0.4 is able to address this issu...
sviehb/jefferson vulnerable to path traversal
A vulnerability has been found in the sviehb/jefferson JFFS2 filesystem extraction tool. This vulnerability affects unknown code of the file src/scripts/jefferson. The manipulation leads to path traversal. The attack can be initiated remotely. Upgrading to version 0.4 is able to address this issu...
armada-airflow (0.5.4), jefferson-street-composer (>=1.3.0, <=1.7.1) potentially affected by CVE-2026-49487 via apache-airflow (2.7.1)
apache-airflow PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - armada-airflow 0.5.4 - jefferson-street-composer =1.3.0, =1.7.1 Source cves: CVE-2026-49487 Source advisory: OSV:PYSEC-2026-2088...
armada-airflow (0.5.4), jefferson-street-composer (>=1.3.0, <=1.7.1) potentially affected by CVE-2026-46764 via apache-airflow (2.7.1)
apache-airflow PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - armada-airflow 0.5.4 - jefferson-street-composer =1.3.0, =1.7.1 Source cves: CVE-2026-46764 Source advisory: OSV:GHSA-QPHR-3MVQ-V466...
armada-airflow (0.5.4), jefferson-street-composer (>=1.3.0, <=1.7.1) potentially affected by CVE-2026-48726 via apache-airflow (2.7.1)
apache-airflow PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - armada-airflow 0.5.4 - jefferson-street-composer =1.3.0, =1.7.1 Source cves: CVE-2026-48726 Source advisory: OSV:GHSA-VR7M-C6V4-8CX8...
armada-airflow (0.5.4), jefferson-street-composer (>=1.3.0, <=1.7.1) potentially affected by CVE-2026-42360 via apache-airflow (2.7.1)
apache-airflow PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - armada-airflow 0.5.4 - jefferson-street-composer =1.3.0, =1.7.1 Source cves: CVE-2026-42360 Source advisory: OSV:GHSA-CG3X-89RC-X9MW...
armada-airflow (0.5.4), jefferson-street-composer (>=1.3.0, <=1.7.1) potentially affected by CVE-2026-45192 via apache-airflow (2.7.1)
apache-airflow PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - armada-airflow 0.5.4 - jefferson-street-composer =1.3.0, =1.7.1 Source cves: CVE-2026-45192 Source advisory: OSV:GHSA-2883-WWH7-X57V...
airflow-duckdb (>=0.0.1, <=0.1.2), airflow-tools (0.1.2) +2 more potentially affected by CVE-2026-27173 via apache-airflow-providers-cncf-kubernetes (7.14.0)
apache-airflow-providers-cncf-kubernetes PYPI version 7.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-cncf-kubernetes and may be impacted: - airflow-duckdb =0.0.1, =0.5.0, =1.3.0, =1.7.1 Source cves: CVE-2026-27173 Sourc...
armada-airflow (0.5.4), jefferson-street-composer (>=1.3.0, <=1.7.1) potentially affected by CVE-2025-54550 via apache-airflow (2.7.1)
apache-airflow PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - armada-airflow 0.5.4 - jefferson-street-composer =1.3.0, =1.7.1 Source cves: CVE-2025-54550 Source advisory: OSV:GHSA-Q2HG-643C-GW8H...
armada-airflow (0.5.4), jefferson-street-composer (>=1.3.0, <=1.7.1) potentially affected by CVE-2026-25219 via apache-airflow (2.7.1)
apache-airflow PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - armada-airflow 0.5.4 - jefferson-street-composer =1.3.0, =1.7.1 Source cves: CVE-2026-25219 Source advisory: OSV:GHSA-4G48-54Q2-FG7Q...
armada-airflow (0.5.4), jefferson-street-composer (>=1.3.0, <=1.7.1) potentially affected by CVE-2025-68675 via apache-airflow (2.7.1)
apache-airflow PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - armada-airflow 0.5.4 - jefferson-street-composer =1.3.0, =1.7.1 Source cves: CVE-2025-68675 Source advisory: OSV:PYSEC-2026-10...
EUVD-2023-12631
Malicious code in bioql PyPI...
