aepp-sdk (>=0.18.0.3, <=0.18.0.4), atlassian-jwt-auth (>=3.3.1, <=4.0.1) +19 more potentially affected by CVE-2024-0727 via cryptography (2.2.2)

cryptography PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - aepp-sdk =0.18.0.3, =3.3.1, =0.2.2, =0.1.1, =0.16.8, =0.10.4, =1.6.517, =3.0.4, =0.6.7, =0.3.7, =1.4.5, =2.0.1 and more Source cves:...

atlassian-jwt-auth (>=2.8.1, <=2.10.0), fallixy (0.18.1) +3 more potentially affected by CVE-2024-0727 via cryptography (1.5.3)

cryptography PYPI version 1.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - atlassian-jwt-auth =2.8.1, =0.18.1, =0.9.0, =1.1.0 - teamvault 0.6.0 Source cves: CVE-2024-0727 Source advisory: OSV:GHSA-9V9H-CGJ8-H64P...

dcicsnovault (>=2.0.0b4, <=4.0.0b2), django-dynamic-scraper (>=0.11.4, <=0.13.1) +13 more potentially affected by CVE-2023-50447 via pillow (3.4.2)

pillow PYPI version 3.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - dcicsnovault =2.0.0b4, =0.11.4, =0.18.1, =0.6.12a2, =0.9.0, =0.2.1, =0.0.3, =1.6.0, =1.4.0, =1.12.0 - yulelog 0.0.3 Source cves: CVE-2023-50447 Sour...

dcicsnovault (>=2.0.0b4, <=4.0.0b2), django-dynamic-scraper (>=0.11.4, <=0.13.1) +13 more potentially affected by CVE-2023-44271 via pillow (3.4.2)

pillow PYPI version 3.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - dcicsnovault =2.0.0b4, =0.11.4, =0.18.1, =0.6.12a2, =0.9.0, =0.2.1, =0.0.3, =1.6.0, =1.4.0, =1.12.0 - yulelog 0.0.3 Source cves: CVE-2023-44271 Sour...

openSUSE 15 Security Update : python-mitmproxy (openSUSE-SU-2023:0233-1)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0233-1 advisory. - mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.2 and below, a malicious client or server is able to perform HTTP...

openSUSE 15 Security Update : python-mitmproxy (openSUSE-SU-2023:0232-1)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0232-1 advisory. - mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.2 and below, a malicious client or server is able to perform HTTP...

OPENSUSE-SU-2023:0233-1 Security update for python-mitmproxy

This update for python-mitmproxy fixes the following issues: - CVE-2021-39214: Fixed HTTP smuggling attacks boo1190603...

OPENSUSE-SU-2023:0232-1 Security update for python-mitmproxy

This update for python-mitmproxy fixes the following issues: - CVE-2021-39214: Fixed HTTP smuggling attacks boo1190603...

Security update for python-mitmproxy (moderate)

openSUSE Security Update: Security update for python-mitmproxy Announcement ID: openSUSE-SU-2023:0232-1 Rating: moderate References: 1190603 Cross-References: CVE-2021-39214 CVSS scores: CVE-2021-39214 NVD : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports...

Security update for python-mitmproxy (moderate)

openSUSE Security Update: Security update for python-mitmproxy Announcement ID: openSUSE-SU-2023:0233-1 Rating: moderate References: 1190603 Cross-References: CVE-2021-39214 CVSS scores: CVE-2021-39214 NVD : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports...

edgy-project (>=0.1.12, <=0.1.15), fallixy (0.18.1) +5 more potentially affected by CVE-2023-54397 via tornado (4.4.3)

tornado PYPI version 4.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - edgy-project =0.1.12, =0.18.1, =0.1.2, =0.9.0, =1.2.1 - pymultitor 2.1.0 Source cves: CVE-2023-54397 Source advisory: OSV:GHSA-QPPV-J76H-2RPX...

edgy-project (>=0.1.12, <=0.1.15), fallixy (0.18.1) +5 more potentially affected by CVE-2023-28370 via tornado (4.4.3)

tornado PYPI version 4.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - edgy-project =0.1.12, =0.18.1, =0.1.2, =0.9.0, =1.2.1 - pymultitor 2.1.0 Source cves: CVE-2023-28370 Source advisory: OSV:GHSA-HJ3F-6GCP-JG8J...

edgy-project (>=0.1.12, <=0.1.15), fallixy (0.18.1) +5 more potentially affected by CVE-2023-28370 via tornado (4.4.3)

tornado PYPI version 4.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - edgy-project =0.1.12, =0.18.1, =0.1.2, =0.9.0, =1.2.1 - pymultitor 2.1.0 Source cves: CVE-2023-28370 Source advisory: OSV:PYSEC-2023-75...

SUSE CVE-2018-14505

mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py...

SUSE CVE-2021-39214

mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.2 and below, a malicious client or server is able to perform HTTP request smuggling attacks through mitmproxy. This means that a malicious client/server could smuggle a request/response through mitmproxy as part of...

SUSE CVE-2022-24766

mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.4 and below, a malicious client or server is able to perform HTTP request smuggling attacks through mitmproxy. This means that a malicious client/server could smuggle a request/response through mitmproxy as part of...

FreeBSD : mitmproxy -- Insufficient Protection against HTTP Request Smuggling (ad37a349-ebb7-11ec-b9f7-21427354249d)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the ad37a349-ebb7-11ec-b9f7-21427354249d advisory. - mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.4 and below, a...

allen-bradley-toolkit (>=1.0.0a1.post0, <=1.3.0a1.post1), coala-bears (>=0.12.0.dev20170531025553, <=0.12.0.dev20170719125022) +10 more potentially affected by CVE-2018-19787 via lxml (3.6.0)

lxml PYPI version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - allen-bradley-toolkit =1.0.0a1.post0, =0.12.0.dev20170531025553, =0.0.0, =0.18.1, =0.9.0, =0.6.3, =4.0.0, =4.3.0 - tml 0.3.1 Source cves: CVE-2018-19787...

mitmproxy-escher (>=0.1.2, <=0.1.3), padsniff (>=1.2.0, <=1.2.1) +1 more potentially affected by CVE-2022-24766 via mitmproxy (2.0.2)

mitmproxy PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - mitmproxy-escher =0.1.2, =1.2.0, =1.2.1 - pymultitor 2.1.0 Source cves: CVE-2022-24766 Source advisory: OSV:GHSA-GCX2-GVJ7-PXV3...

padsniff (1.1.1) potentially affected by CVE-2022-24766 via mitmproxy (2.0.1)

mitmproxy PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - padsniff 1.1.1 Source cves: CVE-2022-24766 Source advisory: OSV:GHSA-GCX2-GVJ7-PXV3...