dynrender-skia (>=0.1.0, <=0.2.5), dynrender-skia-opt (0.3.8) +2 more potentially affected by CVE-2025-27363 via skia-python (87.9.0)

skia-python PYPI version 87.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on skia-python and may be impacted: - dynrender-skia =0.1.0, =3.3.1, =0.1.0, =0.6.1 Source cves: CVE-2025-27363 Source advisory: OSV:GHSA-2MHW-8QCG-GR96...

amusing-app (>=0.2.0, <=0.4.2), buzz-captions (>=1.0.0, <=1.1.0) +10 more potentially affected by CVE-2024-38519 via yt-dlp (>=2024.3.10, <=2024.5.27)

yt-dlp PYPI version =2024.3.10, =0.2.0, =1.0.0, =1.3.5, =0.6.22, =0.2.0, =0.0.5, =0.0.1, =0.1.50, =0.8.0, =2024.3.19, =2024.6.6 Source cves: CVE-2024-38519 Source advisory: GHSA-79W7-VH3H-8G4J...

PT-2024-18976 · Nonebot2 · Nonebot2

Name of the Vulnerable Software and Affected Versions: nonebot2 versions prior to 2.2.0 Description: This issue pertains to a potential information leak, such as environment variables, when developers use MessageTemplate and incorporate user-provided data into templates. The estimated number of...

NoneBot Security Breach

NoneBot is a modern, cross-platform, extensible Python chatbot framework open-sourced by NoneBot. A security vulnerability exists in nonebot2 versions 2.0.0a16 through 2.1.3, which stems from an information disclosure vulnerability in MessageTemplate...