41 matches found
openlibrary-client (0.0.18) potentially affected by CVE-2026-69248 via cryptography (2.2.0)
cryptography PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - openlibrary-client 0.0.18 Source cves: CVE-2026-69248 Source advisory: OSV:PYSEC-2026-3554...
openlibrary-client (0.0.18) potentially affected by CVE-2026-69249 via cryptography (2.2.0)
cryptography PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - openlibrary-client 0.0.18 Source cves: CVE-2026-69249 Source advisory: OSV:PYSEC-2026-3553...
openlibrary-client (0.0.18) potentially affected by CVE-2023-50782 via cryptography (2.2.0)
cryptography PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - openlibrary-client 0.0.18 Source cves: CVE-2023-50782 Source advisory: OSV:PYSEC-2026-1283...
openlibrary-client (0.0.18) potentially affected by CVE-2024-0727 via cryptography (2.2.0)
cryptography PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - openlibrary-client 0.0.18 Source cves: CVE-2024-0727 Source advisory: OSV:PYSEC-2026-1285...
openlibrary-client (0.0.30), openlibrary-client-mek (0.0.30) potentially affected by CVE-2025-58438 via internetarchive (1.9.0)
internetarchive PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on internetarchive and may be impacted: - openlibrary-client 0.0.30 - openlibrary-client-mek 0.0.30 Source cves: CVE-2025-58438 Source advisory: OSV:PYSEC-2026-357...
openlibrary-client (0.0.18) potentially affected by CVE-2025-58438 via internetarchive (1.7.3)
internetarchive PYPI version 1.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on internetarchive and may be impacted: - openlibrary-client 0.0.18 Source cves: CVE-2025-58438 Source advisory: OSV:PYSEC-2026-357...
openlibrary-client (0.0.18) potentially affected by CVE-2026-34073 via cryptography (2.2.0)
cryptography PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - openlibrary-client 0.0.18 Source cves: CVE-2026-34073 Source advisory: OSV:PYSEC-2026-35...
openlibrary-client (0.0.18) potentially affected by CVE-2026-34073 via cryptography (2.2.0)
cryptography PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - openlibrary-client 0.0.18 Source cves: CVE-2026-34073 Source advisory: OSV:GHSA-M959-CC7F-WV43...
openlibrary-client (0.0.18) potentially affected by CVE-2026-26007 via cryptography (2.2.0)
cryptography PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - openlibrary-client 0.0.18 Source cves: CVE-2026-26007 Source advisory: OSV:PYSEC-2026-2141...
openlibrary-client (0.0.18) potentially affected by CVE-2026-26007 via cryptography (2.2.0)
cryptography PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - openlibrary-client 0.0.18 Source cves: CVE-2026-26007 Source advisory: OSV:GHSA-R6PH-V2QM-Q3C2...
EUVD-2022-53396
Malicious code in bioql PyPI...
EUVD-2022-28187
Malicious code in bioql PyPI...
openlibrary-client (0.0.18) potentially affected by CVE-2025-58438 via internetarchive (1.7.3)
internetarchive PYPI version 1.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on internetarchive and may be impacted: - openlibrary-client 0.0.18 Source cves: CVE-2025-58438 Source advisory: OSV:GHSA-WX3R-V6H7-FRJP...
openlibrary-client (0.0.30), openlibrary-client-mek (0.0.30) potentially affected by CVE-2025-58438 via internetarchive (1.9.0)
internetarchive PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on internetarchive and may be impacted: - openlibrary-client 0.0.30 - openlibrary-client-mek 0.0.30 Source cves: CVE-2025-58438 Source advisory: OSV:GHSA-WX3R-V6H7-FRJP...
openlibrary-client (0.0.18) potentially affected by CVE-2024-26130 via cryptography (2.2.0)
cryptography PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - openlibrary-client 0.0.18 Source cves: CVE-2024-26130 Source advisory: OSV:PYSEC-2024-225...
openlibrary-client (0.0.18) potentially affected by CVE-2023-50782 via cryptography (2.2.0)
cryptography PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - openlibrary-client 0.0.18 Source cves: CVE-2023-50782 Source advisory: OSV:GHSA-3WW4-GG4F-JR7F...
openlibrary-client (0.0.18) potentially affected by CVE-2024-0727 via cryptography (2.2.0)
cryptography PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - openlibrary-client 0.0.18 Source cves: CVE-2024-0727 Source advisory: OSV:GHSA-9V9H-CGJ8-H64P...
Openlibrary Cross-Site Scripting Vulnerability
openlibrary is an open, editable library catalog. A cross-site scripting vulnerability exists in openlibrary deploy-2016-07-0 version to deploy-2021-12-22 version, which stems from the lack of checksum filtering of user-supplied data and output from the administrator user login application URL. A...
openlibrary Cross-Site Scripting Vulnerability (CNVD-2022-61888)
openlibrary is an open, editable library catalog. openlibrary deploy-2016-07-0 version to deploy-2021-12-22 version is vulnerable to a cross-site scripting vulnerability. An attacker could exploit this vulnerability to perform a stored cross-site scripting attack...
