cobras (>=1.6.6, <=1.7.6) potentially affected by CVE-2024-40647 via sentry-sdk (0.11.1)

sentry-sdk PYPI version 0.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - cobras =1.6.6, =1.7.6 Source cves: CVE-2024-40647 Source advisory: OSV:GHSA-G92J-QHMH-64V2...

cobras (>=1.5.1, <=1.6.5), hackgame (>=0.0.14, <=0.0.28) +44 more potentially affected by CVE-2024-40647 via sentry-sdk (0.10.2)

sentry-sdk PYPI version 0.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - cobras =1.5.1, =0.0.14, =0.9.1.0, =0.0.1, =0.0.2, =2017.3.3, =0.1.0, =0.1.0, =0.7.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.8.0, =0.46....

graphene-sentry (0.4.0) potentially affected by CVE-2024-40647 via sentry-sdk (0.10.1)

sentry-sdk PYPI version 0.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - graphene-sentry 0.4.0 Source cves: CVE-2024-40647 Source advisory: OSV:GHSA-G92J-QHMH-64V2...

bahub (>=0.0.1.dev48, <=2.1.0.0rc5.dev51), openmodule (>=1.6.5, <=13.6.0) potentially affected by CVE-2024-40647 via sentry-sdk (0.7.14)

sentry-sdk PYPI version 0.7.14 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - bahub =0.0.1.dev48, =1.6.5, =13.6.0 Source cves: CVE-2024-40647 Source advisory: OSV:GHSA-G92J-QHMH-64V2...

kolibri-sentry-plugin (>=0.0.1, <=0.1.0) potentially affected by CVE-2024-40647 via sentry-sdk (0.7.9)

sentry-sdk PYPI version 0.7.9 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - kolibri-sentry-plugin =0.0.1, =0.1.0 Source cves: CVE-2024-40647 Source advisory: OSV:GHSA-G92J-QHMH-64V2...

shioaji (>=0.0.5.dev7, <=0.0.6.dev4) potentially affected by CVE-2024-40647 via sentry-sdk (0.6.6)

sentry-sdk PYPI version 0.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - shioaji =0.0.5.dev7, =0.0.6.dev4 Source cves: CVE-2024-40647 Source advisory: OSV:GHSA-G92J-QHMH-64V2...

pyverless (>=0.0.1, <=0.0.6) potentially affected by CVE-2024-40647 via sentry-sdk (0.5.1)

sentry-sdk PYPI version 0.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - pyverless =0.0.1, =0.0.6 Source cves: CVE-2024-40647 Source advisory: OSV:GHSA-G92J-QHMH-64V2...

wandb (>=0.6.21, <=0.6.26) potentially affected by CVE-2024-40647 via sentry-sdk (0.4.0)

sentry-sdk PYPI version 0.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - wandb =0.6.21, =0.6.26 Source cves: CVE-2024-40647 Source advisory: OSV:GHSA-G92J-QHMH-64V2...

spell (>=0.19.0, <=0.19.4) potentially affected by CVE-2024-40647 via sentry-sdk (0.3.0)

sentry-sdk PYPI version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - spell =0.19.0, =0.19.4 Source cves: CVE-2024-40647 Source advisory: OSV:GHSA-G92J-QHMH-64V2...

fastlane (>=0.1.0, <=2.2.3) potentially affected by CVE-2024-40647 via sentry-sdk (0.5.5)

sentry-sdk PYPI version 0.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - fastlane =0.1.0, =2.2.3 Source cves: CVE-2024-40647 Source advisory: OSV:GHSA-G92J-QHMH-64V2...

graphene-django-sentry (0.2.0), nucypher (>=0.1.0a2, <=0.1.0a20) potentially affected by CVE-2024-40647 via sentry-sdk (0.5.2)

sentry-sdk PYPI version 0.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - graphene-django-sentry 0.2.0 - nucypher =0.1.0a2, =0.1.0a20 Source cves: CVE-2024-40647 Source advisory: OSV:GHSA-G92J-QHMH-64V2...

elice-backend-components (>=18.10.4.0, <=18.11.3.0) potentially affected by CVE-2024-40647 via sentry-sdk (0.4.3)

sentry-sdk PYPI version 0.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - elice-backend-components =18.10.4.0, =18.11.3.0 Source cves: CVE-2024-40647 Source advisory: OSV:GHSA-G92J-QHMH-64V2...

GHSA-G92J-QHMH-64V2 Sentry's Python SDK unintentionally exposes environment variables to subprocesses

Impact The bug in Sentry's Python SDK subprocess.checkoutput"env", env="TEST":"1" b'TEST=1\n' If you'd want to not pass any variables, you can set an empty dict: subprocess.checkoutput"env", env= b'' However, the bug in Sentry SDK 2.8.0 causes all environment variables to be passed to the...

Sentry's Python SDK unintentionally exposes environment variables to subprocesses

Impact The bug in Sentry's Python SDK subprocess.checkoutput"env", env="TEST":"1" b'TEST=1\n' If you'd want to not pass any variables, you can set an empty dict: subprocess.checkoutput"env", env= b'' However, the bug in Sentry SDK 2.8.0 causes all environment variables to be passed to the...

cobras (>=1.7.7, <=2.1.7), docker-cluster-controller (0.1.23) potentially affected by CVE-2024-40647 via sentry-sdk (0.11.2)

sentry-sdk PYPI version 0.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - cobras =1.7.7, =2.1.7 - docker-cluster-controller 0.1.23 Source cves: CVE-2024-40647 Source advisory: OSV:GHSA-G92J-QHMH-64V2...

scrapy-sentry-sdk (0.4.0) potentially affected by CVE-2024-40647 via sentry-sdk (0.9.5)

sentry-sdk PYPI version 0.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - scrapy-sentry-sdk 0.4.0 Source cves: CVE-2024-40647 Source advisory: OSV:GHSA-G92J-QHMH-64V2...

shioaji (>=0.0.6.dev6, <=0.0.6.dev8) potentially affected by CVE-2024-40647 via sentry-sdk (0.9.2)

sentry-sdk PYPI version 0.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - shioaji =0.0.6.dev6, =0.0.6.dev8 Source cves: CVE-2024-40647 Source advisory: OSV:GHSA-G92J-QHMH-64V2...

ambition-edc (>=0.2.8, <=0.3.28), meta-edc (>=0.1.0, <=0.1.1) +1 more potentially affected by CVE-2024-40647 via sentry-sdk (0.9.0)

sentry-sdk PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - ambition-edc =0.2.8, =0.1.0, =0.1.0a23, =2.0.0b6 Source cves: CVE-2024-40647 Source advisory: OSV:GHSA-G92J-QHMH-64V2...

saltdash (0.9.6) potentially affected by CVE-2024-40647 via sentry-sdk (0.7.10)

sentry-sdk PYPI version 0.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - saltdash 0.9.6 Source cves: CVE-2024-40647 Source advisory: OSV:GHSA-G92J-QHMH-64V2...

1a23-telemetry (1.0.0) potentially affected by CVE-2024-40647 via sentry-sdk (0.6.9)

sentry-sdk PYPI version 0.6.9 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - 1a23-telemetry 1.0.0 Source cves: CVE-2024-40647 Source advisory: OSV:GHSA-G92J-QHMH-64V2...