andeplane-pyodide-kernel (>=0.0.7, <=0.0.12), here-search-demo (>=0.9.0, <=0.9.1) +8 more potentially affected by unknown CVE via jupyterlite-core (>=0.1.2, <=0.4.0)

jupyterlite-core PYPI version =0.1.2, =0.0.7, =0.9.0, =0.0.4, =0.10.0, =0.1.0a4, =0.9.6, =0.3.0, =0.6.0, =0.6.1 Source cves: unknown CVE Source advisory: OSV:GHSA-GJ55-2XF9-67RQ...

ROS-20240626-12

A vulnerability in the Sphinx search engine is related to a path traversal error. Exploitation of the vulnerability could allow an attacker acting remotely to gain unauthorized access to the protected information using the CALL SNIPPETS statement or the loadfile function...

MAL-2024-6033 Malicious code in sphinx-rtd-theme-cilium (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in sphinx-rtd-theme-cilium (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Oracle Linux 8 : python27:2.7 (ELSA-2024-2987)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-2987 advisory. - Fix CVE-2021-20095 Resolves: rhbz1955615 - Fix CVE-2019-6446 - Fix CVE-2014-1858, CVE-2014-1859: 1062009, 1062359 - Security fix for CVE-2022-48560...

django-ndr-core (>=0.8.0, <=0.22.2), nlpboost (0.0.1) +1 more potentially affected by unknown CVE via readthedocs-sphinx-search (>=0.1.2, <=0.3.1)

readthedocs-sphinx-search PYPI version =0.1.2, =0.8.0, =0.22.2 - nlpboost 0.0.1 - sphinx-godot-theme 0.1.0 Source cves: unknown CVE Source advisory: GHSA-XGFM-FJX6-62MJ...

GHSA-XGFM-FJX6-62MJ readthedocs-sphinx-search vulnerable to cross-site scripting when including search results from malicious projects

Impact This vulnerability could have allowed an attacker to include arbitrary HTML content in search results by having a user search a malicious project. This was due to our search client not correctly escaping all user content from search results. You can find more information in the advisory...

django-ndr-core (>=0.8.0, <=0.22.2), nlpboost (0.0.1) +1 more potentially affected by unknown CVE via readthedocs-sphinx-search (>=0.1.2, <=0.3.1)

readthedocs-sphinx-search PYPI version =0.1.2, =0.8.0, =0.22.2 - nlpboost 0.0.1 - sphinx-godot-theme 0.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-XGFM-FJX6-62MJ...

PT-2024-40529 · Unknown · Readthedocs-Sphinx-Search

Name of the Vulnerable Software and Affected Versions: readthedocs-sphinx-search versions prior to 0.3.2 Description: This issue could have allowed an attacker to include arbitrary HTML content in search results by having a user search a malicious project. The problem was due to the search client...

EulerOS 2.0 SP10 : python-sphinx (EulerOS-SA-2023-2799)

According to the versions of the python-sphinx packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In JQuery version greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing elements from untrusted sources - even after...

EulerOS 2.0 SP10 : python-sphinx (EulerOS-SA-2023-2823)

According to the versions of the python-sphinx packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In JQuery version greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing elements from untrusted sources - even after...

sphinx-markdown-builder (>=0.5.0, <=0.5.1) potentially affected by CVE-2023-26145 via pydash (4.7.5)

pydash PYPI version 4.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on pydash and may be impacted: - sphinx-markdown-builder =0.5.0, =0.5.1 Source cves: CVE-2023-26145 Source advisory: OSV:GHSA-8MJR-6C96-39W8...

arcus (>=0.2.6, <=1.2.4), pano (>=2.0.0, <=2.1.0) +3 more potentially affected by CVE-2023-26145 via pydash (4.7.4)

pydash PYPI version 4.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on pydash and may be impacted: - arcus =0.2.6, =2.0.0, =0.2.0, =0.1.0, =0.1.1 Source cves: CVE-2023-26145 Source advisory: OSV:PYSEC-2023-179...

sphinx-markdown-builder (>=0.5.0, <=0.5.1) potentially affected by CVE-2023-26145 via pydash (4.7.5)

pydash PYPI version 4.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on pydash and may be impacted: - sphinx-markdown-builder =0.5.0, =0.5.1 Source cves: CVE-2023-26145 Source advisory: OSV:PYSEC-2023-179...

Huawei EulerOS: Security Advisory for python-sphinx (EulerOS-SA-2023-2823)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for python-sphinx (EulerOS-SA-2023-2799)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Authentication Bypass

sphinx is vulnerable to Authentication Bypass. This vulnerability exists in the use of hard-coded credentials, which enables a local attacker to utilize the default password and bypass the login...

SUSE CVE-2019-14511

Sphinx Technologies Sphinx 3.1.1 by default has no authentication and listens on 0.0.0.0, making it exposed to the internet unless filtered by a firewall or reconfigured to listen to 127.0.0.1 only...

cutevariant (>=0.1.0, <=0.1.15), emzed-spyder (>=3.0.0a1, <=3.0.0a8) +1 more potentially affected by CVE-2023-24816 via ipython (7.1.1)

ipython PYPI version 7.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on ipython and may be impacted: - cutevariant =0.1.0, =3.0.0a1, =3.0.0a8 - sphinx-markdown-builder 0.0.5 Source cves: CVE-2023-24816 Source advisory: OSV:PYSEC-2023-17...

cutevariant (>=0.1.0, <=0.1.15), emzed-spyder (>=3.0.0a1, <=3.0.0a8) +1 more potentially affected by CVE-2023-24816 via ipython (7.1.1)

ipython PYPI version 7.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on ipython and may be impacted: - cutevariant =0.1.0, =3.0.0a1, =3.0.0a8 - sphinx-markdown-builder 0.0.5 Source cves: CVE-2023-24816 Source advisory: OSV:GHSA-29GW-9793-FVW7...