python27:2.7 security update

babel 2.5.1-10 - Fix CVE-2021-20095 Resolves: rhbz1955615 2.5.1-9 - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz1695587 2.5.1-8 - Fix unversioned requires/buildrequires - Resolves: rhbz1628242 2.5.1-7 - Remove unversioned binaries - Resolves: rhbz1613343 2.5.1-6 - Make...

Fedora: Security Advisory for python-sphinx-typlog-theme (FEDORA-2022-e4f5866111)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 37 Update: python-sphinx-typlog-theme-0.8.0-1.fc37

A sphinx theme sponsored by Typlog, created by Hsiaoming Yang...

jupyxplorer (0.0.4), sphinx-markdown-builder (0.0.5) potentially affected by CVE-2021-32862 via nbconvert (5.4.0)

nbconvert PYPI version 5.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on nbconvert and may be impacted: - jupyxplorer 0.0.4 - sphinx-markdown-builder 0.0.5 Source cves: CVE-2021-32862 Source advisory: OSV:PYSEC-2022-249...

CVE-2022-2838

In Eclipse Sphinx™ before version 0.13.1, Apache Xerces XML Parser was used without disabling processing of referenced external entities allowing the injection of arbitrary definitions which is able to access local files and expose their contents via HTTP requests...

CVE-2022-2838

In Eclipse Sphinx™ before version 0.13.1, Apache Xerces XML Parser was used without disabling processing of referenced external entities allowing the injection of arbitrary definitions which is able to access local files and expose their contents via HTTP requests...

CVE-2022-2838

In Eclipse Sphinx™ before version 0.13.1, Apache Xerces XML Parser was used without disabling processing of referenced external entities allowing the injection of arbitrary definitions which is able to access local files and expose their contents via HTTP requests...

Xxe

In Eclipse Sphinx™ before version 0.13.1, Apache Xerces XML Parser was used without disabling processing of referenced external entities allowing the injection of arbitrary definitions which is able to access local files and expose their contents via HTTP requests...

CVE-2022-2838

CVE-2022-2838 affects Eclipse Sphinx prior to 0.13.1. The vulnerability stems from using the Apache Xerces XML Parser without disabling processing of referenced external entities, enabling an attacker to inject arbitrary definitions and access local files, with data exfiltration possible via HTTP...

CVE-2022-2838

In Eclipse Sphinx™ before version 0.13.1, Apache Xerces XML Parser was used without disabling processing of referenced external entities allowing the injection of arbitrary definitions which is able to access local files and expose their contents via HTTP requests...

CVE-2022-2838: Improper Restriction of XML External Entity Reference

In Eclipse Sphinx™ before version 0.13.1, Apache Xerces XML Parser was used without disabling processing of referenced external entities allowing the injection of arbitrary definitions which is able to access local files and expose their contents via HTTP requests...

PT-2022-18988

Name of the Vulnerable Software and Affected Versions Eclipse Sphinx versions prior to 0.13.1 Description The issue allows the injection of arbitrary definitions, enabling access to local files and exposing their contents via HTTP requests due to the use of Apache Xerces XML Parser without...

Eclipse Sphinx code issues and vulnerabilities

Eclipse Sphinx is an extensible platform from the Eclipse Foundation that simplifies the creation of integrated modeling tool environments that support a single or multiple modeling languages which can be UML-based or native DSL, with a particular focus on industrial strength and interoperability...

jupyxplorer (0.0.4), sphinx-markdown-builder (0.0.5) potentially affected by CVE-2021-32862 via nbconvert (5.4.0)

nbconvert PYPI version 5.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on nbconvert and may be impacted: - jupyxplorer 0.0.4 - sphinx-markdown-builder 0.0.5 Source cves: CVE-2021-32862 Source advisory: OSV:GHSA-9JMQ-RX5F-8JWQ...

sphinx-markdown-builder (0.0.5) potentially affected by CVE-2022-29238 via notebook (5.7.0)

notebook PYPI version 5.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on notebook and may be impacted: - sphinx-markdown-builder 0.0.5 Source cves: CVE-2022-29238 Source advisory: OSV:GHSA-V7VQ-3X77-87VG...

sphinx-markdown-builder (0.0.5) potentially affected by CVE-2022-29238 via notebook (5.7.0)

notebook PYPI version 5.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on notebook and may be impacted: - sphinx-markdown-builder 0.0.5 Source cves: CVE-2022-29238 Source advisory: OSV:PYSEC-2022-212...

confluence.sphinx-electronics.de Cross Site Scripting vulnerability OBB-2525566

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sphinx-markdown-builder (0.0.5) potentially affected by CVE-2022-24758 via notebook (5.7.0)

notebook PYPI version 5.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on notebook and may be impacted: - sphinx-markdown-builder 0.0.5 Source cves: CVE-2022-24758 Source advisory: OSV:GHSA-M87F-39Q9-6F55...

sphinx-markdown-builder (0.0.5) potentially affected by CVE-2022-24758 via notebook (5.7.0)

notebook PYPI version 5.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on notebook and may be impacted: - sphinx-markdown-builder 0.0.5 Source cves: CVE-2022-24758 Source advisory: OSV:PYSEC-2022-180...

Mageia: Security Advisory (MGASA-2022-0110)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...