aiohttp-cors (0.3.0), aslack (0.11.0) +1 more potentially affected by CVE-2024-52304 via aiohttp (0.20.2)

aiohttp PYPI version 0.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aiohttp-cors 0.3.0 - aslack 0.11.0 - muffin =0.5.2, =0.5.12 Source cves: CVE-2024-52304 Source advisory: OSV:PYSEC-2026-1103...

aioboto3 (2.2.0), aiobotocore (>=0.5.0, <=0.5.3) +56 more potentially affected by CVE-2024-52304 via aiohttp (2.3.10)

aiohttp PYPI version 2.3.10 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aioboto3 2.2.0 - aiobotocore =0.5.0, =0.8.4, =0.1.0a1, =1.0.0, =3.0.0b4, =2.0.0, =1.1.1, =1.2.1, =2.1.0, =0.8.22, =2.0.0, =2.0.13 and more Source...

hassmart-homeassistant (>=0.59.2, <=0.59.2.1), homeassistant (>=0.59.0, <=0.59.2) potentially affected by CVE-2024-52304 via aiohttp (2.3.5)

aiohttp PYPI version 2.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - hassmart-homeassistant =0.59.2, =0.59.0, =0.59.2 Source cves: CVE-2024-52304 Source advisory: OSV:PYSEC-2026-1103...

analysisstore (0.0.5), bluesky-browser (0.1.0a1) +14 more potentially affected by CVE-2024-52804 via tornado (5.0.0b1)

tornado PYPI version 5.0.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - analysisstore 0.0.5 - bluesky-browser 0.1.0a1 - conftrak 0.0.6 - foebackend 1.0.0 - foeworkers 1.0.4 - httpwatcher 0.5.2 - legoman =1.0.0, =0.1....

aiodocker (0.7.0), aiopogo (>=1.6.0b1, <=2.0.0) +10 more potentially affected by CVE-2024-52304 via aiohttp (2.0.7)

aiohttp PYPI version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aiodocker 0.7.0 - aiopogo =1.6.0b1, =0.1.0, =0.1.0, =0.42.4, =0.0.1, =0.9.6, =1.1.0, =1.3.3 Source cves: CVE-2024-52304 Source advisory:...

opentrons (>=3.7.0, <=3.11.4) potentially affected by CVE-2024-52304 via aiohttp (2.3.8)

aiohttp PYPI version 2.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - opentrons =3.7.0, =3.11.4 Source cves: CVE-2024-52304 Source advisory: OSV:PYSEC-2026-1103...

aiopixiv (>=1.0.0, <=1.0.4) potentially affected by CVE-2024-52304 via aiohttp (1.1.0)

aiohttp PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aiopixiv =1.0.0, =1.0.4 Source cves: CVE-2024-52304 Source advisory: OSV:PYSEC-2026-1103...

aioauth-client (>=0.9.2, <=0.9.3), aiohttp-validate (>=0.1.0, <=1.0.0) +10 more potentially affected by CVE-2024-52304 via aiohttp (1.0.5)

aiohttp PYPI version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aioauth-client =0.9.2, =0.1.0, =0.0.7, =0.17.0b1, =0.32.0, =1.2.0, =0.10.3, =0.1.8a1, =1.0.0a2, =1.0.0a3 Source cves: CVE-2024-52304 Source...

muffin (>=0.0.98, <=0.0.104) potentially affected by CVE-2024-52304 via aiohttp (0.16.6)

aiohttp PYPI version 0.16.6 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.0.98, =0.0.104 Source cves: CVE-2024-52304 Source advisory: OSV:PYSEC-2026-1103...

danceschool-dancervax (>=0.1.1, <=0.1.5), django-danceschool (>=0.9.1, <=0.9.3) +5 more potentially affected by CVE-2024-11404 via django-filer (3.0.3)

django-filer PYPI version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on django-filer and may be impacted: - danceschool-dancervax =0.1.1, =0.9.1, =0.2.0.0, =1.16.0, =2.7.1 Source cves: CVE-2024-11404 Source advisory: OSV:PYSEC-2026-1298...

s2aio (>=1.12.0, <=1.14.0) potentially affected by CVE-2024-52304 via aiohttp (0.22.4)

aiohttp PYPI version 0.22.4 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - s2aio =1.12.0, =1.14.0 Source cves: CVE-2024-52304 Source advisory: OSV:PYSEC-2026-1103...

pyatv (>=0.1.2, <=0.1.3) potentially affected by CVE-2024-52304 via aiohttp (1.3.0)

aiohttp PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - pyatv =0.1.2, =0.1.3 Source cves: CVE-2024-52304 Source advisory: OSV:PYSEC-2026-1103...

muffin (>=0.0.2, <=0.0.22) potentially affected by CVE-2024-52304 via aiohttp (0.14.1)

aiohttp PYPI version 0.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.0.2, =0.0.22 Source cves: CVE-2024-52304 Source advisory: OSV:PYSEC-2026-1103...

muffin (0.5.0) potentially affected by CVE-2024-52304 via aiohttp (0.20.0)

aiohttp PYPI version 0.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin 0.5.0 Source cves: CVE-2024-52304 Source advisory: OSV:PYSEC-2026-1103...

muffin (>=0.7.1, <=0.8.6) potentially affected by CVE-2024-52304 via aiohttp (0.21.6)

aiohttp PYPI version 0.21.6 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.7.1, =0.8.6 Source cves: CVE-2024-52304 Source advisory: OSV:PYSEC-2026-1103...

slskit (2020.9.0) potentially affected by CVE-2023-34049 via salt (3001.8.0)

salt PYPI version 3001.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on salt and may be impacted: - slskit 2020.9.0 Source cves: CVE-2023-34049 Source advisory: OSV:PYSEC-2026-1892...

airflow-clickhouse-plugin (>=0.5.1, <=0.5.3), dbnd-airflow (0.24.11) +1 more potentially affected by CVE-2024-50378 via apache-airflow (1.10.6)

apache-airflow PYPI version 1.10.6 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-clickhouse-plugin =0.5.1, =0.5.3 - dbnd-airflow 0.24.11 - dbnd-airflow-versioned-dag 0.24.11 Source cves: CVE-2024-50378...

slskit (>=2020.1.1, <=2020.2.0) potentially affected by CVE-2023-34049 via salt (2019.2.8)

salt PYPI version 2019.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on salt and may be impacted: - slskit =2020.1.1, =2020.2.0 Source cves: CVE-2023-34049 Source advisory: OSV:PYSEC-2026-1892...

slskit (>=2020.5.0, <=2020.6.0) potentially affected by CVE-2023-34049 via salt (3000.9.0)

salt PYPI version 3000.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on salt and may be impacted: - slskit =2020.5.0, =2020.6.0 Source cves: CVE-2023-34049 Source advisory: OSV:PYSEC-2026-1892...

airflow-docker (>=0.1.1, <=0.5.0), airflow-indexima (>=1.0.1, <=2.2.1) +5 more potentially affected by CVE-2024-50378 via apache-airflow (1.10.2)

apache-airflow PYPI version 1.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-docker =0.1.1, =1.0.1, =0.4.0rc2, =0.1.0, =3.0.0, =0.0.12, =1.0.1 Source cves: CVE-2024-50378 Source advisory:...