mezzanine (>=3.0.0 <=3.0.4) potentially affected by CVE-2016-9910 via html5lib (=0.95.0)

html5lib PYPI version =0.95.0 is affected by a known vulnerability. The following packages have a transitive dependency on html5lib and may be impacted: - mezzanine =3.0.0, =3.0.4 Source cves: CVE-2016-9910 Source advisory: OSV:PYSEC-2017-15...

mezzanine (>=3.0.0 <=3.0.4) potentially affected by CVE-2016-9909 via html5lib (=0.95.0)

html5lib PYPI version =0.95.0 is affected by a known vulnerability. The following packages have a transitive dependency on html5lib and may be impacted: - mezzanine =3.0.0, =3.0.4 Source cves: CVE-2016-9909 Source advisory: OSV:PYSEC-2017-14...

elita (>=0.60.0 <=0.64.1) potentially affected by CVE-2016-9639 via salt (=2014.1.10)

salt PYPI version =2014.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on salt and may be impacted: - elita =0.60.0, =0.64.1 Source cves: CVE-2016-9639 Source advisory: OSV:PYSEC-2017-34...

elita (>=0.60.0 <=0.64.1) potentially affected by CVE-2016-3176 via salt (=2014.1.10)

salt PYPI version =2014.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on salt and may be impacted: - elita =0.60.0, =0.64.1 Source cves: CVE-2016-3176 Source advisory: OSV:PYSEC-2017-33...

elita (>=0.60.0 <=0.64.1) potentially affected by CVE-2015-8034 via salt (=2014.1.10)

salt PYPI version =2014.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on salt and may be impacted: - elita =0.60.0, =0.64.1 Source cves: CVE-2015-8034 Source advisory: OSV:PYSEC-2017-32...

datawire-cloudtools (=0.2.6) potentially affected by CVE-2016-7036 via python-jose (=0.5.5)

python-jose PYPI version =0.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on python-jose and may be impacted: - datawire-cloudtools =0.2.6 Source cves: CVE-2016-7036 Source advisory: OSV:PYSEC-2017-28...

AskAI (=0.1.0), BeerHolderBot (>=0.1.0 <=0.3.8) +14875 more potentially affected by CVE-2017-18587 via hyper (>=0.0.1 <=0.9.14)

hyper CARGO version =0.0.1, =0.1.0, =0.1.0, =1.0.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =1.0.1, =0.0.2, =0.1.0, =0.1.2 and more Source cves: CVE-2017-18587 Source advisory: OSV:RUSTSEC-2017-0002...

metadoc (>=0.9.1 <=0.10.5), sphinxmark (>=0.1.15 <=0.1.16) potentially affected by CVE-2016-9964 via bottle (=0.12.10)

bottle PYPI version =0.12.10 is affected by a known vulnerability. The following packages have a transitive dependency on bottle and may be impacted: - metadoc =0.9.1, =0.1.15, =0.1.16 Source cves: CVE-2016-9964 Source advisory: OSV:PYSEC-2016-24...

aw-fel (>=0.1.0 <=0.5.2), blinkrs (>=0.1.0 <=1.0.0) +28 more potentially affected by unknown CVE via libusb (>=0.2.2 <=0.3.0)

libusb CARGO version =0.2.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =0.2.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2016-0004...

django-kb (>=0.1.0 <=0.2.0) potentially affected by CVE-2015-0846 via django-markupfield (=1.2.1)

django-markupfield PYPI version =1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-markupfield and may be impacted: - django-kb =0.1.0, =0.2.0 Source cves: CVE-2015-0846 Source advisory: OSV:PYSEC-2015-12...

keystonemiddleware (>=1.3.2 <=1.5.3), python-ceilometerclient (>=1.0.14 <=1.1.2) +7 more potentially affected by CVE-2015-1852 via python-keystoneclient (>=1.1.0 <=1.3.4)

python-keystoneclient PYPI version =1.1.0, =1.3.2, =1.0.14, =1.1.2, =0.14.3, =0.9.4, =0.5.8, =2.23.2, =1.0.4, =1.0.5 Source cves: CVE-2015-1852 Source advisory: OSV:PYSEC-2015-31...

django-pesapal (>=0.2.0 <=0.3.4) potentially affected by CVE-2013-4347 via oauth2 (=1.5.211)

oauth2 PYPI version =1.5.211 is affected by a known vulnerability. The following packages have a transitive dependency on oauth2 and may be impacted: - django-pesapal =0.2.0, =0.3.4 Source cves: CVE-2013-4347 Source advisory: OSV:PYSEC-2014-86...

django-pesapal (>=0.2.0 <=0.3.4) potentially affected by CVE-2013-4346 via oauth2 (=1.5.211)

oauth2 PYPI version =1.5.211 is affected by a known vulnerability. The following packages have a transitive dependency on oauth2 and may be impacted: - django-pesapal =0.2.0, =0.3.4 Source cves: CVE-2013-4346 Source advisory: OSV:PYSEC-2014-85...

doc2dash (=1.2.0), document-clipper (>=0.9.0 <=0.13.6) +1 more potentially affected by CVE-2014-3146 via lxml (>=3.2.3 <=3.3.2)

lxml PYPI version =3.2.3, =0.9.0, =0.13.6 - rymtracks =0.1.2 Source cves: CVE-2014-3146 Source advisory: OSV:PYSEC-2014-9...

Out-of-bounds

The SVG implementation in Blink, as used in Google Chrome before 31.0.1650.48, allows remote attackers to cause a denial of service out-of-bounds read by leveraging the use of tree order, rather than transitive dependency order, for layout...

CVE-2013-6623

The SVG implementation in Blink, as used in Google Chrome before 31.0.1650.48, allows remote attackers to cause a denial of service out-of-bounds read by leveraging the use of tree order, rather than transitive dependency order, for layout...

CVE-2013-6623

The SVG implementation in Blink, as used in Google Chrome before 31.0.1650.48, allows remote attackers to cause a denial of service out-of-bounds read by leveraging the use of tree order, rather than transitive dependency order, for layout...

dfnclient (>=0.0.1 <=0.4.6), django-afip (>=1.0.2 <=2.2.1) +2 more potentially affected by CVE-2013-2217 via suds-py3 (>=1.0.0.0 <=1.4.1.0)

suds-py3 PYPI version =1.0.0.0, =0.0.1, =1.0.2, =0.9.0, =0.0.1, =0.0.8 Source cves: CVE-2013-2217 Source advisory: OSV:PYSEC-2013-33...

quokka (>=0.0.1.dev84 <=0.4.1.dev22) potentially affected by CVE-2013-2132 via pymongo (=2.4.1)

pymongo PYPI version =2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - quokka =0.0.1.dev84, =0.4.1.dev22 Source cves: CVE-2013-2132 Source advisory: OSV:PYSEC-2013-30...

a10-octavia (>=1.0.0 <=1.3.3) potentially affected by CVE-2012-5563 via keystone (=15.0.1)

keystone PYPI version =15.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on keystone and may be impacted: - a10-octavia =1.0.0, =1.3.3 Source cves: CVE-2012-5563 Source advisory: OSV:PYSEC-2012-20...