CVE-2024-23334 vulnerabilities

Vulnerabilities for packages: checkov, py3-aiohttp, py3-cassandra-medusa...

CVE-2024-23829 vulnerabilities

Vulnerabilities for packages: checkov, py3-aiohttp, py3-cassandra-medusa...

CVE-2024-23829 vulnerabilities

Vulnerabilities for packages: py3.13-scanner-test-libraries-aiohttp, checkov, py3-aiohttp, py3-cassandra-medusa...

CVE-2024-23334

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. When using aiohttp as a web server and configuring static routes, it is necessary to specify the root path for static files. Additionally, the option 'followsymlinks' can be used to determine whether to follow symboli...

CVE-2024-23829

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Security-sensitive parts of the Python HTTP parser retained minor differences in allowable character sets, that must trigger error handling to robustly match frame boundaries of proxies in order to protect against...

aioauth-client (>=0.9.2, <=0.9.3), aiohttp-validate (>=0.1.0, <=1.0.0) +10 more potentially affected by CVE-2024-23829 via aiohttp (1.0.5)

aiohttp PYPI version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aioauth-client =0.9.2, =0.1.0, =0.0.7, =0.17.0b1, =0.32.0, =1.2.0, =0.10.3, =0.1.8a1, =1.0.0a2, =1.0.0a3 Source cves: CVE-2024-23829 Source...

muffin (0.5.1) potentially affected by CVE-2024-23829 via aiohttp (0.20.1)

aiohttp PYPI version 0.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin 0.5.1 Source cves: CVE-2024-23829 Source advisory: OSV:PYSEC-2024-26...

botstory (>=0.0.38, <=0.0.62), cr8 (0.9.1) +2 more potentially affected by CVE-2024-23829 via aiohttp (1.1.6)

aiohttp PYPI version 1.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - botstory =0.0.38, =0.0.5, =0.34.0, =0.35.3 Source cves: CVE-2024-23829 Source advisory: OSV:PYSEC-2024-26...

hassmart-homeassistant (0.60.0), homeassistant (>=0.60.0, <=0.60.1) +2 more potentially affected by CVE-2024-23829 via aiohttp (2.3.6)

aiohttp PYPI version 2.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - hassmart-homeassistant 0.60.0 - homeassistant =0.60.0, =0.60.1 - pyplanet 0.5.4 - reliz 0.1.0.dev0 Source cves: CVE-2024-23829 Source advisory:...

pushpull (0.0.2) potentially affected by CVE-2024-23829 via aiohttp (0.22.0)

aiohttp PYPI version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - pushpull 0.0.2 Source cves: CVE-2024-23829 Source advisory: OSV:PYSEC-2024-26...

appdaemon (>=3.0.0b2, <=3.0.0b3), balebot (>=1.2.3, <=1.8.15) +4 more potentially affected by CVE-2024-23829 via aiohttp (2.3.7)

aiohttp PYPI version 2.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - appdaemon =3.0.0b2, =1.2.3, =0.61.1, =0.0.1, =0.2.1 - tictax 0.1.3 Source cves: CVE-2024-23829 Source advisory: OSV:PYSEC-2024-26...

aiodocker (0.7.0), aiopogo (>=1.6.0b1, <=2.0.0) +10 more potentially affected by CVE-2024-23829 via aiohttp (2.0.7)

aiohttp PYPI version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aiodocker 0.7.0 - aiopogo =1.6.0b1, =0.1.0, =0.1.0, =0.42.4, =0.0.1, =0.9.6, =1.1.0, =1.3.3 Source cves: CVE-2024-23829 Source advisory:...

goblin (1.0.0b1) potentially affected by CVE-2024-23829 via aiohttp (0.22.1)

aiohttp PYPI version 0.22.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - goblin 1.0.0b1 Source cves: CVE-2024-23829 Source advisory: OSV:PYSEC-2024-26...

duniterpy (0.40.8), jenkins-epo (>=1.159.0, <=1.160.0) potentially affected by CVE-2024-23829 via aiohttp (2.0.0rc1)

aiohttp PYPI version 2.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - duniterpy 0.40.8 - jenkins-epo =1.159.0, =1.160.0 Source cves: CVE-2024-23829 Source advisory: OSV:PYSEC-2024-26...

geoffrey (>=0.1.0, <=0.1.2) potentially affected by CVE-2024-23829 via aiohttp (0.6.4)

aiohttp PYPI version 0.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - geoffrey =0.1.0, =0.1.2 Source cves: CVE-2024-23829 Source advisory: OSV:PYSEC-2024-26...

aiohttp-cors (0.3.0), aslack (0.11.0) +1 more potentially affected by CVE-2024-23829 via aiohttp (0.20.2)

aiohttp PYPI version 0.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aiohttp-cors 0.3.0 - aslack 0.11.0 - muffin =0.5.2, =0.5.12 Source cves: CVE-2024-23829 Source advisory: OSV:PYSEC-2024-26...

0x20bf (0.0.1), 2keys (0.5.1) +1998 more potentially affected by CVE-2024-23829 via aiohttp (>=3.0.0b0, <=3.9.1)

aiohttp PYPI version =3.0.0b0, =0.0.1a0, =0.1.0, =0.5.0a0, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =0.2.1, =0.1.2, =0.3.3, =0.1.0, =0.1.15 and more Source cves: CVE-2024-23829 Source advisory: OSV:PYSEC-2024-26...

aiobotocore (>=0.4.0, <=0.4.1), async-patterns (0.2.0) +7 more potentially affected by CVE-2024-23829 via aiohttp (2.2.0)

aiohttp PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aiobotocore =0.4.0, =0.1.1, =0.2.2, =0.48.0, =0.4.1b2, =0.5.2b0, =0.1.0a88, =0.1.0b10 Source cves: CVE-2024-23829 Source advisory: OSV:PYSEC-2024-...

muffin (>=0.1.1, <=0.1.4) potentially affected by CVE-2024-23829 via aiohttp (0.17.2)

aiohttp PYPI version 0.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.1.1, =0.1.4 Source cves: CVE-2024-23829 Source advisory: OSV:PYSEC-2024-26...

ethereumd-proxy (>=0.1.2, <=0.3.0), homeassistant (>=0.49.0, <=0.50.2) +7 more potentially affected by CVE-2024-23829 via aiohttp (2.2.3)

aiohttp PYPI version 2.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - ethereumd-proxy =0.1.2, =0.49.0, =0.4.4, =0.1.1, =0.1.4, =0.1.0, =0.4.1b17, =0.6.0b3, =0.1.0b11, =0.1.0b19 Source cves: CVE-2024-23829 Source...