aos-signer (>=0.0.6, <=0.4.0) potentially affected by CVE-2025-48994 via signxml (2.7.2)

signxml PYPI version 2.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on signxml and may be impacted: - aos-signer =0.0.6, =0.4.0 Source cves: CVE-2025-48994 Source advisory: OSV:PYSEC-2026-1921...

aos-signer (>=0.0.6, <=0.4.0) potentially affected by CVE-2025-48995 via signxml (2.7.2)

signxml PYPI version 2.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on signxml and may be impacted: - aos-signer =0.0.6, =0.4.0 Source cves: CVE-2025-48995 Source advisory: OSV:PYSEC-2026-1922...

aos-signer (>=1.6.1, <=1.8.0), cl-sii (>=0.11.1, <=0.26.0) +10 more potentially affected by CVE-2025-48994 via signxml (3.2.2)

signxml PYPI version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on signxml and may be impacted: - aos-signer =1.6.1, =0.11.1, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =1.7.0, =0.9.6, =8.0.2, =9.1.2 Source cves: CVE-2025-48994 Source advisory:...

aos-signer (>=1.6.1, <=1.8.0), cl-sii (>=0.11.1, <=0.26.0) +10 more potentially affected by CVE-2025-48995 via signxml (3.2.2)

signxml PYPI version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on signxml and may be impacted: - aos-signer =1.6.1, =0.11.1, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =1.7.0, =0.9.6, =8.0.2, =9.1.2 Source cves: CVE-2025-48995 Source advisory:...

20220429-pdfminer-jameslp310 (0.0.2), adapta (>=2.0.0, <=3.3.6) +347 more potentially affected by CVE-2024-0727 via cryptography (36.0.2)

cryptography PYPI version 36.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - 20220429-pdfminer-jameslp310 0.0.2 - adapta =2.0.0, =0.0.53, =2022.7.7b1, =0.3.11, =1.4.0.dev7, =3.7.1b1, =1.6.1, =14.0.0, =0.0.3,...

aos-signer (>=0.0.6, <=0.4.0) potentially affected by CVE-2025-48994 via signxml (2.7.2)

signxml PYPI version 2.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on signxml and may be impacted: - aos-signer =0.0.6, =0.4.0 Source cves: CVE-2025-48994 Source advisory: OSV:GHSA-6VX8-PCWV-XHF4...

aos-signer (>=0.0.6, <=0.4.0) potentially affected by CVE-2025-48995 via signxml (2.7.2)

signxml PYPI version 2.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on signxml and may be impacted: - aos-signer =0.0.6, =0.4.0 Source cves: CVE-2025-48995 Source advisory: OSV:GHSA-GMHF-GG8W-JW42...

alertwise (1.0.0), aos-signer (>=0.0.6, <=1.8.0) +19 more potentially affected by CVE-2025-48995 via signxml (>=2.5.2, <=4.0.2)

signxml PYPI version =2.5.2, =0.0.6, =0.5.1, =1.0.0, =0.5.1, =1.0.0, =0.1.0, =0.1.0, =1.1.0, =0.1.0, =1.4.0, =2.0.0, =1.0.0, =0.5.3, =0.5.30 - pynfe 0.4.3 and more Source cves: CVE-2025-48995 Source advisory: MEND:CVE-2025-48995...

a2grunnerp (>=0.1.0, <=0.1.8), aos-keys (>=1.5.1b5, <=1.6.0) +41 more potentially affected by CVE-2023-50782 via cryptography (39.0.0)

cryptography PYPI version 39.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - a2grunnerp =0.1.0, =1.5.1b5, =3.7.1b11, =1.11.0b1, =0.8.2, =5.2.0, =0.0.2, =0.0.165, =3.72.0, =1.0.0, =1.0.4 - doopass 2.2.0 and more...