aglow (>=0.1.0rc3, <=0.1.0rc4), ai-flow (0.3.1) +7 more potentially affected by CVE-2021-45230 via apache-airflow (>=2.0.0, <=2.1.2)

apache-airflow PYPI version =2.0.0, =0.1.0rc3, =0.0.4rc1, =0.0.0, =0.3.12, =11.8.0, =14.7.0 - gps-building-blocks 1.2.2 - viewflow 0.1.0 Source cves: CVE-2021-45230 Source advisory: OSV:PYSEC-2022-11...

aglow (>=0.1.0rc3, <=0.1.0rc4), ai-flow (0.3.1) +7 more potentially affected by CVE-2021-38540 via apache-airflow (>=2.0.0, <=2.1.2)

apache-airflow PYPI version =2.0.0, =0.1.0rc3, =0.0.4rc1, =0.0.0, =0.3.12, =11.8.0, =14.7.0 - gps-building-blocks 1.2.2 - viewflow 0.1.0 Source cves: CVE-2021-38540 Source advisory: MEND:CVE-2021-38540...

apache-liminal (>=0.0.1.post1, <=0.0.3.post1), apache-liminal-test-spark (0.0.0) +4 more potentially affected by CVE-2021-35936 via apache-airflow (1.10.12)

apache-airflow PYPI version 1.10.12 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - apache-liminal =0.0.1.post1, =0.0.1, =6.0.0, =0.1.0, =0.5.0a9, =0.6.0a15 Source cves: CVE-2021-35936 Source advisory:...