7 matches found
django-b2 (>=0.1.4, <=0.7.0) potentially affected by CVE-2022-23651 via b2sdk (1.0.2)
b2sdk PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on b2sdk and may be impacted: - django-b2 =0.1.4, =0.7.0 Source cves: CVE-2022-23651 Source advisory: OSV:GHSA-P867-FXFR-PH2W...
django-b2 (>=0.1.4, <=0.7.0) potentially affected by CVE-2022-23651 via b2sdk (1.0.2)
b2sdk PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on b2sdk and may be impacted: - django-b2 =0.1.4, =0.7.0 Source cves: CVE-2022-23651 Source advisory: GHSA-P867-FXFR-PH2W...
mdid (3.6.0) potentially affected by CVE-2022-23651 via b2sdk (0.1.6)
b2sdk PYPI version 0.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on b2sdk and may be impacted: - mdid 3.6.0 Source cves: CVE-2022-23651 Source advisory: OSV:GHSA-P867-FXFR-PH2W...
Time-of-check-time-of-use (TOCTOU)
b2sdk is vulnerable to time-of-check-time-of-use TOCTOU. A local attacker is able to read the contents of the local database file where API keys are saved when using SqliteAccountInfo, resulting in sensitive information disclosure via race condition...
mdid (3.6.0) potentially affected by CVE-2022-23651 via b2sdk (0.1.6)
b2sdk PYPI version 0.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on b2sdk and may be impacted: - mdid 3.6.0 Source cves: CVE-2022-23651 Source advisory: OSV:PYSEC-2022-33...
django-b2 (>=0.1.4, <=0.7.0) potentially affected by CVE-2022-23651 via b2sdk (1.0.2)
b2sdk PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on b2sdk and may be impacted: - django-b2 =0.1.4, =0.7.0 Source cves: CVE-2022-23651 Source advisory: OSV:PYSEC-2022-33...
django-b2 (>=0.1.4, <=0.7.0), mdid (3.6.0) potentially affected by CVE-2022-23651 via b2sdk (>=0.1.6, <=1.0.2)
b2sdk PYPI version =0.1.6, =0.1.4, =0.7.0 - mdid 3.6.0 Source cves: CVE-2022-23651 Source advisory: MEND:CVE-2022-23651...