39 matches found
beancount-ce (>=0.1.0, <=1.2.0), ocrmypdf (>=10.3.2, <=11.3.0) +4 more potentially affected by CVE-2025-64512 via pdfminer-six (20200726.0.0)
pdfminer-six PYPI version 20200726.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - beancount-ce =0.1.0, =10.3.2, =0.3.0, =1.0.3, =1.44.0, =0.1.1, =0.1.7 Source cves: CVE-2025-64512 Source advisory:...
beancount-ce (>=0.1.0, <=1.2.0), ocrmypdf (>=10.3.2, <=11.3.0) +4 more potentially affected by CVE-2025-70559 via pdfminer-six (20200726.0.0)
pdfminer-six PYPI version 20200726.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - beancount-ce =0.1.0, =10.3.2, =0.3.0, =1.0.3, =1.44.0, =0.1.1, =0.1.7 Source cves: CVE-2025-70559 Source advisory:...
beancount-ce (>=0.1.0, <=1.2.0), ocrmypdf (>=10.3.2, <=11.3.0) +4 more potentially affected by CVE-2025-64512 via pdfminer-six (20200726.0.0)
pdfminer-six PYPI version 20200726.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - beancount-ce =0.1.0, =10.3.2, =0.3.0, =1.0.3, =1.44.0, =0.1.1, =0.1.7 Source cves: CVE-2025-64512 Source advisory:...
EUVD-2022-0102
Malicious code in bioql PyPI...
EUVD-2022-0101
Malicious code in bioql PyPI...
CVE-2022-2589
Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...
CVE-2022-2523
Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.2...
CVE-2022-2589
Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...
DEBIAN-CVE-2022-2589
Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...
CVE-2022-2589
Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...
CVE-2022-2589
Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...
PYSEC-2022-246
Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...
UBUNTU-CVE-2022-2589
Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...
Cross site scripting
Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...
PYSEC-2022-246
Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...
CVE-2022-2589
CVE-2022-2589 affects the Beancount/Fava project: a reflected Cross-site Scripting (XSS) vulnerability due to improper validation on filter conversion in Fava before version 1.22.3. Affected component: Fava web UI logic (filter handling). Impact: potential credential or data exposure via crafted ...
CVE-2022-2589
Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...
CVE-2022-2589 Cross-site Scripting (XSS) - Reflected in beancount/fava
Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...
