c7n-azure (0.7.22), c7n-kube (0.2.22) +1 more potentially affected by CVE-2024-6345 via setuptools (67.3.2)

setuptools PYPI version 67.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - c7n-azure 0.7.22 - c7n-kube 0.2.22 - c7n-sphinxext 1.1.22 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW5...

c7n-azure (0.7.8), erpbrasil-assinatura (1.0.2) +2 more potentially affected by CVE-2024-26130 via cryptography (3.3.0)

cryptography PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - c7n-azure 0.7.8 - erpbrasil-assinatura 1.0.2 - myjwt 1.2.0 - swimlane-platform 10.6.0 Source cves: CVE-2024-26130 Source advisory:...

c7n-azure (0.7.8), erpbrasil-assinatura (1.0.2) +2 more potentially affected by CVE-2023-50782 via cryptography (3.3.0)

cryptography PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - c7n-azure 0.7.8 - erpbrasil-assinatura 1.0.2 - myjwt 1.2.0 - swimlane-platform 10.6.0 Source cves: CVE-2023-50782 Source advisory:...

c7n-azure (0.7.10), c7n-openstack (0.1.1) +40 more potentially affected by CVE-2023-50782 via cryptography (3.4.6)

cryptography PYPI version 3.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - c7n-azure 0.7.10 - c7n-openstack 0.1.1 - combocurve-api-v1 =0.1.0, =2.0.0rc1, =0.1.6.1, =0.0.3, =0.1.0, =0.2.8, =0.5.0, =0.10.0, =1.0.0...

apputils-config (>=2.0.0, <=2.0.1.dev13), burstable (>=0.2.5rc2, <=0.2.6) +32 more potentially affected by CVE-2024-0727 via cryptography (3.0.0)

cryptography PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - apputils-config =2.0.0, =0.2.5rc2, =0.13.0, =3.16.0.dev2, =0.8.0, =0.0.1, =0.0.2, =11.0.0b3, =0.1.2, =1.0.0, =0.1.9, =0.1.12 and more...

aie-sdk (>=3.0.1, <=3.0.4), aiearth-engine (>=3.0.2, <=3.1.6) +115 more potentially affected by CVE-2024-0727 via cryptography (38.0.1)

cryptography PYPI version 38.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - aie-sdk =3.0.1, =3.0.2, =2022.10.0b0, =3.0.0, =2.1.1, =0.1.37, =0.7.18, =0.1.9, =0.1.10 - c7n-org 0.6.18 and more Source cves:...

c7n-azure (0.7.8), erpbrasil-assinatura (1.0.2) +2 more potentially affected by CVE-2024-0727 via cryptography (3.3.0)

cryptography PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - c7n-azure 0.7.8 - erpbrasil-assinatura 1.0.2 - myjwt 1.2.0 - swimlane-platform 10.6.0 Source cves: CVE-2024-0727 Source advisory:...

aironsuit (0.1.20), airontools (>=0.1.23, <=0.1.24) +25 more potentially affected by CVE-2023-4785 via grpcio (1.56.0)

grpcio PYPI version 1.56.0 is affected by a known vulnerability. The following packages have a transitive dependency on grpcio and may be impacted: - aironsuit 0.1.20 - airontools =0.1.23, =1.0.0, =1.0.1, =0.0.1, =0.0.8, =1.3.4, =0.1.12, =1.3.4b0, =0.2.13, =0.4.0 and more Source cves: CVE-2023-47...

azure-kusto-ingest (>=0.0.38, <=0.0.45), c7n-azure (>=0.7.0, <=0.7.9) +2 more potentially affected by CVE-2022-30187 via azure-storage-queue (2.1.0)

azure-storage-queue PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on azure-storage-queue and may be impacted: - azure-kusto-ingest =0.0.38, =0.7.0, =0.0.1, =0.0.4 - npyetl 0.0.5 Source cves: CVE-2022-30187 Source advisory:...

c7n-azure (>=0.7.8, <=0.7.9), ddf-conversions (1.0.0) +16 more potentially affected by CVE-2021-32559 via pywin32 (300.0.0)

pywin32 PYPI version 300.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pywin32 and may be impacted: - c7n-azure =0.7.8, =0.0.2, =1.6.6.6, =0.1.0, =1.3.0, =1.0.0, =0.0.1, =1.0.0, =1.0.1 and more Source cves: CVE-2021-32559 Source advisory:...