EUVD-2024-0020

Malicious code in bioql PyPI...

CVE-2024-22194

cdo-local-uuid project provides a specialized UUID-generating function that can, on user request, cause a program to generate deterministic UUIDs. An information leakage vulnerability is present in cdo-local-uuid at version 0.4.0, and in case-utils in unpatched versions matching the pattern 0.x.0...

Information Leakage

case-utils is vulnerable to Information Leakage. The vulnerability is caused due to improper handling of UUIDs generation within the localuuid function. This could allow an attacker to guess the UUID, resulting in sensitive data exposure...

GHSA-RGRF-6MF5-M882 cdo-local-uuid vulnerable to insertion of artifact derived from developer's Present Working Directory into demonstration code

Impact What kind of vulnerability is it? Who is impacted? An information leakage vulnerability is present in cdo-local-uuid at version 0.4.0, and in case-utils in unpatched versions matching the pattern 0.x.0 at and since 0.5.0, before 0.15.0. The vulnerability stems from a Python function,...

cdo-local-uuid vulnerable to insertion of artifact derived from developer's Present Working Directory into demonstration code

Impact What kind of vulnerability is it? Who is impacted? An information leakage vulnerability is present in cdo-local-uuid at version 0.4.0, and in case-utils in unpatched versions matching the pattern 0.x.0 at and since 0.5.0, before 0.15.0. The vulnerability stems from a Python function,...

CVE-2024-22194

cdo-local-uuid project provides a specialized UUID-generating function that can, on user request, cause a program to generate deterministic UUIDs. An information leakage vulnerability is present in cdo-local-uuid at version 0.4.0, and in case-utils in unpatched versions matching the pattern 0.x.0...

PYSEC-2024-6

cdo-local-uuid project provides a specialized UUID-generating function that can, on user request, cause a program to generate deterministic UUIDs. An information leakage vulnerability is present in cdo-local-uuid at version 0.4.0, and in case-utils in unpatched versions matching the pattern 0.x.0...

case-prov (0.6.0) potentially affected by CVE-2024-22194 via case-utils (0.9.1.post0)

case-utils PYPI version 0.9.1.post0 is affected by a known vulnerability. The following packages have a transitive dependency on case-utils and may be impacted: - case-prov 0.6.0 Source cves: CVE-2024-22194 Source advisory: OSV:PYSEC-2024-5...

case-prov (>=0.9.0, <=0.9.1) potentially affected by CVE-2024-22194 via case-utils (0.13.1.post0)

case-utils PYPI version 0.13.1.post0 is affected by a known vulnerability. The following packages have a transitive dependency on case-utils and may be impacted: - case-prov =0.9.0, =0.9.1 Source cves: CVE-2024-22194 Source advisory: OSV:PYSEC-2024-5...

case-prov (0.14.0) potentially affected by CVE-2024-22194 via case-utils (0.17.0)

case-utils PYPI version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on case-utils and may be impacted: - case-prov 0.14.0 Source cves: CVE-2024-22194 Source advisory: OSV:PYSEC-2024-5...

case-prov (>=0.3.0, <=0.4.0) potentially affected by CVE-2024-22194 via case-utils (0.6.1)

case-utils PYPI version 0.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on case-utils and may be impacted: - case-prov =0.3.0, =0.4.0 Source cves: CVE-2024-22194 Source advisory: OSV:PYSEC-2024-5...

case-prov (0.8.0) potentially affected by CVE-2024-22194 via case-utils (0.11.1.post0)

case-utils PYPI version 0.11.1.post0 is affected by a known vulnerability. The following packages have a transitive dependency on case-utils and may be impacted: - case-prov 0.8.0 Source cves: CVE-2024-22194 Source advisory: OSV:PYSEC-2024-5...

case-prov (>=0.12.0, <=0.13.0) potentially affected by CVE-2024-22194 via case-utils (0.16.0)

case-utils PYPI version 0.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on case-utils and may be impacted: - case-prov =0.12.0, =0.13.0 Source cves: CVE-2024-22194 Source advisory: OSV:PYSEC-2024-5...

case-prov (0.5.0) potentially affected by CVE-2024-22194 via case-utils (0.7.1)

case-utils PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on case-utils and may be impacted: - case-prov 0.5.0 Source cves: CVE-2024-22194 Source advisory: OSV:PYSEC-2024-5...

case-prov (0.7.0) potentially affected by CVE-2024-22194 via case-utils (0.10.1.post0)

case-utils PYPI version 0.10.1.post0 is affected by a known vulnerability. The following packages have a transitive dependency on case-utils and may be impacted: - case-prov 0.7.0 Source cves: CVE-2024-22194 Source advisory: OSV:PYSEC-2024-5...

case-prov (0.10.0) potentially affected by CVE-2024-22194 via case-utils (0.14.1.post0)

case-utils PYPI version 0.14.1.post0 is affected by a known vulnerability. The following packages have a transitive dependency on case-utils and may be impacted: - case-prov 0.10.0 Source cves: CVE-2024-22194 Source advisory: OSV:PYSEC-2024-5...

case-prov (0.11.0) potentially affected by CVE-2024-22194 via case-utils (0.15.0)

case-utils PYPI version 0.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on case-utils and may be impacted: - case-prov 0.11.0 Source cves: CVE-2024-22194 Source advisory: OSV:PYSEC-2024-5...

PYSEC-2024-5

cdo-local-uuid project provides a specialized UUID-generating function that can, on user request, cause a program to generate deterministic UUIDs. An information leakage vulnerability is present in cdo-local-uuid at version 0.4.0, and in case-utils in unpatched versions matching the pattern 0.x.0...

PYSEC-2024-6

cdo-local-uuid project provides a specialized UUID-generating function that can, on user request, cause a program to generate deterministic UUIDs. An information leakage vulnerability is present in cdo-local-uuid at version 0.4.0, and in case-utils in unpatched versions matching the pattern 0.x.0...

PYSEC-2024-5

cdo-local-uuid project provides a specialized UUID-generating function that can, on user request, cause a program to generate deterministic UUIDs. An information leakage vulnerability is present in cdo-local-uuid at version 0.4.0, and in case-utils in unpatched versions matching the pattern 0.x.0...