chellow (2231.0.0), toggl2pl (1.0.5) potentially affected by CVE-2022-24761 via waitress (1.4.0)

waitress PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on waitress and may be impacted: - chellow 2231.0.0 - toggl2pl 1.0.5 Source cves: CVE-2022-24761 Source advisory: OSV:GHSA-4F7P-27JC-3C36...

chellow (2231.0.0), toggl2pl (1.0.5) potentially affected by CVE-2022-24761 via waitress (1.4.0)

waitress PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on waitress and may be impacted: - chellow 2231.0.0 - toggl2pl 1.0.5 Source cves: CVE-2022-24761 Source advisory: OSV:PYSEC-2022-169...

chellow (>=2234.0.0, <=2243.0.0), kinto-dist (18.0.2) potentially affected by CVE-2022-24761 via waitress (1.4.2)

waitress PYPI version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on waitress and may be impacted: - chellow =2234.0.0, =2243.0.0 - kinto-dist 18.0.2 Source cves: CVE-2022-24761 Source advisory: OSV:PYSEC-2022-169...

chellow (>=2050.0.0, <=2230.0.0), dcicsnovault (>=2.0.0b0, <=2.0.0b11) +8 more potentially affected by CVE-2019-16792 via waitress (>=1.0.1, <=1.3.1)

waitress PYPI version =1.0.1, =2050.0.0, =2.0.0b0, =17.4.0, =1.1.0.dev20170908, =1.3.7, =0.9.1, =1.0.3, =1.0.4 Source cves: CVE-2019-16792 Source advisory: OSV:GHSA-4PPP-GPCR-7QF6...