cloudmesh-client (>=4.2.6, <=4.4.0), moca (0.3.3) +2 more potentially affected by CVE-2024-3651 via idna (2.1.0)

idna PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on idna and may be impacted: - cloudmesh-client =4.2.6, =2.1.1rc5, =2.2.0 Source cves: CVE-2024-3651 Source advisory: OSV:GHSA-JJG7-2V4V-X38H...

cloudmesh-client (4.2.6), pycookiecheat (0.3.1) potentially affected by CVE-2024-0727 via cryptography (1.3.2)

cryptography PYPI version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - cloudmesh-client 4.2.6 - pycookiecheat 0.3.1 Source cves: CVE-2024-0727 Source advisory: OSV:GHSA-9V9H-CGJ8-H64P...

alo7-airflow (>=1.10.0, <=1.10.0.7), biweeklybudget (>=0.1.0, <=0.7.0) +20 more potentially affected by CVE-2024-22195 via jinja2 (2.8.1)

jinja2 PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - alo7-airflow =1.10.0, =0.1.0, =4.5.0, =0.1.0, =3.0.0, =1.3.0, =3.0.0, =1.4.0rc1, =1.3.0, =2.0.0, =1.0.0a1, =1.6.0, =0.8.0.0, =0.9.0.7 and more Sourc...

cloudmesh-client (4.2.6) potentially affected by CVE-2023-5115 via ansible (2.0.2.0)

ansible PYPI version 2.0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - cloudmesh-client 4.2.6 Source cves: CVE-2023-5115 Source advisory: OSV:GHSA-JPVW-P8PR-9G2X...

cloudmesh-client (>=4.3.2, <=4.4.0) potentially affected by CVE-2023-5115 via ansible (2.1.0.0)

ansible PYPI version 2.1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - cloudmesh-client =4.3.2, =4.4.0 Source cves: CVE-2023-5115 Source advisory: OSV:GHSA-JPVW-P8PR-9G2X...

cloudmesh-client (>=4.5.0, <=4.7.3), nirum (>=0.0.1, <=0.3.8) +4 more potentially affected by CVE-2023-46136 via werkzeug (0.11.15)

werkzeug PYPI version 0.11.15 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - cloudmesh-client =4.5.0, =0.0.1, =0.4.3, =1.0.0, =0.8.0, =0.1.14, =0.1.20 Source cves: CVE-2023-46136 Source advisory: OSV:PYSEC-2023-221...

cloudmesh-client (>=4.5.0, <=4.7.3) potentially affected by CVE-2022-0718 via oslo-utils (3.22.0)

oslo-utils PYPI version 3.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on oslo-utils and may be impacted: - cloudmesh-client =4.5.0, =4.7.3 Source cves: CVE-2022-0718 Source advisory: OSV:GHSA-WMQQ-R32M-87C5...

cloudmesh-client (4.2.6) potentially affected by CVE-2022-0718 via oslo-utils (3.10.0)

oslo-utils PYPI version 3.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on oslo-utils and may be impacted: - cloudmesh-client 4.2.6 Source cves: CVE-2022-0718 Source advisory: OSV:GHSA-WMQQ-R32M-87C5...

cloudmesh-client (>=4.3.2, <=4.4.0) potentially affected by CVE-2022-0718 via oslo-utils (3.15.0)

oslo-utils PYPI version 3.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on oslo-utils and may be impacted: - cloudmesh-client =4.3.2, =4.4.0 Source cves: CVE-2022-0718 Source advisory: OSV:GHSA-WMQQ-R32M-87C5...

cloudmesh-client (>=4.3.2, <=4.4.0) potentially affected by CVE-2022-0718 via oslo-utils (3.15.0)

oslo-utils PYPI version 3.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on oslo-utils and may be impacted: - cloudmesh-client =4.3.2, =4.4.0 Source cves: CVE-2022-0718 Source advisory: OSV:PYSEC-2022-258...

cloudmesh-client (>=4.5.0, <=4.7.3) potentially affected by CVE-2022-0718 via oslo-utils (3.22.0)

oslo-utils PYPI version 3.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on oslo-utils and may be impacted: - cloudmesh-client =4.5.0, =4.7.3 Source cves: CVE-2022-0718 Source advisory: OSV:PYSEC-2022-258...

cloudmesh-client (4.2.6) potentially affected by CVE-2022-0718 via oslo-utils (3.10.0)

oslo-utils PYPI version 3.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on oslo-utils and may be impacted: - cloudmesh-client 4.2.6 Source cves: CVE-2022-0718 Source advisory: OSV:PYSEC-2022-258...

cloudmesh-client (>=4.2.6, <=4.4.0), nginxauthdaemon (>=1.0.0a1, <=1.1.0) +1 more potentially affected by CVE-2022-29361 via werkzeug (0.11.10)

werkzeug PYPI version 0.11.10 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - cloudmesh-client =4.2.6, =1.0.0a1, =1.1.0 - picopayments-hub 0.0.11 Source cves: CVE-2022-29361 Source advisory: OSV:PYSEC-2022-203...

cloudmesh-client (>=4.5.0, <=4.7.3), nirum (>=0.0.1, <=0.3.8) +4 more potentially affected by CVE-2022-29361 via werkzeug (0.11.15)

werkzeug PYPI version 0.11.15 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - cloudmesh-client =4.5.0, =0.0.1, =0.4.3, =1.0.0, =0.8.0, =0.1.14, =0.1.20 Source cves: CVE-2022-29361 Source advisory: OSV:PYSEC-2022-203...

cloudmesh-client (4.2.6), pycookiecheat (0.3.1) potentially affected by CVE-2020-25659 via cryptography (1.3.2)

cryptography PYPI version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - cloudmesh-client 4.2.6 - pycookiecheat 0.3.1 Source cves: CVE-2020-25659 Source advisory: OSV:PYSEC-2021-62...

cloudmesh-client (>=4.5.0, <=4.7.3), django-ca (>=1.5.0, <=1.5.1) +5 more potentially affected by CVE-2020-25659 via cryptography (1.7.2)

cryptography PYPI version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - cloudmesh-client =4.5.0, =1.5.0, =0.5.1, =1.0.0, =5.4.0, =2.2.2, =0.7.0, =0.7.3 Source cves: CVE-2020-25659 Source advisory:...

cloudmesh-client (>=4.5.0, <=4.7.3), django-ca (>=1.5.0, <=1.5.1) +5 more potentially affected by CVE-2020-25659 via cryptography (1.7.2)

cryptography PYPI version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - cloudmesh-client =4.5.0, =1.5.0, =0.5.1, =1.0.0, =5.4.0, =2.2.2, =0.7.0, =0.7.3 Source cves: CVE-2020-25659 Source advisory:...

cloudmesh-client (>=4.3.2, <=4.4.0), mastercard-api-core (>=1.1.1, <=1.3.0) +29 more potentially affected by CVE-2020-25659 via cryptography (1.4.0)

cryptography PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - cloudmesh-client =4.3.2, =1.1.1, =1.0.2, =1.0.2, =1.0.2, =0.0.1, =0.0.1, =1.0.2, =1.0.2, =1.0.2, =1.0.2, =1.0.3 and more Source cves:...

cloudmesh-client (>=4.2.6, <=4.4.0), k8sdc (>=0.0.11, <=0.0.20) +2 more potentially affected by CVE-2016-9587 via ansible (>=2.0.0.0, <=2.1.2.0)

ansible PYPI version =2.0.0.0, =4.2.6, =0.0.11, =0.1.4, =0.1.7, =0.1.14 Source cves: CVE-2016-9587 Source advisory: OSV:GHSA-M956-FRF4-M2WR...

chaosmonkey (>=1.0.8, <=1.1.0), cloudmesh-client (>=4.5.0, <=4.7.3) +2 more potentially affected by CVE-2018-1000805 via paramiko (>=2.1.1, <=2.1.2)

paramiko PYPI version =2.1.1, =1.0.8, =4.5.0, =0.8.0, =0.9.0 - marvin-python-toolbox 0.0.4 Source cves: CVE-2018-1000805 Source advisory: GHSA-F2J6-WRHH-V25M...