clover-synth (0.1.0), coliseum (1.0.5) +5 more potentially affected by CVE-2025-71176 via pytest (8.0.0rc2)

pytest PYPI version 8.0.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - clover-synth 0.1.0 - coliseum 1.0.5 - muograph =0.1.6, =2.1.0, =0.7.4, =0.12.1 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

bolinette (>=0.5.5, <=0.5.7), coliseum (>=1.0.1, <=1.0.4) +13 more potentially affected by CVE-2025-71176 via pytest (6.1.1)

pytest PYPI version 6.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - bolinette =0.5.5, =1.0.1, =0.1.0, =0.14.0, =0.2.0, =2020.10.25.post2, =1.3.7, =0.0.1, =1.49.24, =1.0.0, =2.1.0, =0.1.20b1, =0.0.4, =0.1.0 Source cve...

bolinette (>=0.5.5, <=0.5.7), coliseum (>=1.0.1, <=1.0.4) +13 more potentially affected by CVE-2025-71176 via pytest (6.1.1)

pytest PYPI version 6.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - bolinette =0.5.5, =1.0.1, =0.1.0, =0.14.0, =0.2.0, =2020.10.25.post2, =1.3.7, =0.0.1, =1.49.24, =1.0.0, =2.1.0, =0.1.20b1, =0.0.4, =0.1.0 Source cve...

clover-synth (0.1.0), coliseum (1.0.5) +5 more potentially affected by CVE-2025-71176 via pytest (8.0.0rc2)

pytest PYPI version 8.0.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - clover-synth 0.1.0 - coliseum 1.0.5 - muograph =0.1.6, =2.1.0, =0.7.4, =0.12.1 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G5...

coliseum-online.com Cross Site Scripting vulnerability OBB-3330111

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...