python313-astropy-8.0.1-1.1 on GA media (moderate)

python313-astropy-8.0.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11353-1 Rating: moderate Cross-References: CVE-2023-41334 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

stasma (>=0.1.0, <=0.1.2) potentially affected by CVE-2023-41334 via astropy (2.0.2)

astropy PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on astropy and may be impacted: - stasma =0.1.0, =0.1.2 Source cves: CVE-2023-41334 Source advisory: OSV:PYSEC-2026-1199...

astropixie-widgets (>=0.1.0, <=0.1.2), autolens (0.1.2) +1 more potentially affected by CVE-2023-41334 via astropy (3.0.0)

astropy PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on astropy and may be impacted: - astropixie-widgets =0.1.0, =0.1.2 - autolens 0.1.2 - moons1d 0.2.4 Source cves: CVE-2023-41334 Source advisory: OSV:PYSEC-2026-1199...

tesslatte (>=0.1.1, <=0.1.10) potentially affected by CVE-2023-41334 via astropy (3.2.0rc1)

astropy PYPI version 3.2.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on astropy and may be impacted: - tesslatte =0.1.1, =0.1.10 Source cves: CVE-2023-41334 Source advisory: OSV:PYSEC-2026-1199...

Updated python-astropy packages fix security vulnerability

Version 5.3.2 of the Astropy core package is vulnerable to remote code execution due to improper input validation in the TranformGraph.todotgraph function. A malicious user can provide a command or a script file as a value to the savelayout argument, which will be placed as the first value in a...

Fedora: Security Advisory (FEDORA-2024-d329148f1e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-d8ac19de55)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 40 : python-astropy (2024-d329148f1e)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-d329148f1e advisory. Security fix for CVE-2023-41334 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

SUSE CVE-2023-41334

Astropy is a project for astronomy in Python that fosters interoperability between Python astronomy packages. Version 5.3.2 of the Astropy core package is vulnerable to remote code execution due to improper input validation in the TranformGraph.todotgraph function. A malicious user can provide a...

aimfast (>=1.3.0, <=1.3.3), aphos-openapi (>=2.5.0, <=2.5.3) +98 more potentially affected by CVE-2023-41334 via astropy (>=5.0.0rc2, <=5.3.2)

astropy PYPI version =5.0.0rc2, =1.3.0, =2.5.0, =0.0.3, =0.0.1, =0.0.2, =0.0.1, =1.3.3, =2021.10.14.1, =2021.10.14.1, =2021.10.14.1, =1.0.2, =2023.8.2, =2023.8.2.1 and more Source cves: CVE-2023-41334 Source advisory: GHSA-H2X6-5JX5-46HF...

stasma (>=0.1.0, <=0.1.2) potentially affected by CVE-2023-41334 via astropy (2.0.2)

astropy PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on astropy and may be impacted: - stasma =0.1.0, =0.1.2 Source cves: CVE-2023-41334 Source advisory: OSV:GHSA-H2X6-5JX5-46HF...

aimfast (0.1.0) potentially affected by CVE-2023-41334 via astropy (2.0.4)

astropy PYPI version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on astropy and may be impacted: - aimfast 0.1.0 Source cves: CVE-2023-41334 Source advisory: OSV:GHSA-H2X6-5JX5-46HF...

astropixie-widgets (>=0.1.0, <=0.1.2), autolens (0.1.2) +1 more potentially affected by CVE-2023-41334 via astropy (3.0.0)

astropy PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on astropy and may be impacted: - astropixie-widgets =0.1.0, =0.1.2 - autolens 0.1.2 - moons1d 0.2.4 Source cves: CVE-2023-41334 Source advisory: OSV:GHSA-H2X6-5JX5-46HF...

astropixie (>=0.1.4, <=0.1.8), astropixie-hr (0.1.0) +1 more potentially affected by CVE-2023-41334 via astropy (3.0.5)

astropy PYPI version 3.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on astropy and may be impacted: - astropixie =0.1.4, =0.1.4, =0.1.8 Source cves: CVE-2023-41334 Source advisory: OSV:GHSA-H2X6-5JX5-46HF...

deproject (0.2.0) potentially affected by CVE-2023-41334 via astropy (3.1.0rc2)

astropy PYPI version 3.1.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on astropy and may be impacted: - deproject 0.2.0 Source cves: CVE-2023-41334 Source advisory: OSV:GHSA-H2X6-5JX5-46HF...

tom-education (1.1.4) potentially affected by CVE-2023-41334 via astropy (3.2.2)

astropy PYPI version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on astropy and may be impacted: - tom-education 1.1.4 Source cves: CVE-2023-41334 Source advisory: OSV:GHSA-H2X6-5JX5-46HF...

astro-salsa (1.0.0), astrool (0.1.0.dev0) +18 more potentially affected by CVE-2023-41334 via astropy (3.2.3)

astropy PYPI version 3.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on astropy and may be impacted: - astro-salsa 1.0.0 - astrool 0.1.0.dev0 - eph =1.1.2, =0.3.0, =1.0.1, =0.9.0, =0.2.1, =0.8.0, =0.8.2 - satsim 0.12.0 - sbpy 0.2.2 - sdss-basecam...

ugmrt-beamds (>=1.0.2, <=1.1.1) potentially affected by CVE-2023-41334 via astropy (4.3.0)

astropy PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on astropy and may be impacted: - ugmrt-beamds =1.0.2, =1.1.1 Source cves: CVE-2023-41334 Source advisory: OSV:GHSA-H2X6-5JX5-46HF...

blip-alpha (>=0.0.3, <=0.0.19), blip-gw (>=1.0.0, <=1.0.6) +7 more potentially affected by CVE-2023-41334 via astropy (4.0.1.post1)

astropy PYPI version 4.0.1.post1 is affected by a known vulnerability. The following packages have a transitive dependency on astropy and may be impacted: - blip-alpha =0.0.3, =1.0.0, =0.1.0, =0.0.1, =0.17.4, =1.8.1, =1.0.0, =1.0.1 Source cves: CVE-2023-41334 Source advisory: OSV:GHSA-H2X6-5JX5-4...

CVE-2023-41334

Astropy is a project for astronomy in Python that fosters interoperability between Python astronomy packages. Version 5.3.2 of the Astropy core package is vulnerable to remote code execution due to improper input validation in the TranformGraph.todotgraph function. A malicious user can provide a...