Photon OS 5.0: Openssl PHSA-2024-5.0-91-0198

An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0198. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Openssl PHSA-2026-5.0-92-0878

An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0878. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

atlassian-jwt-auth (8.0.1), authx (>=0.0.3, <=0.0.5) +28 more potentially affected by CVE-2024-0727 via cryptography (3.1.1)

cryptography PYPI version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - atlassian-jwt-auth 8.0.1 - authx =0.0.3, =0.9.1, =1.0.0, =0.8.2rc2, =3.20.0, =0.1.0a1, =0.0.1, =0.0.7, =0.0.5, =0.1.0a1, =0.1.0a4 and mo...

c7n-azure (0.7.8), erpbrasil-assinatura (1.0.2) +2 more potentially affected by CVE-2024-0727 via cryptography (3.3.0)

cryptography PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - c7n-azure 0.7.8 - erpbrasil-assinatura 1.0.2 - myjwt 1.2.0 - swimlane-platform 10.6.0 Source cves: CVE-2024-0727 Source advisory:...

kel-cluster (>=0.0.1, <=0.0.2), more-jwtauth (>=0.4.0, <=0.5.0) potentially affected by CVE-2024-0727 via cryptography (1.3.1)

cryptography PYPI version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - kel-cluster =0.0.1, =0.4.0, =0.5.0 Source cves: CVE-2024-0727 Source advisory: OSV:PYSEC-2026-1285...

certbot-pinned (0.17.0), dcoscli (>=0.5.4, <=0.6.1) potentially affected by CVE-2024-0727 via cryptography (2.0.2)

cryptography PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - certbot-pinned 0.17.0 - dcoscli =0.5.4, =0.6.1 Source cves: CVE-2024-0727 Source advisory: OSV:PYSEC-2026-1285...

apputils-config (>=2.0.2.dev19, <=2.0.2.dev20), aws-gate (>=0.9.3, <=0.11.0) +43 more potentially affected by CVE-2024-0727 via cryptography (3.3.1)

cryptography PYPI version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - apputils-config =2.0.2.dev19, =0.9.3, =0.1.1, =1.1.0, =1.2.3, =3.26.0, =0.1.1, =21.1.0, =0.1.0, =0.0.1, =0.2.0, =0.2.8 and more Source...

charmcraft (>=1.4.0, <=2.2.0), optikka-design-data-layer (0.1.58) +4 more potentially affected by CVE-2024-0727 via cryptography (3.4.0)

cryptography PYPI version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - charmcraft =1.4.0, =4.2.3, =0.1.0, =1.7.0, =0.0.1, =0.0.4 Source cves: CVE-2024-0727 Source advisory: OSV:PYSEC-2026-1285...

dbcat (0.3.1), dfnclient (0.4.7) +6 more potentially affected by CVE-2024-0727 via cryptography (3.4.4)

cryptography PYPI version 3.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - dbcat 0.3.1 - dfnclient 0.4.7 - digsig =0.0.1b0, =0.2.4, =1.5.4b2, =1.1.0, =1.5.3 Source cves: CVE-2024-0727 Source advisory:...

dimensigon (>=0.3.4, <=0.3.5), hybrid-rsa-aes (0.2.7) +2 more potentially affected by CVE-2024-0727 via cryptography (3.4.5)

cryptography PYPI version 3.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - dimensigon =0.3.4, =1.9.0, =0.1.0, =0.1.20 Source cves: CVE-2024-0727 Source advisory: OSV:PYSEC-2026-1285...

acmebot (>=2.8.1, <=2.13.1), aiovotifier (>=1.0.0, <=1.0.6) +104 more potentially affected by CVE-2024-0727 via cryptography (35.0.0)

cryptography PYPI version 35.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - acmebot =2.8.1, =1.0.0, =0.1.0, =1.25.2, =0.9.7, =0.1.2, =0.11.0, =12.0.1, =0.0.6, =4.0.1, =0.0.7, =0.14.0, =0.7.12, =0.8.2 and more...

authx (0.1.4), carml (>=21.0.0, <=21.1.0) +19 more potentially affected by CVE-2024-0727 via cryptography (36.0.0)

cryptography PYPI version 36.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - authx 0.1.4 - carml =21.0.0, =0.2.2, =0.0.2, =1.0.0, =0.0.3, =0.19.0, =0.9.0, =1.0.10, =1.0.2, =0.7.0, =0.8.4 and more Source cves:...

fedcloudclient (1.2.18), termpair (0.3.1.5) potentially affected by CVE-2024-0727 via cryptography (37.0.3)

cryptography PYPI version 37.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - fedcloudclient 1.2.18 - termpair 0.3.1.5 Source cves: CVE-2024-0727 Source advisory: OSV:PYSEC-2026-1285...

asyncdb (>=2.1.15, <=2.1.26), navconfig (>=1.0.0, <=1.0.3) potentially affected by CVE-2024-0727 via cryptography (38.0.2)

cryptography PYPI version 38.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - asyncdb =2.1.15, =1.0.0, =1.0.3 Source cves: CVE-2024-0727 Source advisory: OSV:PYSEC-2026-1285...

aef-gw (>=0.1.1, <=0.1.15), agilicus (>=1.173.1, <=1.177.3) +438 more potentially affected by CVE-2024-0727 via cryptography (38.0.4)

cryptography PYPI version 38.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - aef-gw =0.1.1, =1.173.1, =1.1.73b0, =0.0.1, =0.5.0, =0.3.2, =1.0.0, =2.4.11, =1.3.0rc2, =0.6.0.68, =2.6.0, =4.2.0.90, =0.6.3, =0.8.11 a...

adeso (>=0.0.1, <=0.0.4), ais-dom (>=2023.7.0b0, <=2023.7.2) +59 more potentially affected by CVE-2024-0727 via cryptography (41.0.1)

cryptography PYPI version 41.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - adeso =0.0.1, =2023.7.0b0, =3.0.753, =1.1.23, =0.9.4, =0.1.0, =0.1.3, =1.0.7b0, =1.5.4, =1.9.1a1 and more Source cves: CVE-2024-0727...

baboons (0.1.0), benchmark-runner (>=1.0.498, <=1.0.506) +47 more potentially affected by CVE-2024-0727 via cryptography (41.0.2)

cryptography PYPI version 41.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - baboons 0.1.0 - benchmark-runner =1.0.498, =1.1.25, =1.3.6rc1, =3.0.0a10, =0.4.11rc1, =0.4.12 and more Source cves: CVE-2024-0727 Sourc...

agixt (>=1.3.84, <=1.3.143), ai-service-wrapper (>=0.0.3, <=0.0.8) +100 more potentially affected by CVE-2024-0727 via cryptography (41.0.3)

cryptography PYPI version 41.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - agixt =1.3.84, =0.0.3, =0.0.1, =1.0.2, =1.0.507, =0.2.5, =0.0.1rc1, =6.0.0, =0.7.29, =0.1.4, =0.1.5 and more Source cves: CVE-2024-0727...

agixt (>=1.3.144, <=1.3.155), airbyte-source-google-analytics-v4 (>=0.2.5, <=0.4.19) +75 more potentially affected by CVE-2024-0727 via cryptography (41.0.4)

cryptography PYPI version 41.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - agixt =1.3.144, =0.2.5, =2023.10.0b1, =0.1.0, =0.2.0rc1, =1.0.530, =1.1.28, =0.14.0, =0.15.0 and more Source cves: CVE-2024-0727 Source...

auditor-apel-plugin (>=0.3.0, <=0.3.1), aurora-signature (3.1.0) +36 more potentially affected by CVE-2024-0727 via cryptography (41.0.5)

cryptography PYPI version 41.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - auditor-apel-plugin =0.3.0, =23.11.0, =2.1.2rc1, =1.0.0, =1.1.17, =1.4.1, =0.0.16, =0.0.19 and more Source cves: CVE-2024-0727 Source...