serialized-data-interface (0.5.0) potentially affected by CVE-2024-41129 via ops (2.0.0)

ops PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ops and may be impacted: - serialized-data-interface 0.5.0 Source cves: CVE-2024-41129 Source advisory: OSV:PYSEC-2026-1753...

serialized-data-interface (0.5.0) potentially affected by CVE-2024-41129 via ops (2.0.0)

ops PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ops and may be impacted: - serialized-data-interface 0.5.0 Source cves: CVE-2024-41129 Source advisory: GHSA-HCMV-JMQH-FJGM...

CVE-2024-41129 The ops library leaks secrets if `subprocess.CalledProcessError` happens with a `secret-*` CLI command

The ops library is a Python framework for developing and testing Kubernetes and machine charms. The issue here is that ops passes the secret content as one of the args via CLI. This issue may affect any of the charms that are using: Juju =3.0, Juju secrets and not correctly capturing and processi...

CVE-2024-41129 The ops library leaks secrets if `subprocess.CalledProcessError` happens with a `secret-*` CLI command

The ops library is a Python framework for developing and testing Kubernetes and machine charms. The issue here is that ops passes the secret content as one of the args via CLI. This issue may affect any of the charms that are using: Juju =3.0, Juju secrets and not correctly capturing and processi...