datatap (>=0.0.5, <=0.1.4) potentially affected by CVE-2021-42343 via dask (2.11.0)

dask PYPI version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on dask and may be impacted: - datatap =0.0.5, =0.1.4 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-387...

dagster-dask (>=0.5.0rc4, <=0.6.4), prefect (>=0.5.0, <=0.5.5) potentially affected by CVE-2021-42343 via dask (1.2.2)

dask PYPI version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on dask and may be impacted: - dagster-dask =0.5.0rc4, =0.5.0, =0.5.5 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-387...

a2g (2020.0.1), dataprep (>=0.2.11, <=0.2.12) +1 more potentially affected by CVE-2021-42343 via dask (2.22.0)

dask PYPI version 2.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on dask and may be impacted: - a2g 2020.0.1 - dataprep =0.2.11, =0.2.12 - justblast 2020.0.4 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-387...

sphinxcontrib-jupyter (>=0.5.4, <=0.5.5) potentially affected by CVE-2021-42343 via dask (2.5.2)

dask PYPI version 2.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on dask and may be impacted: - sphinxcontrib-jupyter =0.5.4, =0.5.5 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-387...

complai-test (0.1.0) potentially affected by CVE-2021-42343 via dask (2.3.0)

dask PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on dask and may be impacted: - complai-test 0.1.0 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-387...

utoolbox-core (>=0.0.2, <=0.0.22.dev6) potentially affected by CVE-2021-42343 via dask (2.16.0)

dask PYPI version 2.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on dask and may be impacted: - utoolbox-core =0.0.2, =0.0.22.dev6 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-387...

pybnf (>=0.3.1, <=1.1.6) potentially affected by CVE-2021-42343 via dask (0.20.0)

dask PYPI version 0.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on dask and may be impacted: - pybnf =0.3.1, =1.1.6 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-387...

easyvvuq (>=0.5.2.1, <=0.5.2.2), pdfner (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2021-42343 via dask (2.9.0)

dask PYPI version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on dask and may be impacted: - easyvvuq =0.5.2.1, =0.1.0, =0.0.7, =3.2.13, =3.4.5 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-387...

dataprep (>=0.2.13, <=0.2.14), esi-acme (>=0.1.0.dev72, <=0.2.0rc2) potentially affected by CVE-2021-42343 via dask (2.25.0)

dask PYPI version 2.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on dask and may be impacted: - dataprep =0.2.13, =0.1.0.dev72, =0.2.0rc2 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-387...

hub (>=0.9.0.0, <=1.0.0b5), hypycube (0.0.0a0) +2 more potentially affected by CVE-2021-42343 via dask (2.20.0)

dask PYPI version 2.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on dask and may be impacted: - hub =0.9.0.0, =0.6.5, =0.0.22.dev7, =0.0.24.dev0 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-387...

sdutils (2.4.0) potentially affected by CVE-2021-42343 via dask (2.8.0)

dask PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on dask and may be impacted: - sdutils 2.4.0 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-387...

shot-detector (>=0.0.4.dev68, <=0.0.5.dev3) potentially affected by CVE-2021-42343 via dask (0.11.0)

dask PYPI version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on dask and may be impacted: - shot-detector =0.0.4.dev68, =0.0.5.dev3 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-387...

modelcreator (0.9.3) potentially affected by CVE-2021-42343 via dask (2.19.0)

dask PYPI version 2.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on dask and may be impacted: - modelcreator 0.9.3 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-387...

sdutils (2.5.0) potentially affected by CVE-2021-42343 via dask (2.10.1)

dask PYPI version 2.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on dask and may be impacted: - sdutils 2.5.0 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-387...

subaligner (>=0.0.6rc1, <=0.2.1) potentially affected by CVE-2021-42343 via dask (0.15.0)

dask PYPI version 0.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on dask and may be impacted: - subaligner =0.0.6rc1, =0.2.1 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-387...

pdf2dataset (>=0.4.0a0, <=0.5.3) potentially affected by CVE-2021-42343 via dask (2.23.0)

dask PYPI version 2.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on dask and may be impacted: - pdf2dataset =0.4.0a0, =0.5.3 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-387...

cdp-backend (>=3.0.0.dev4, <=3.0.0.dev5), covsirphy (>=2.15.0, <=2.20.2) +6 more potentially affected by CVE-2021-42343 via dask (2020.12.0)

dask PYPI version 2020.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on dask and may be impacted: - cdp-backend =3.0.0.dev4, =2.15.0, =0.6.7, =0.1.0, =9.1.2, =0.1.0, =0.1.2 - water-masses 2021.1.0a1 Source cves: CVE-2021-42343 Source advisory:...

cellphonedbu (>=1.1.1.6, <=1.1.1.7), dagster-dask (>=0.5.0rc4, <=0.6.4) +2 more potentially affected by CVE-2021-42343 via distributed (1.28.1)

distributed PYPI version 1.28.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - cellphonedbu =1.1.1.6, =0.5.0rc4, =0.5.0, =0.5.5 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-871...

dask-janelia (0.1.2), fibsem-tools (>=0.1.3, <=0.1.4) potentially affected by CVE-2021-42343 via distributed (2020.12.0)

distributed PYPI version 2020.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-janelia 0.1.2 - fibsem-tools =0.1.3, =0.1.4 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-871...

dask-rasterio (>=0.1.0, <=0.2.1) potentially affected by CVE-2021-42343 via dask (0.17.5)

dask PYPI version 0.17.5 is affected by a known vulnerability. The following packages have a transitive dependency on dask and may be impacted: - dask-rasterio =0.1.0, =0.2.1 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-387...