3m (=0.1.0), aaa-ml-datasets-course (=1.0.0) +1429 more potentially affected by CVE-2024-11394 via transformers (>=4.0.0 <=4.47.1)

transformers PYPI version =4.0.0, =0.1.1, =0.1.0, =0.0.3, =0.0.0.dev20230804, =0.1.0, =0.3.0, =0.1.0, =0.2.5, =0.0.1, =0.1.0, =0.1.1 - advtok =0.0.2 and more Source cves: CVE-2024-11394 Source advisory: SNYK:PYTHON-TRANSFORMERS-8400820...

Fedora 38 : capnproto / fastnetmon / librime / rr / sonic-visualiser (2022-ef11bad952)

The remote Fedora 38 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2022-ef11bad952 advisory. Update capnproto to version 0.10.3 to address CVE-2022-46149. Dependent packages were rebuilt for both the fix for the security issue and the capnproto SONAM...

au.csiro.pathling:encoders (>=5.1.0 <=7.1.0), au.csiro.pathling:fhir-server (>=5.3.1 <=7.1.0) +287 more potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.r4 (>=0.0.1 <=6.3.9)

ca.uhn.hapi.fhir:org.hl7.fhir.r4 MAVEN version =0.0.1, =5.1.0, =5.3.1, =6.2.1, =5.3.1, =5.3.1, =5.3.0, =0.0.9, =5.6.5, =4.0.0, =5.6.5, =4.1.0, =4.0.3, =4.1.0, =4.0.0, =4.0.0, =7.4.5 and more Source cves: CVE-2024-51132 Source advisory: OSV:GHSA-4CF2-CXP3-RJR7...

a-data-processing (=0.0.1), ab-data-processing (=0.0.1) +601 more potentially affected by CVE-2024-8309 via langchain (>=0.0.100 <=0.1.9)

langchain PYPI version =0.0.100, =0.1.0, =0.1.7, =0.2.1, =0.1.0, =0.0.2, =0.1.0, =0.1.0, =0.0.18, =0.1.5, =0.2.0, =0.7.1 and more Source cves: CVE-2024-8309 Source advisory: OSV:GHSA-45PG-36P6-83V9...

10minions-engine (>=0.0.1 <=0.0.4), @0xd541ecb3/byte-babe (>=1.0.0 <=1.2.1) +507 more potentially affected by CVE-2024-7774 via langchain (>=0.0.100 <=0.2.10)

langchain NPM version =0.0.100, =0.0.1, =1.0.0, =0.1.4, =0.0.11, =0.0.0, =0.0.2-alpha, =0.0.33-alpha2, =3.114.0, =1.0.0, =0.1.0, =2.0.68, =0.0.2, =0.1.0, =0.1.4 - @builderbot-plugins/free-gpt =0.0.6-alpha.0 and more Source cves: CVE-2024-7774 Source advisory: OSV:GHSA-HC5W-C9F8-9CC4...

acedeploy (>=2.4.15 <=2.4.115), apache-airflow-providers-snowflake (>=2.4.0 <=2.5.1rc1) +121 more potentially affected by CVE-2024-49750 via snowflake-connector-python (>=1.7.11 <=3.12.2)

snowflake-connector-python PYPI version =1.7.11, =2.4.15, =2.4.0, =0.0.4, =0.1.0, =1.13.21, =20230717.1.0, =0.4.0, =0.1.0, =0.4.0, =0.5.1, =1.0.5, =1.0.6 and more Source cves: CVE-2024-49750 Source advisory: OSV:GHSA-5VVG-PVHP-HV2M...

academic-chatgpt (>=0.3.0 <=0.4.1), africanwhisper (>=0.2.1 <=0.9.0) +161 more potentially affected by CVE-2024-47084 via gradio (>=1.7.7 <=4.43.0)

gradio PYPI version =1.7.7, =0.3.0, =0.2.1, =0.1.5, =0.0.6, =0.0.2, =0.8.11, =0.4.0, =0.7.0.dev134, =0.1.0rc1, =0.1.0rc2 - aqueduct-llm =0.0.1 and more Source cves: CVE-2024-47084 Source advisory: OSV:PYSEC-2024-196...

academic-chatgpt (>=0.3.0 <=0.4.1), africanwhisper (>=0.2.1 <=0.9.0) +161 more potentially affected by CVE-2024-47166 via gradio (>=1.7.7 <=4.43.0)

gradio PYPI version =1.7.7, =0.3.0, =0.2.1, =0.1.5, =0.0.6, =0.0.2, =0.8.11, =0.4.0, =0.7.0.dev134, =0.1.0rc1, =0.1.0rc2 - aqueduct-llm =0.0.1 and more Source cves: CVE-2024-47166 Source advisory: OSV:PYSEC-2024-197...

boa_cli (=0.16.0), click_and_load (=0.2.0) +1 more potentially affected by CVE-2024-43357 +1 more via boa_engine (=0.16.0)

boaengine CARGO version =0.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on boaengine and may be impacted: - boacli =0.16.0 - clickandload =0.2.0 - zippyst =5.0.0 Source cves: CVE-2024-43357, CVE-2024-43367 Source advisory: OSV:GHSA-F67Q-WR6W-23JQ...

advanced-data-generator (=1.0.0), agentbruno (>=0.0.2 <=0.0.5) +227 more potentially affected by CVE-2024-42474 via streamlit (>=0.49.0 <=1.36.0)

streamlit PYPI version =0.49.0, =0.0.2, =0.0.5, =0.31.0, =1.0.4, =0.8.0, =0.4.1, =1.6.1, =0.2.0, =0.7.0 - asdm =0.0.1 - askquinta =0.1.1 - audio-recorder-streamlit =0.0.9 and more Source cves: CVE-2024-42474 Source advisory: OSV:GHSA-RXFF-VR5R-8CJ5...

acfunsdk (=0.8.3), aiocfscrape (=0.0.6) +9 more potentially affected by CVE-2024-28397 via js2py (>=0.50.0 <=0.71.0)

js2py PYPI version =0.50.0, =0.0.20, =0.0.2, =2.4.2, =6.0.1, =0.0.7, =3.0.1, =2021.4.5.post1, =2022.2.20 Source cves: CVE-2024-28397 Source advisory: OSV:GHSA-H95X-26F3-88HR...

ait-dsn (=2.0.0), ait-gui (>=2.4.0 <=2.4.1) potentially affected by CVE-2024-35056 via ait-core (>=2.3.5 <=2.5.2)

ait-core PYPI version =2.3.5, =2.4.0, =2.4.1 Source cves: CVE-2024-35056 Source advisory: OSV:GHSA-GPGJ-XRGW-8MX2...

azure-smtp-relay (>=1.0.0 <=1.0.7), mailrise (>=1.3.0 <=1.4.0) +4 more potentially affected by CVE-2024-34083 via aiosmtpd (>=1.2.0 <=1.4.5)

aiosmtpd PYPI version =1.2.0, =1.0.0, =1.3.0, =0.0.1, =0.2.5, =0.3.3 - yades-smtp =0.1.0 Source cves: CVE-2024-34083 Source advisory: OSV:GHSA-WGJV-9J3Q-JHG8...

ape-dasy (=0.1.0), avotes-parser-cli (>=0.5.5.post5 <=0.5.6) +7 more potentially affected by CVE-2024-32481 via vyper (>=0.3.9 <=0.4.0)

vyper PYPI version =0.3.9, =0.5.5.post5, =0.5.5.post4, =0.0.1, =0.3.4, =0.8.31, =0.0.9, =3.4.7, =4.6.1 Source cves: CVE-2024-32481 Source advisory: OSV:PYSEC-2024-246...

21cmpsdenoiser (>=1.0.0 <=1.0.2), 2404-segmentation-pipeline (>=0.1.0 <=1.0.0) +24678 more potentially affected by CVE-2024-31583 via torch (>=1.0.0 <=2.1.2)

torch PYPI version =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.10.5, =0.10.13 and more Source cves: CVE-2024-31583 Source advisory: OSV:PYSEC-2024-251...

bem-register (>=1.0.0 <=1.0.5), itstep_server (=0.0.1) +5 more potentially affected by CVE-2023-52555 via mongo-express (>=0.19.0 <=1.0.0-alpha.1)

mongo-express NPM version =0.19.0, =1.0.0, =0.1.1, =1.0.0, =4.6.12, =1.5.0, =1.6.1 Source cves: CVE-2023-52555 Source advisory: OSV:GHSA-FFFG-CWC9-XVJ7...

abi-ds-utils (=1.0.1), acceldata-o2a (=1.0.0) +142 more potentially affected by CVE-2024-27906 via apache-airflow (>=1.8.2 <=2.8.1)

apache-airflow PYPI version =1.8.2, =0.8.44.4, =1.4.0.3.post4, =1.4.0.3.post3, =0.1.0rc3, =0.1.0, =0.2.1, =0.2.9b1, =0.4.0, =0.1.0a1, =0.6.0, =0.1.1, =0.1.1, =1.10.6 and more Source cves: CVE-2024-27906 Source advisory: OSV:PYSEC-2024-245...

2vyper (=0.3.0), ape-dasy (=0.1.0) +30 more potentially affected by CVE-2024-26149 via vyper (>=0.1.0b12 <=0.4.0)

vyper PYPI version =0.1.0b12, =0.7.1, =0.1.0, =0.0.0, =0.0.0, =0.0.5, =0.1.0, =0.1.0, =0.7.2, =0.1.10.0, =1.0.1, =0.1.0, =1.4.0, =1.20.7 and more Source cves: CVE-2024-26149 Source advisory: OSV:PYSEC-2024-164...

africa.absa:inception-application (>=1.0.0 <=1.2.0), app.fmgp:scala-did-docs_3 (>=0.1.0-M16 <=0.1.0-M33) +3378 more potentially affected by CVE-2024-1635 via io.undertow:undertow-core (>=1.0.0.Alpha1 <=2.2.30.Final)

io.undertow:undertow-core MAVEN version =1.0.0.Alpha1, =1.0.0, =0.1.0-M16, =1.0.0, =0.4.0, =2.0.0, =1.0.2, =1.0.0, =1.2.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2024-1635 Source advisory: OSV:GHSA-W6QF-42M7-VH68...

auth-token-django (>=0.0.1 <=0.0.5), bfactory (>=0.4.0 <=0.4.4) +45 more potentially affected by CVE-2024-24680 via django (>=4.2.0 <=4.2.1)

django PYPI version =4.2.0, =0.0.1, =0.4.0, =5.2.0, =3.1.0, =7.2.2, =39.1.0, =9.3.0, =0.1.0a1, =1.0.0, =1.1.0 - django-descope =1.0.0 and more Source cves: CVE-2024-24680 Source advisory: OSV:GHSA-XXJ9-F6RV-M3X4...