Malicious code in dependent-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 70f70c2dd1e2fa144fb729148ad1259433561dcfc205e028a514ea1fc4c6a65a The OpenSSF Package Analysis project identified 'dependent-package' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

modoboa-automua (=1.0.0) potentially affected by CVE-2023-0398 via modoboa (=1.17.0)

modoboa PYPI version =1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on modoboa and may be impacted: - modoboa-automua =1.0.0 Source cves: CVE-2023-0398 Source advisory: OSV:GHSA-V9GJ-5RGP-W33R...

abmarl (>=0.1.1 <=0.1.3), agrothon (>=1.1.5 <=1.3.2) +92 more potentially affected by CVE-2021-29591 via tensorflow (>=2.4.0 <=2.4.1)

tensorflow PYPI version =2.4.0, =0.1.1, =1.1.5, =2.1.0, =0.0.1, =0.0.6, =0.1.0, =1.4.0, =1.2.2, =20210221.0.0, =0.7.2, =0.0.0, =0.0.0.post0 and more Source cves: CVE-2021-29591 Source advisory: OSV:GHSA-CWV3-863G-39VX...

[SECURITY] Fedora 17 Update: wicd-1.7.2.1-1.fc17

Wicd is designed to give the user as much control over behavior of network connections as possible. Every network, both wired and wireless, has its own profile with its own configuration options and connection behavior. Wicd will try to automatically connect only to networks the user specifies it...