cellphonedbu (>=1.1.1.6, <=1.1.1.7), dagster-dask (>=0.5.0rc4, <=0.6.4) +2 more potentially affected by CVE-2021-42343 via distributed (1.28.1)

distributed PYPI version 1.28.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - cellphonedbu =1.1.1.6, =0.5.0rc4, =0.5.0, =0.5.5 Source cves: CVE-2021-42343 Source advisory: OSV:GHSA-HWQR-F3V9-HWXR...

dataverk (0.2.13) potentially affected by CVE-2021-42343 via distributed (2.5.1)

distributed PYPI version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dataverk 0.2.13 Source cves: CVE-2021-42343 Source advisory: OSV:GHSA-HWQR-F3V9-HWXR...

complai-test (0.1.0), sphinxcontrib-jupyter (>=0.5.4, <=0.5.5) potentially affected by CVE-2021-42343 via distributed (2.5.2)

distributed PYPI version 2.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - complai-test 0.1.0 - sphinxcontrib-jupyter =0.5.4, =0.5.5 Source cves: CVE-2021-42343 Source advisory: OSV:GHSA-HWQR-F3V9-HWXR...

autogluon (>=0.0.5, <=0.0.7b17042020) potentially affected by CVE-2021-42343 via distributed (2.6.0)

distributed PYPI version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - autogluon =0.0.5, =0.0.7b17042020 Source cves: CVE-2021-42343 Source advisory: OSV:GHSA-HWQR-F3V9-HWXR...

dataprep (>=0.2.10a0, <=0.2.13.post2) potentially affected by CVE-2021-42343 via distributed (2.10.0)

distributed PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dataprep =0.2.10a0, =0.2.13.post2 Source cves: CVE-2021-42343 Source advisory: OSV:GHSA-HWQR-F3V9-HWXR...

trenchripper (>=0.0.4, <=0.2.1) potentially affected by CVE-2021-42343 via distributed (2.12.0)

distributed PYPI version 2.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - trenchripper =0.0.4, =0.2.1 Source cves: CVE-2021-42343 Source advisory: OSV:GHSA-HWQR-F3V9-HWXR...

autogluon (>=0.0.5, <=0.0.7b17042020), azureml-automl-dnn-nlp (>=1.37.0, <=1.48.0.post1) +74 more potentially affected by CVE-2021-42343 via distributed (>=1.13.0, <=2021.9.1)

distributed PYPI version =1.13.0, =0.0.5, =1.37.0, =1.37.0, =1.34.0, =1.37.0, =1.37.0, =0.1.19008.12a1, =1.33.1, =3.0.0.dev4, =1.1.1.6, =0.1.0, =0.2.1 and more Source cves: CVE-2021-42343 Source advisory: GHSA-HWQR-F3V9-HWXR...

elfi (0.3.1) potentially affected by CVE-2021-42343 via distributed (1.14.3)

distributed PYPI version 1.14.3 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - elfi 0.3.1 Source cves: CVE-2021-42343 Source advisory: OSV:GHSA-HWQR-F3V9-HWXR...

pp-role-mining (>=0.0.1, <=0.0.6) potentially affected by CVE-2021-42343 via distributed (1.21.8)

distributed PYPI version 1.21.8 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - pp-role-mining =0.0.1, =0.0.6 Source cves: CVE-2021-42343 Source advisory: OSV:GHSA-HWQR-F3V9-HWXR...

libertem (>=0.2.0, <=0.2.2) potentially affected by CVE-2021-42343 via distributed (1.27.1)

distributed PYPI version 1.27.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - libertem =0.2.0, =0.2.2 Source cves: CVE-2021-42343 Source advisory: OSV:GHSA-HWQR-F3V9-HWXR...

pysmfish (>=0.0.0, <=0.0.5), tsfresh (0.11.0) potentially affected by CVE-2021-42343 via distributed (1.18.3)

distributed PYPI version 1.18.3 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - pysmfish =0.0.0, =0.0.5 - tsfresh 0.11.0 Source cves: CVE-2021-42343 Source advisory: OSV:GHSA-HWQR-F3V9-HWXR...

dask-janelia (0.1.2), fibsem-tools (>=0.1.3, <=0.1.4) potentially affected by CVE-2021-42343 via distributed (2020.12.0)

distributed PYPI version 2020.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-janelia 0.1.2 - fibsem-tools =0.1.3, =0.1.4 Source cves: CVE-2021-42343 Source advisory: OSV:GHSA-HWQR-F3V9-HWXR...

azuremlftk (>=0.1.19008.12a1, <=0.1.19032.1) potentially affected by CVE-2021-42343 via distributed (1.23.1)

distributed PYPI version 1.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - azuremlftk =0.1.19008.12a1, =0.1.19032.1 Source cves: CVE-2021-42343 Source advisory: OSV:GHSA-HWQR-F3V9-HWXR...

pybnf (>=0.3.1, <=1.1.6) potentially affected by CVE-2021-42343 via distributed (1.24.0)

distributed PYPI version 1.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - pybnf =0.3.1, =1.1.6 Source cves: CVE-2021-42343 Source advisory: OSV:GHSA-HWQR-F3V9-HWXR...

azureml-automl-dnn-nlp (>=1.47.0, <=1.48.0.post1), azureml-automl-dnn-vision (>=1.47.0, <=1.48.0) +26 more potentially affected by CVE-2021-42343 via distributed (>=2021.1.1, <=2021.9.1)

distributed PYPI version =2021.1.1, =1.47.0, =1.47.0, =1.47.0, =1.47.0, =1.47.0.post1, =1.33.1, =3.0.0.dev4, =0.19.0a210422, =4.3.0, =2021.8.2.dev2, =0.0.0, =0.3.7, =0.3.17 - gam 1.1.1 and more Source cves: CVE-2021-42343 Source advisory: OSV:GHSA-HWQR-F3V9-HWXR...

Huawei HarmonyOS Denial of Service Vulnerability (CNVD-2022-57611)

Huawei HarmonyOS is an operating system from Huawei, China. It provides a microkernel-based distributed operating system. A security vulnerability exists in the graphics component of Huawei HarmonyOS, stemming from the existence of a multi-threaded access database for the graphics acceleration...

Git Access Control Privilege Escalation

The vulnerability of the distributed Git version control system relates to the possibility of creating a folder named “C:.git”. Exploiting this vulnerability could allow an attacker to execute arbitrary commands...

FreeBSD : git -- privilege escalation (b99f99f6-021e-11ed-8c6f-000c29ffbb6c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the b99f99f6-021e-11ed-8c6f-000c29ffbb6c advisory. - Git is a distributed revision control system. Git prior to versions 2.37.1, 2.36.2, 2.35.4, 2.34.4,...

Cilantro path traversal vulnerability

cilantro is an open source task runner from Deutsches Archäologisches Institut in Germany. Designed to manage long running distributed jobs that operate on file system objects . cilantro version 0.0.4 and earlier versions of a security vulnerability , the vulnerability stems from Flask's sendfile...

Huawei HarmonyOS Information Disclosure Vulnerability (CNVD-2022-61608)

Huawei HarmonyOS is an operating system from Huawei China. It provides a microkernel-based, fully distributed operating system. Huawei HarmonyOS contains a security vulnerability that could be exploited by attackers to compromise device confidentiality...