dataprep (>=0.2.10a0, <=0.2.13.post2) potentially affected by CVE-2021-42343 via distributed (2.10.0)

distributed PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dataprep =0.2.10a0, =0.2.13.post2 Source cves: CVE-2021-42343 Source advisory: OSV:GHSA-HWQR-F3V9-HWXR...

hypycube (0.0.0a0), prefect (>=0.9.5, <=0.12.2) +2 more potentially affected by CVE-2021-42343 via distributed (2.20.0)

distributed PYPI version 2.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - hypycube 0.0.0a0 - prefect =0.9.5, =0.6.5, =0.0.22.dev7, =0.0.24.dev0 Source cves: CVE-2021-42343 Source advisory: OSV:GHSA-HWQR-F3V9-HWX...

azureml-automl-dnn-nlp (>=1.37.0, <=1.46.1.post1), azureml-automl-dnn-vision (>=1.37.0, <=1.46.1) +31 more potentially affected by CVE-2021-42343 via distributed (2.30.1)

distributed PYPI version 2.30.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - azureml-automl-dnn-nlp =1.37.0, =1.37.0, =1.34.0, =1.37.0, =1.37.0, =0.1.0, =0.9.22.post0, =0.1.0, =0.1.0, =0.1.0a1, =0.0.5, =0.0.5, =0.1...

autogluon (>=0.0.5, <=0.0.7b17042020), azureml-automl-dnn-nlp (>=1.37.0, <=1.48.0.post1) +74 more potentially affected by CVE-2021-42343 via distributed (>=1.13.0, <=2021.9.1)

distributed PYPI version =1.13.0, =0.0.5, =1.37.0, =1.37.0, =1.34.0, =1.37.0, =1.37.0, =0.1.19008.12a1, =1.33.1, =3.0.0.dev4, =1.1.1.6, =0.1.0, =0.2.1 and more Source cves: CVE-2021-42343 Source advisory: GHSA-HWQR-F3V9-HWXR...

elfi (0.3.1) potentially affected by CVE-2021-42343 via distributed (1.14.3)

distributed PYPI version 1.14.3 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - elfi 0.3.1 Source cves: CVE-2021-42343 Source advisory: OSV:GHSA-HWQR-F3V9-HWXR...

pp-role-mining (>=0.0.1, <=0.0.6) potentially affected by CVE-2021-42343 via distributed (1.21.8)

distributed PYPI version 1.21.8 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - pp-role-mining =0.0.1, =0.0.6 Source cves: CVE-2021-42343 Source advisory: OSV:GHSA-HWQR-F3V9-HWXR...

pybnf (>=0.3.1, <=1.1.6) potentially affected by CVE-2021-42343 via distributed (1.24.0)

distributed PYPI version 1.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - pybnf =0.3.1, =1.1.6 Source cves: CVE-2021-42343 Source advisory: OSV:GHSA-HWQR-F3V9-HWXR...

libertem (>=0.2.0, <=0.2.2) potentially affected by CVE-2021-42343 via distributed (1.27.1)

distributed PYPI version 1.27.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - libertem =0.2.0, =0.2.2 Source cves: CVE-2021-42343 Source advisory: OSV:GHSA-HWQR-F3V9-HWXR...

trenchripper (>=0.0.4, <=0.2.1) potentially affected by CVE-2021-42343 via distributed (2.12.0)

distributed PYPI version 2.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - trenchripper =0.0.4, =0.2.1 Source cves: CVE-2021-42343 Source advisory: OSV:GHSA-HWQR-F3V9-HWXR...

prefect (>=0.6.0, <=0.9.3), prefect-ds (>=0.1.0, <=0.1.1) +1 more potentially affected by CVE-2021-42343 via distributed (2.16.0)

distributed PYPI version 2.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - prefect =0.6.0, =0.1.0, =0.0.2, =0.0.22.dev6 Source cves: CVE-2021-42343 Source advisory: OSV:GHSA-HWQR-F3V9-HWXR...

noah-vega (>=1.2.0, <=1.7.1) potentially affected by CVE-2021-42343 via distributed (2.18.0)

distributed PYPI version 2.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - noah-vega =1.2.0, =1.7.1 Source cves: CVE-2021-42343 Source advisory: OSV:GHSA-HWQR-F3V9-HWXR...

streaming-anomaly-detection (>=0.0.7, <=0.0.9) potentially affected by CVE-2021-42343 via distributed (2.21.0)

distributed PYPI version 2.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - streaming-anomaly-detection =0.0.7, =0.0.9 Source cves: CVE-2021-42343 Source advisory: OSV:GHSA-HWQR-F3V9-HWXR...

devito (4.2.3) potentially affected by CVE-2021-42343 via distributed (2.22.0)

distributed PYPI version 2.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - devito 4.2.3 Source cves: CVE-2021-42343 Source advisory: OSV:GHSA-HWQR-F3V9-HWXR...

esi-acme (>=0.1.0.dev72, <=0.2.0rc2) potentially affected by CVE-2021-42343 via distributed (2.25.0)

distributed PYPI version 2.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - esi-acme =0.1.0.dev72, =0.2.0rc2 Source cves: CVE-2021-42343 Source advisory: OSV:GHSA-HWQR-F3V9-HWXR...

oracle-ads (>=2.3.3, <=2.4.1) potentially affected by CVE-2021-42343 via distributed (2.30.0)

distributed PYPI version 2.30.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - oracle-ads =2.3.3, =2.4.1 Source cves: CVE-2021-42343 Source advisory: OSV:GHSA-HWQR-F3V9-HWXR...

dask-janelia (0.1.2), fibsem-tools (>=0.1.3, <=0.1.4) potentially affected by CVE-2021-42343 via distributed (2020.12.0)

distributed PYPI version 2020.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-janelia 0.1.2 - fibsem-tools =0.1.3, =0.1.4 Source cves: CVE-2021-42343 Source advisory: OSV:GHSA-HWQR-F3V9-HWXR...

azureml-automl-dnn-nlp (>=1.47.0, <=1.48.0.post1), azureml-automl-dnn-vision (>=1.47.0, <=1.48.0) +26 more potentially affected by CVE-2021-42343 via distributed (>=2021.1.1, <=2021.9.1)

distributed PYPI version =2021.1.1, =1.47.0, =1.47.0, =1.47.0, =1.47.0, =1.47.0.post1, =1.33.1, =3.0.0.dev4, =0.19.0a210422, =4.3.0, =0.0.1.dev43, =0.0.0, =0.3.7, =0.3.17 - gam 1.1.1 and more Source cves: CVE-2021-42343 Source advisory: OSV:GHSA-HWQR-F3V9-HWXR...

Huawei HarmonyOS Denial of Service Vulnerability (CNVD-2022-57611)

Huawei HarmonyOS is an operating system from Huawei, China. It provides a microkernel-based distributed operating system. A security vulnerability exists in the graphics component of Huawei HarmonyOS, stemming from the existence of a multi-threaded access database for the graphics acceleration...

Git Access Control Privilege Escalation

The vulnerability of the distributed Git version control system relates to the possibility of creating a folder named “C:.git”. Exploiting this vulnerability could allow an attacker to execute arbitrary commands...

FreeBSD : git -- privilege escalation (b99f99f6-021e-11ed-8c6f-000c29ffbb6c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the b99f99f6-021e-11ed-8c6f-000c29ffbb6c advisory. - Git is a distributed revision control system. Git prior to versions 2.37.1, 2.36.2, 2.35.4, 2.34.4,...