c7n-azure (0.7.8), erpbrasil-assinatura (1.0.2) +2 more potentially affected by CVE-2026-69248 via cryptography (3.3.0)

cryptography PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - c7n-azure 0.7.8 - erpbrasil-assinatura 1.0.2 - myjwt 1.2.0 - swimlane-platform 10.6.0 Source cves: CVE-2026-69248 Source advisory:...

c7n-azure (0.7.8), erpbrasil-assinatura (1.0.2) +2 more potentially affected by CVE-2026-69249 via cryptography (3.3.0)

cryptography PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - c7n-azure 0.7.8 - erpbrasil-assinatura 1.0.2 - myjwt 1.2.0 - swimlane-platform 10.6.0 Source cves: CVE-2026-69249 Source advisory:...

erpbrasil-assinatura (>=0.5.1, <=0.5.2) potentially affected by CVE-2025-48995 via signxml (2.8.0)

signxml PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on signxml and may be impacted: - erpbrasil-assinatura =0.5.1, =0.5.2 Source cves: CVE-2025-48995 Source advisory: OSV:PYSEC-2026-1922...

erpbrasil-assinatura (>=1.0.2, <=1.2.0) potentially affected by CVE-2025-48994 via signxml (2.8.1)

signxml PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on signxml and may be impacted: - erpbrasil-assinatura =1.0.2, =1.2.0 Source cves: CVE-2025-48994 Source advisory: OSV:PYSEC-2026-1921...

erpbrasil-assinatura (>=1.0.2, <=1.2.0) potentially affected by CVE-2025-48995 via signxml (2.8.1)

signxml PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on signxml and may be impacted: - erpbrasil-assinatura =1.0.2, =1.2.0 Source cves: CVE-2025-48995 Source advisory: OSV:PYSEC-2026-1922...

erpbrasil-assinatura (1.4.0) potentially affected by CVE-2025-48994 via signxml (2.8.2)

signxml PYPI version 2.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on signxml and may be impacted: - erpbrasil-assinatura 1.4.0 Source cves: CVE-2025-48994 Source advisory: OSV:PYSEC-2026-1921...

erpbrasil-assinatura (>=0.5.1, <=0.5.2) potentially affected by CVE-2025-48994 via signxml (2.8.0)

signxml PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on signxml and may be impacted: - erpbrasil-assinatura =0.5.1, =0.5.2 Source cves: CVE-2025-48994 Source advisory: OSV:PYSEC-2026-1921...

erpbrasil-assinatura (1.4.0) potentially affected by CVE-2025-48995 via signxml (2.8.2)

signxml PYPI version 2.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on signxml and may be impacted: - erpbrasil-assinatura 1.4.0 Source cves: CVE-2025-48995 Source advisory: OSV:PYSEC-2026-1922...

aos-signer (>=1.6.1, <=1.8.0), cl-sii (>=0.11.1, <=0.26.0) +10 more potentially affected by CVE-2025-48994 via signxml (3.2.2)

signxml PYPI version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on signxml and may be impacted: - aos-signer =1.6.1, =0.11.1, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =1.7.0, =0.9.6, =8.0.2, =9.1.2 Source cves: CVE-2025-48994 Source advisory:...

aos-signer (>=1.6.1, <=1.8.0), cl-sii (>=0.11.1, <=0.26.0) +10 more potentially affected by CVE-2025-48995 via signxml (3.2.2)

signxml PYPI version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on signxml and may be impacted: - aos-signer =1.6.1, =0.11.1, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =1.7.0, =0.9.6, =8.0.2, =9.1.2 Source cves: CVE-2025-48995 Source advisory:...

c7n-azure (0.7.8), erpbrasil-assinatura (1.0.2) +2 more potentially affected by CVE-2023-50782 via cryptography (3.3.0)

cryptography PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - c7n-azure 0.7.8 - erpbrasil-assinatura 1.0.2 - myjwt 1.2.0 - swimlane-platform 10.6.0 Source cves: CVE-2023-50782 Source advisory:...

c7n-azure (0.7.8), erpbrasil-assinatura (1.0.2) +2 more potentially affected by CVE-2026-34073 via cryptography (3.3.0)

cryptography PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - c7n-azure 0.7.8 - erpbrasil-assinatura 1.0.2 - myjwt 1.2.0 - swimlane-platform 10.6.0 Source cves: CVE-2026-34073 Source advisory:...

c7n-azure (0.7.8), erpbrasil-assinatura (1.0.2) +2 more potentially affected by CVE-2026-34073 via cryptography (3.3.0)

cryptography PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - c7n-azure 0.7.8 - erpbrasil-assinatura 1.0.2 - myjwt 1.2.0 - swimlane-platform 10.6.0 Source cves: CVE-2026-34073 Source advisory:...

c7n-azure (0.7.8), erpbrasil-assinatura (1.0.2) +2 more potentially affected by CVE-2026-26007 via cryptography (3.3.0)

cryptography PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - c7n-azure 0.7.8 - erpbrasil-assinatura 1.0.2 - myjwt 1.2.0 - swimlane-platform 10.6.0 Source cves: CVE-2026-26007 Source advisory:...

c7n-azure (0.7.8), erpbrasil-assinatura (1.0.2) +2 more potentially affected by CVE-2026-26007 via cryptography (3.3.0)

cryptography PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - c7n-azure 0.7.8 - erpbrasil-assinatura 1.0.2 - myjwt 1.2.0 - swimlane-platform 10.6.0 Source cves: CVE-2026-26007 Source advisory:...

erpbrasil-assinatura (>=1.0.2, <=1.2.0) potentially affected by CVE-2025-48994 via signxml (2.8.1)

signxml PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on signxml and may be impacted: - erpbrasil-assinatura =1.0.2, =1.2.0 Source cves: CVE-2025-48994 Source advisory: OSV:GHSA-6VX8-PCWV-XHF4...

erpbrasil-assinatura (>=0.5.1, <=0.5.2) potentially affected by CVE-2025-48994 via signxml (2.8.0)

signxml PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on signxml and may be impacted: - erpbrasil-assinatura =0.5.1, =0.5.2 Source cves: CVE-2025-48994 Source advisory: OSV:GHSA-6VX8-PCWV-XHF4...

erpbrasil-assinatura (1.4.0) potentially affected by CVE-2025-48994 via signxml (2.8.2)

signxml PYPI version 2.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on signxml and may be impacted: - erpbrasil-assinatura 1.4.0 Source cves: CVE-2025-48994 Source advisory: OSV:GHSA-6VX8-PCWV-XHF4...

erpbrasil-assinatura (>=1.0.2, <=1.2.0) potentially affected by CVE-2025-48995 via signxml (2.8.1)

signxml PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on signxml and may be impacted: - erpbrasil-assinatura =1.0.2, =1.2.0 Source cves: CVE-2025-48995 Source advisory: OSV:GHSA-GMHF-GG8W-JW42...

erpbrasil-assinatura (1.4.0) potentially affected by CVE-2025-48995 via signxml (2.8.2)

signxml PYPI version 2.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on signxml and may be impacted: - erpbrasil-assinatura 1.4.0 Source cves: CVE-2025-48995 Source advisory: OSV:GHSA-GMHF-GG8W-JW42...