classy-core (>=0.2.0.dev20211228, <=0.2.0.dev20211230), discord-py-interactions (>=4.0.0, <=4.0.1) +2 more potentially affected by CVE-2026-32274 via black (21.11.0b1)

black PYPI version 21.11.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - classy-core =0.2.0.dev20211228, =4.0.0, =0.0.4, =0.0.8 Source cves: CVE-2026-32274 Source advisory: OSV:PYSEC-2026-2121...

acceldata-o2a (1.0.0), build-harness (0.2.1) +5 more potentially affected by CVE-2026-32274 via black (23.1.0a1)

black PYPI version 23.1.0a1 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - acceldata-o2a 1.0.0 - build-harness 0.2.1 - eth-brownie =1.15.0, =2.0.0, =2.0.1 - o2a-acceldata2 2.0.1 - pipenv-setup 2.2.1 - simmate 0.0.0.dev8...

acceldata-o2a (1.0.0), build-harness (0.2.1) +5 more potentially affected by CVE-2026-31900 via black (23.1.0a1)

black PYPI version 23.1.0a1 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - acceldata-o2a 1.0.0 - build-harness 0.2.1 - eth-brownie =1.15.0, =2.0.0, =2.0.1 - o2a-acceldata2 2.0.1 - pipenv-setup 2.2.1 - simmate 0.0.0.dev8...

acceldata-o2a (1.0.0), build-harness (0.2.1) +5 more potentially affected by CVE-2024-21503 via black (23.1.0a1)

black PYPI version 23.1.0a1 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - acceldata-o2a 1.0.0 - build-harness 0.2.1 - eth-brownie =1.15.0, =2.0.0, =2.0.1 - o2a-acceldata2 2.0.1 - pipenv-setup 2.2.1 - simmate 0.0.0.dev8...

classy-core (>=0.2.0.dev20211228, <=0.2.0.dev20211230), discord-py-interactions (>=4.0.0, <=4.0.1) +2 more potentially affected by CVE-2024-21503 via black (21.11.0b1)

black PYPI version 21.11.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - classy-core =0.2.0.dev20211228, =4.0.0, =0.0.4, =0.0.8 Source cves: CVE-2024-21503 Source advisory: OSV:GHSA-FJ7X-Q9J7-G6Q6...

classy-core (>=0.2.0.dev20211228, <=0.2.0.dev20211230), discord-py-interactions (>=4.0.0, <=4.0.1) +2 more potentially affected by CVE-2024-21503 via black (21.11.0b1)

black PYPI version 21.11.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - classy-core =0.2.0.dev20211228, =4.0.0, =0.0.4, =0.0.8 Source cves: CVE-2024-21503 Source advisory: OSV:PYSEC-2024-48...

ape-dasy (0.1.0), ape-safe (0.6.0) +8 more potentially affected by CVE-2023-42443 via vyper (>=0.3.6, <=0.3.9)

vyper PYPI version =0.3.6, =0.5.2, =0.5.2, =0.2.0, =0.7.2, =1.19.1, =0.6.0, =2.0.0a1, =1.3.1, =3.4.6 Source cves: CVE-2023-42443 Source advisory: OSV:GHSA-C647-PXM2-C52W...

MAL-2022-2860 Malicious code in eth-brownie (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7db0964a5c4a1b7436c8222bd442b65fab875a799d6377abad8376fe090d6c7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eth-brownie (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7db0964a5c4a1b7436c8222bd442b65fab875a799d6377abad8376fe090d6c7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...